Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203136353039.roa
File:                     3230302e33332e372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          q1dihZbfzuVXIVLaDfUoD4wlaZwErU2GR3KVUp1ZHq4=
Subject key identifier:   F3:EA:4A:87:FD:F0:B3:EC:64:B3:03:9E:79:5F:9E:3B:A0:94:5B:BA
Certificate issuer:       /CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Certificate serial:       583F09C228A4418D4E2E446711B89DC0A52EAB0A
Authority key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 05 Mar 2024 18:06:31 +0000
ROA not before:           Tue 05 Mar 2024 18:01:31 +0000
ROA not after:            Tue 04 Mar 2025 18:06:31 +0000
asID:                     16509
IP address blocks:        200.33.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3f:09:c2:28:a4:41:8d:4e:2e:44:67:11:b8:9d:c0:a5:2e:ab:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
        Validity
            Not Before: Mar  5 18:01:31 2024 GMT
            Not After : Mar  4 18:06:31 2025 GMT
        Subject: CN=F3EA4A87FDF0B3EC64B3039E795F9E3BA0945BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:bf:ad:a0:8c:c0:7f:49:d0:7f:39:96:f7:
                    64:93:81:71:6d:b8:ed:08:33:3a:b8:43:55:9b:6b:
                    6f:70:d7:30:18:72:97:4a:66:a6:b9:18:4d:b5:54:
                    72:54:ed:94:24:85:66:26:b9:bc:5a:ef:a6:1a:88:
                    99:6c:12:b9:c2:32:d8:0d:c3:05:d0:04:9e:e7:70:
                    2f:97:09:a9:49:bd:f9:da:cb:e2:4e:c1:5b:6d:a9:
                    39:dc:a6:fd:3a:18:33:1d:f4:38:52:b2:80:f1:a8:
                    5e:76:72:13:4d:b0:e7:d6:dc:13:02:58:4c:21:98:
                    7c:0f:6b:df:05:d9:43:c3:2d:02:25:60:0f:6b:62:
                    9e:49:d5:20:a4:fe:0e:0a:71:8c:e0:56:b1:6f:3b:
                    7e:7a:38:12:71:b2:4e:7e:5e:65:0d:71:98:a3:a0:
                    31:8e:1f:2c:19:9f:13:43:4b:ff:1a:5a:ef:e9:94:
                    74:c6:ad:d2:b0:d9:cf:1e:21:60:4a:5b:43:24:5b:
                    55:0e:35:ed:3b:04:09:f2:58:78:2a:41:36:72:a2:
                    0a:22:b8:f5:3d:a5:7d:82:51:5f:87:83:0d:ac:92:
                    48:86:42:d8:20:ef:34:eb:18:bf:83:62:5d:a7:3b:
                    c2:32:0e:07:28:36:86:31:77:b1:63:01:0e:68:e9:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EA:4A:87:FD:F0:B3:EC:64:B3:03:9E:79:5F:9E:3B:A0:94:5B:BA
            X509v3 Authority Key Identifier:
                keyid:B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:1f:ed:4a:ae:fb:08:38:cc:4c:c6:a0:dd:38:ab:57:86:5f:
         d2:f5:14:a3:fb:94:28:31:4a:50:41:a0:37:ee:65:6e:2b:5b:
         09:56:61:f7:be:15:ea:ed:44:9b:d5:96:6e:6f:85:5f:aa:3e:
         aa:1e:2c:e5:93:db:81:aa:76:47:08:21:db:bd:a5:17:40:71:
         86:7f:d1:ec:ad:f3:11:e5:db:08:5f:c8:06:13:9f:17:d7:4c:
         88:1b:96:84:07:ff:a9:3b:96:19:6a:cd:4c:0b:ed:d9:e6:9d:
         c8:fa:78:0f:b7:5c:bd:3e:8a:53:50:81:e0:bf:4d:9c:4a:97:
         58:f0:64:73:21:8a:09:11:0a:86:06:29:0d:65:a9:7b:48:dd:
         a3:6a:59:fe:bb:a2:02:8a:bc:ad:c8:23:68:65:e9:28:be:9f:
         4e:44:b5:9b:5e:35:b6:96:2f:35:b3:09:7e:58:ad:64:d9:43:
         34:6c:42:6a:cc:52:19:86:a4:da:1f:21:92:b3:48:ac:db:ad:
         d4:8f:c1:21:c0:80:71:e0:9e:13:64:a1:08:56:7a:20:bf:6e:
         30:3c:a3:59:e3:ae:d8:22:03:89:d1:5a:dc:90:b1:9d:22:fd:
         71:31:f7:7c:48:d1:4b:9f:ad:b9:1c:c3:74:83:ae:0f:d6:20:
         a7:c7:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 10:29:38 2024 by rpki-client on console-fra.rpki-client.org