Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28062.roa
File:                     AS28062.roa (raw, json)
Hash identifier:          ecDh2RqceaKKBhkWBeiPUYwKYq8ifdYwKxNyCyasCKs=
Subject key identifier:   4F:CF:8D:72:EF:04:24:FB:D6:D2:20:95:3F:FA:B7:BD:CD:AC:AA:4A
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       6FA0239608A492C8E7A635DCCAA5DD86FF3EE1C9
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28062.roa
Signing time:             Tue 05 Mar 2024 17:55:01 +0000
ROA not before:           Tue 05 Mar 2024 17:50:01 +0000
ROA not after:            Tue 04 Mar 2025 17:55:01 +0000
asID:                     28062
IP address blocks:        200.46.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a0:23:96:08:a4:92:c8:e7:a6:35:dc:ca:a5:dd:86:ff:3e:e1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:50:01 2024 GMT
            Not After : Mar  4 17:55:01 2025 GMT
        Subject: CN=4FCF8D72EF0424FBD6D220953FFAB7BDCDACAA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:cc:66:4e:89:22:5e:f3:f9:21:22:de:1b:
                    c8:98:b6:12:04:82:66:44:c2:d5:a5:e3:77:ce:76:
                    fa:f8:75:68:e4:a4:01:9a:dc:b7:09:7a:9a:df:e4:
                    56:0b:09:bc:25:79:2a:ee:7f:e1:f7:ef:13:f4:15:
                    a5:11:9d:3b:51:36:b7:cf:4b:b1:08:00:f0:bd:e4:
                    1e:e7:c7:d6:61:0c:7f:13:21:8b:95:68:e1:28:ee:
                    7e:26:54:2c:c5:7a:01:fc:f5:dc:7d:95:2f:b5:2b:
                    e7:3a:04:c8:25:df:25:a1:ba:da:fd:ea:31:58:e5:
                    2c:e2:a1:b0:24:1c:55:c9:25:e4:10:75:82:10:5b:
                    ce:79:34:e6:3d:3f:c2:58:0a:91:ba:67:7f:03:24:
                    3f:a8:08:fd:be:e2:57:b1:23:b2:8c:a9:b0:e3:9a:
                    64:a8:d0:20:cb:d0:75:92:08:e1:5e:0d:d0:d1:94:
                    0a:e1:c1:f8:13:09:29:f3:d5:74:86:ba:49:e6:a9:
                    fe:7a:b9:f4:05:f0:06:92:a3:0c:48:b9:28:8c:9f:
                    47:51:37:7d:61:c1:85:5b:fa:c5:bb:88:03:0b:bd:
                    c8:da:2e:aa:0b:ba:a1:ab:95:a2:ff:2c:99:96:93:
                    90:c4:5b:3c:c3:b0:0a:04:91:e3:02:7a:ab:88:68:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CF:8D:72:EF:04:24:FB:D6:D2:20:95:3F:FA:B7:BD:CD:AC:AA:4A
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:6a:ee:6e:e5:3a:2c:42:4d:8e:aa:12:f1:31:41:4c:7a:fc:
         8e:f5:be:0a:42:fa:22:5c:cc:d9:23:99:fa:48:b4:02:12:27:
         72:3f:63:4f:3a:85:7e:d3:e5:7a:8f:dc:74:15:c6:0f:66:78:
         01:88:89:45:97:85:1c:23:eb:e5:72:e2:f8:fd:b2:ec:29:5c:
         3d:e1:b1:1b:53:f8:48:fe:d3:d0:5f:c4:8e:c0:4a:b3:10:f3:
         ba:d9:de:d8:8f:32:4a:74:5c:c4:54:bd:56:a0:d6:05:16:39:
         4a:db:59:c8:74:f8:a2:d3:3e:ba:44:16:c1:f7:c4:53:9d:87:
         fb:fa:34:bd:09:72:c3:89:50:36:b3:e0:14:80:29:d4:11:4c:
         41:e5:a9:78:b9:6c:4a:a1:76:ff:df:3c:63:e9:3d:62:08:d6:
         ba:36:f4:77:c1:36:e8:7d:00:2e:97:22:70:be:bb:6b:e3:6e:
         94:59:c6:02:cb:df:27:88:85:9f:48:f6:c7:41:24:a4:0e:66:
         80:a1:53:bb:e4:42:4e:c4:31:e0:54:47:00:9d:c0:48:f9:e3:
         66:8f:31:d6:cc:e2:a0:68:9e:22:c2:16:0e:12:1f:68:bb:1f:
         d9:a9:e2:51:40:12:c1:5c:ad:5c:43:67:b3:42:82:2d:a2:94:
         ed:1f:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 01:10:32 2024 by rpki-client on console-fra.rpki-client.org