Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e302e302f31362d3234203d3e203237363531.roa
File:                     3230302e3131312e302e302f31362d3234203d3e203237363531.roa (raw, json)
Hash identifier:          zHJ7CIzVFXpc6NZ2Srgo0SGU9jS9k1dfUlkxmShLTnE=
Subject key identifier:   59:CD:A3:C2:E6:34:83:49:16:A9:74:BE:59:35:51:A5:9E:D5:83:DE
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       1C9F4853066D27B144C4FC336B0ACD3B10B1D76C
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e302e302f31362d3234203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:14:53 +0000
ROA not before:           Tue 05 Mar 2024 18:09:53 +0000
ROA not after:            Tue 04 Mar 2025 18:14:53 +0000
asID:                     27651
IP address blocks:        200.111.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9f:48:53:06:6d:27:b1:44:c4:fc:33:6b:0a:cd:3b:10:b1:d7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:53 2024 GMT
            Not After : Mar  4 18:14:53 2025 GMT
        Subject: CN=59CDA3C2E634834916A974BE593551A59ED583DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:69:c4:25:cd:a1:89:86:de:11:d4:1c:b5:
                    9a:fd:13:cf:72:05:5d:e3:14:07:e0:b4:02:91:03:
                    98:db:03:55:8e:1d:63:5b:a2:22:40:51:f5:f7:ca:
                    7a:80:89:f0:3c:0a:b8:af:9f:c7:d6:c2:82:fe:de:
                    09:1c:28:fd:5c:a4:54:53:44:3e:b9:0c:48:19:2c:
                    fd:8d:5f:26:bb:4d:f1:40:db:a5:04:27:b4:25:48:
                    8e:96:42:b3:99:6d:4b:9d:6c:11:bb:14:36:07:88:
                    80:12:60:e2:7e:dc:8a:5a:17:74:06:ee:d7:3e:02:
                    3b:f7:2e:af:80:a0:40:2f:3b:e9:af:6c:5b:4a:44:
                    87:52:2c:63:43:1d:6c:91:08:89:e5:5b:b6:98:00:
                    0d:01:41:aa:b4:d5:e0:45:15:5c:50:72:6a:1f:da:
                    be:4c:71:b9:9a:7a:fa:24:3d:38:2a:70:b1:18:05:
                    a5:e1:f9:1f:0a:b3:4f:5d:ae:86:cd:f4:a1:e5:c2:
                    35:7e:73:64:8f:33:20:f9:da:f1:d4:78:72:33:95:
                    ae:94:3e:9d:5e:0b:f4:6d:ca:e2:a2:f4:6a:d4:29:
                    74:ba:2e:2a:d4:c6:47:13:09:a1:ec:71:f5:2f:df:
                    fb:7b:74:7a:f3:b0:b0:8c:7a:94:ae:2e:d7:3f:8f:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CD:A3:C2:E6:34:83:49:16:A9:74:BE:59:35:51:A5:9E:D5:83:DE
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e302e302f31362d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.111.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:3b:99:fb:28:11:40:a5:37:ca:01:9c:33:c8:d9:d6:64:3a:
         aa:c7:6a:12:6c:71:d3:ee:15:16:17:2e:30:96:13:75:f0:91:
         89:17:f7:83:b3:51:f4:d9:8e:7f:c2:bc:fc:5e:95:12:29:5f:
         9b:54:4f:94:21:95:43:b5:f5:aa:6f:dd:33:df:77:5a:5f:fc:
         1c:d7:ea:3e:6e:13:93:82:d5:12:65:ba:d3:18:5e:ce:1e:90:
         c2:dd:c8:6f:25:f3:e6:8b:89:51:10:ff:aa:c4:ed:e5:87:68:
         10:a0:9b:98:fb:dd:9a:1c:aa:a8:6c:49:c7:b2:6d:08:40:47:
         ff:d4:53:f0:58:bf:cd:e4:58:98:c3:77:e4:78:77:4e:4d:17:
         d5:69:e1:82:cd:db:02:ff:c2:e2:b9:d4:28:7f:8f:22:76:f3:
         1c:35:13:63:28:57:aa:d8:c5:0b:f0:41:9f:fa:85:75:00:9e:
         69:93:72:2f:28:fd:a3:9a:f3:c5:14:fd:2d:8a:d8:78:aa:b1:
         87:51:ab:56:07:55:e9:8c:81:e3:69:c7:c9:ad:38:19:29:c2:
         86:a3:dd:82:bb:34:8d:2f:da:ee:d5:8f:01:a8:b3:a6:c2:cb:
         13:f4:22:32:37:46:f9:11:62:38:86:df:07:93:04:0e:62:a7:
         3a:24:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:35 2024 by rpki-client on console-fra.rpki-client.org