Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/3230302e372e38322e302f32342d3234203d3e203237393437.roa
File:                     3230302e372e38322e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          tP+sV5mMWhKLpGY7J5aBBAsn7Ta/YBMpsC7iaBTcul8=
Subject key identifier:   6E:5C:78:A3:57:DD:62:01:D7:A7:92:F2:6D:D5:B4:7E:43:EF:FA:D3
Certificate issuer:       /CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3
Certificate serial:       5311E9E63321E8BDAE245E9C0AC1AE70FC1DA470
Authority key identifier: 1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/3230302e372e38322e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:03:29 +0000
ROA not before:           Tue 05 Mar 2024 17:58:29 +0000
ROA not after:            Tue 04 Mar 2025 18:03:29 +0000
asID:                     27947
IP address blocks:        200.7.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:11:e9:e6:33:21:e8:bd:ae:24:5e:9c:0a:c1:ae:70:fc:1d:a4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3
        Validity
            Not Before: Mar  5 17:58:29 2024 GMT
            Not After : Mar  4 18:03:29 2025 GMT
        Subject: CN=6E5C78A357DD6201D7A792F26DD5B47E43EFFAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a0:54:af:33:11:62:94:13:df:53:72:25:1e:
                    56:49:76:d0:05:2a:66:11:6d:58:f0:97:d6:c1:72:
                    5b:47:46:91:25:a8:3f:e5:49:38:6e:bf:26:3f:a6:
                    e5:a1:76:6f:3c:78:5d:16:dc:0c:e4:26:75:e6:c5:
                    8c:83:24:fa:eb:41:84:1a:bb:a0:de:41:e8:92:df:
                    e6:b9:c4:97:db:ae:83:3b:85:c9:c7:c4:56:63:3c:
                    cc:42:fa:74:e4:19:a6:22:73:90:81:5d:d2:7e:9f:
                    d6:d2:04:35:75:f2:62:d8:02:e3:1f:5f:cc:55:15:
                    34:5f:f5:5f:1e:d4:fc:12:d8:29:e0:29:d7:e3:a1:
                    87:90:38:55:55:84:ae:cd:5e:78:54:60:78:a5:29:
                    54:ed:81:a8:0b:e7:3a:fc:e5:7b:ab:3c:f1:55:6b:
                    cd:a4:c5:4f:3e:8a:0b:5c:b8:ed:c2:36:93:6a:c1:
                    77:06:b9:ae:7d:e5:8c:b5:49:cf:03:63:44:06:fa:
                    5e:4c:ab:f1:5e:89:0e:7c:8d:d1:30:82:2f:8a:09:
                    77:9f:13:1c:4a:d7:f6:d6:88:9f:f7:c8:fd:6c:12:
                    48:1a:e3:53:15:5c:eb:bc:74:51:1f:d9:65:42:7f:
                    98:3c:91:94:c3:9e:ee:ec:c6:cd:18:6d:e7:bd:39:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5C:78:A3:57:DD:62:01:D7:A7:92:F2:6D:D5:B4:7E:43:EF:FA:D3
            X509v3 Authority Key Identifier:
                keyid:1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/3230302e372e38322e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:6b:a5:cc:5e:27:ef:b4:ca:50:b2:65:8e:51:78:c0:c1:a3:
         0d:c1:ca:08:68:b3:b4:c7:14:e1:53:3e:76:db:d7:f9:31:ab:
         43:0e:1e:b4:95:e0:66:12:d1:f2:64:ac:5c:8d:58:08:b6:82:
         6a:58:41:cf:0a:6f:32:7d:bc:de:58:6a:b2:cd:39:cf:d5:ae:
         f5:80:41:ed:29:f7:54:cd:c1:d5:b8:d9:f9:22:aa:f3:0e:98:
         a7:2f:58:65:d2:36:4b:d8:95:09:5d:a4:d2:57:72:34:25:83:
         88:d9:4b:94:df:fa:7c:2b:01:a9:9a:d1:25:c4:5a:f0:70:18:
         7f:96:77:50:17:86:6e:f3:cc:b2:14:e3:d3:ec:ae:b7:4a:01:
         6c:8f:2a:c2:6d:88:73:96:09:72:c6:7c:83:fe:05:fe:eb:ae:
         ed:af:95:a6:74:70:0e:7a:5c:77:b5:37:57:49:31:70:c8:97:
         8f:20:c9:11:90:f4:88:87:03:b7:2a:31:cf:00:74:30:a1:ec:
         a0:d2:26:d0:43:de:8a:2a:09:23:fa:3a:4a:6c:65:47:f5:35:
         a2:5b:0d:30:5b:46:23:fc:d3:fc:b2:65:6b:42:c4:57:c0:cd:
         28:e6:7c:46:2f:2a:64:f1:df:3d:19:5d:ac:2f:65:56:eb:24:
         8a:f0:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org