Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230302e36332e33322e302f32312d3234203d3e203238303135.roa
File:                     3230302e36332e33322e302f32312d3234203d3e203238303135.roa (raw, json)
Hash identifier:          9KkdOVTqI/tzWj5wDkvLo1CkWEVRwo5ZPgjuLbGomIs=
Subject key identifier:   56:C6:98:F2:53:A1:33:AC:6A:63:8A:59:88:DD:02:BE:8F:04:DE:DD
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       0D1AD4BEAD08E5F7409697CE4DA0063AC65D2005
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230302e36332e33322e302f32312d3234203d3e203238303135.roa
Signing time:             Tue 05 Mar 2024 18:11:48 +0000
ROA not before:           Tue 05 Mar 2024 18:06:48 +0000
ROA not after:            Tue 04 Mar 2025 18:11:48 +0000
asID:                     28015
IP address blocks:        200.63.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1a:d4:be:ad:08:e5:f7:40:96:97:ce:4d:a0:06:3a:c6:5d:20:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Mar  5 18:06:48 2024 GMT
            Not After : Mar  4 18:11:48 2025 GMT
        Subject: CN=56C698F253A133AC6A638A5988DD02BE8F04DEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:05:d5:32:bb:75:90:a0:ac:e5:b3:6d:48:
                    1d:d0:c2:1e:b1:cb:0f:e5:88:22:43:77:8b:e2:d8:
                    83:2b:1d:14:2a:16:c9:29:7c:4c:c8:75:5a:c2:33:
                    60:c2:7d:48:1b:7c:ed:56:ab:16:60:c7:95:2c:35:
                    53:32:01:88:48:da:f8:53:ca:51:43:8e:31:aa:e1:
                    1e:b6:21:f5:9d:58:71:59:4e:d8:cc:68:a9:11:3f:
                    de:46:bf:ec:0e:4f:35:0b:4d:db:b1:3a:34:60:0c:
                    0c:36:ff:42:33:24:8a:5b:26:24:86:37:37:54:5b:
                    f7:d1:fb:5b:28:94:d3:a1:e0:8b:60:3f:4f:e6:fe:
                    c4:fa:0b:bd:da:c9:75:89:f0:ac:07:6a:0f:7b:d4:
                    a3:54:03:e3:29:d5:9b:13:96:5e:e5:ae:95:8e:ed:
                    3e:7f:2c:ff:08:e0:82:a7:37:5a:95:10:f0:5d:99:
                    8c:5e:c5:84:c3:16:de:e8:6d:d0:3a:73:49:1a:c2:
                    99:e3:2a:d5:2d:c2:07:ac:38:e6:2a:2c:bc:26:6e:
                    43:db:e5:1b:3c:2b:36:a6:11:43:77:70:ca:47:ee:
                    12:61:54:79:e0:e4:f3:ed:4c:6e:04:a5:93:2a:da:
                    b6:95:aa:d5:c1:ae:89:6e:a2:0a:95:33:ea:93:45:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C6:98:F2:53:A1:33:AC:6A:63:8A:59:88:DD:02:BE:8F:04:DE:DD
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230302e36332e33322e302f32312d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:08:26:84:e0:f9:51:50:c3:16:c4:6e:ef:f3:80:f2:e2:
         30:ad:f3:63:65:1c:d0:f4:32:61:5d:41:78:54:e9:12:d5:12:
         ff:4e:92:cf:5e:bd:dd:8e:37:f0:27:66:e1:4c:c7:3f:8c:1a:
         a2:e2:0f:56:4d:77:9c:eb:ee:af:1b:4a:e0:b3:0a:6b:3c:63:
         b7:43:06:27:e0:37:06:07:0a:49:28:2d:fb:76:01:65:c8:02:
         f4:bc:d9:d7:09:69:c6:55:a4:d7:7c:36:aa:35:bc:7a:21:75:
         6c:ed:67:4a:8a:5a:8b:4d:09:9b:df:41:e4:7f:ea:28:c0:2b:
         7e:2e:0e:0a:bd:48:eb:d6:11:b1:77:90:8d:f1:a4:f1:21:05:
         67:96:63:af:f7:70:00:31:c6:37:bd:16:d5:a8:04:c3:e5:82:
         2d:43:33:4f:99:16:8b:74:99:44:98:ba:4b:3b:2d:18:a2:e3:
         53:f6:fb:2d:f0:f7:ab:58:99:f1:17:0f:69:75:03:41:9e:cb:
         8c:9c:f2:22:fb:d9:dd:61:0a:2c:41:19:68:14:61:02:94:c3:
         de:4f:5a:88:cb:a8:72:62:3b:b7:2a:8a:27:b2:d3:b4:b6:16:
         2f:c0:ee:93:2c:18:f2:88:50:cc:8c:be:4d:52:c7:30:8c:d6:
         4e:64:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:03 2024 by rpki-client on console-ams.rpki-client.org