Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3230302e3130382e3139322e302f31382d3234203d3e203230323535.roa
File:                     3230302e3130382e3139322e302f31382d3234203d3e203230323535.roa (raw, json)
Hash identifier:          Q+pOBb8OATXyXdGOLjNbgum9JW6RF0BqMmOQ8IjOlLw=
Subject key identifier:   8C:D4:83:A2:D7:0C:EF:04:7D:92:62:82:0D:53:B8:51:B6:2C:CB:B9
Certificate issuer:       /CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
Certificate serial:       54672BA06C3F41FA7C6DC81EB3C318396EF1C031
Authority key identifier: 63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3230302e3130382e3139322e302f31382d3234203d3e203230323535.roa
Signing time:             Tue 05 Mar 2024 17:45:16 +0000
ROA not before:           Tue 05 Mar 2024 17:40:16 +0000
ROA not after:            Tue 04 Mar 2025 17:45:16 +0000
asID:                     20255
IP address blocks:        200.108.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:67:2b:a0:6c:3f:41:fa:7c:6d:c8:1e:b3:c3:18:39:6e:f1:c0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
        Validity
            Not Before: Mar  5 17:40:16 2024 GMT
            Not After : Mar  4 17:45:16 2025 GMT
        Subject: CN=8CD483A2D70CEF047D9262820D53B851B62CCBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:51:7a:91:98:0a:70:9e:87:07:93:74:8d:
                    3a:79:6d:d4:6f:06:08:c9:9a:c9:ba:ee:82:67:22:
                    42:f6:25:fc:87:29:e0:2d:d7:89:3c:5c:aa:2f:95:
                    2f:b9:9a:d7:33:de:04:1d:08:0c:77:33:2c:d7:b8:
                    f6:1a:23:9b:5a:4d:c3:f2:7d:5b:67:2c:7e:23:07:
                    b7:a6:40:2f:e3:e4:95:f4:73:7e:c4:98:0b:7e:99:
                    38:f5:7b:4d:9d:a0:3e:ea:12:c4:05:59:a2:b6:5e:
                    11:b9:21:01:78:be:ff:5e:93:70:aa:6f:4c:46:17:
                    4c:ea:5e:56:32:c4:7e:24:f8:96:84:82:af:05:13:
                    b3:d3:46:90:b9:a4:80:e3:af:99:f6:63:1f:16:ca:
                    3c:f1:5d:a1:72:62:16:d0:ce:46:4c:6e:80:5a:f8:
                    4f:dc:86:38:cc:40:71:76:ff:85:b6:f3:bd:93:86:
                    b9:42:23:8d:f2:76:5e:58:bd:cf:a4:ee:b7:55:63:
                    67:cd:56:60:11:cc:1f:07:b9:ea:54:3e:3f:cf:5b:
                    ca:82:d7:d7:37:69:ac:cb:56:08:1b:14:06:0d:c5:
                    52:ae:8e:0d:17:c7:67:98:df:23:87:40:28:36:7d:
                    09:bc:21:54:4b:c6:74:39:6b:10:8b:e0:0d:ab:d7:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D4:83:A2:D7:0C:EF:04:7D:92:62:82:0D:53:B8:51:B6:2C:CB:B9
            X509v3 Authority Key Identifier:
                keyid:63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3230302e3130382e3139322e302f31382d3234203d3e203230323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:75:52:01:f6:93:d4:ae:4d:b8:53:f1:0a:4a:b1:ef:6a:9d:
         1f:73:a9:db:a2:ee:21:10:18:2b:f9:5f:ee:92:3b:d9:c4:8c:
         bc:4f:5a:74:82:dc:f3:31:be:ff:cd:75:ea:2a:c9:f5:df:b6:
         86:54:11:94:ef:20:e7:df:5c:74:f9:c7:1a:36:bb:df:cf:97:
         4d:68:1d:af:e1:e6:6d:5a:6d:59:b1:cf:08:01:28:35:57:a6:
         72:8d:32:ba:64:ed:53:b4:74:32:63:b8:87:65:9a:4b:85:6e:
         5a:b0:4d:f9:c3:f3:84:f0:c2:36:63:c7:11:32:cb:5d:e6:3c:
         0b:b5:d6:41:62:ad:92:6a:27:87:38:f7:ba:9f:90:f4:95:02:
         5f:e6:6f:40:11:9e:d9:3e:1c:a3:6e:55:2a:13:c7:0f:b5:f9:
         ea:da:1f:a9:9d:73:e3:7d:bc:49:61:1f:d1:e4:ec:c2:4e:de:
         33:be:5e:03:eb:1a:50:02:f1:70:35:da:75:d7:ce:ab:93:3c:
         9d:b8:f8:7c:de:9b:08:bc:96:e0:01:1f:98:1d:2c:ea:bd:99:
         a8:0b:ee:f1:a0:12:a7:0a:89:d1:aa:b6:f1:d1:dc:7a:28:cd:
         29:5f:d1:e1:24:c9:98:79:80:fc:78:4a:38:1b:19:85:99:49:
         13:f2:13:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org