Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e302e302f31392d3234203d3e203136363239.roa
File:                     3230302e3131322e302e302f31392d3234203d3e203136363239.roa (raw, json)
Hash identifier:          CJcVIBXEfnujsM0qDmiLwCaED/neDrgAux8nm3qmsx4=
Subject key identifier:   DC:C5:F4:C9:D5:57:73:4D:8B:53:68:1C:B6:F6:C9:38:A2:99:D5:E1
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       53CF37BD017904E3AC2FCBEFA1D514D7034235E5
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e302e302f31392d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:15 +0000
ROA not before:           Tue 05 Mar 2024 17:47:15 +0000
ROA not after:            Tue 04 Mar 2025 17:52:15 +0000
asID:                     16629
IP address blocks:        200.112.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cf:37:bd:01:79:04:e3:ac:2f:cb:ef:a1:d5:14:d7:03:42:35:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:15 2024 GMT
            Not After : Mar  4 17:52:15 2025 GMT
        Subject: CN=DCC5F4C9D557734D8B53681CB6F6C938A299D5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:ff:c1:b4:06:37:b5:73:00:85:5c:8a:57:
                    27:57:c1:f1:c3:57:0b:8b:88:91:1f:16:8b:15:8a:
                    a9:ac:95:7f:06:fd:2e:4a:5a:b6:a5:b3:08:00:c0:
                    1f:5a:d2:0e:b7:19:94:4c:bf:0c:74:c8:94:65:82:
                    ae:14:d9:44:81:5e:03:4a:3b:b9:4d:c8:37:53:d1:
                    14:b4:93:c6:c6:cb:d0:08:09:10:80:85:a8:b9:7d:
                    20:96:72:09:8b:80:18:6e:15:cf:bc:e5:0c:5f:2a:
                    4c:32:9f:5d:dc:00:8e:60:52:cd:7b:fd:d0:dc:b4:
                    2b:e0:27:5c:37:aa:b4:74:f1:1d:51:62:bf:88:27:
                    cd:ea:b5:3a:74:cf:0a:6f:ff:45:d7:3d:b3:00:c6:
                    3c:4f:df:0c:7e:3a:a8:e1:ca:93:63:39:19:99:b4:
                    0e:d2:97:b5:f7:90:ba:4c:d1:80:31:4c:f5:30:cf:
                    c0:18:a6:f8:79:f0:10:3b:c9:54:55:c0:ab:69:98:
                    42:d8:7e:f9:40:37:06:1e:ef:a3:5c:b3:05:54:dd:
                    ec:ca:9c:6f:42:0b:32:41:45:09:62:71:ad:cb:8a:
                    4c:4c:4f:58:36:9e:08:7f:29:44:1c:2e:8e:c3:7c:
                    96:02:46:e5:bf:80:75:85:17:3d:89:39:a7:ef:ee:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C5:F4:C9:D5:57:73:4D:8B:53:68:1C:B6:F6:C9:38:A2:99:D5:E1
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e302e302f31392d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:c7:24:55:7f:78:ea:9c:b5:b1:4b:06:d2:69:60:18:a5:d6:
         a0:48:69:a4:e5:d4:a6:13:06:bd:ea:01:70:27:bb:f8:c8:c3:
         f1:7d:18:54:6f:ac:51:32:74:48:17:e9:38:9e:57:1c:75:12:
         d1:cd:c5:06:ac:82:92:77:7d:29:68:16:be:01:28:c3:ab:79:
         34:cd:e6:86:6d:0f:12:36:ad:8a:55:72:5f:90:37:a2:b6:99:
         8e:76:69:17:63:40:30:d2:d1:62:28:02:c8:db:16:74:aa:89:
         85:c3:5d:0b:b8:ef:96:15:57:77:85:54:c3:05:3e:1b:58:b0:
         7f:34:b3:28:05:cb:7d:5b:b2:8d:bb:b1:ea:93:bf:0e:f0:44:
         d4:ab:e6:db:ca:8e:0c:ff:5e:16:d1:6b:81:e5:85:4c:c5:96:
         d1:01:ca:be:a5:a8:ae:65:b8:65:a3:c0:58:94:5b:13:91:46:
         4e:f5:fc:10:9f:e0:eb:78:2a:a5:af:00:d7:a3:3b:a5:d5:9a:
         1e:18:be:e3:a8:b1:f2:10:af:2c:94:1e:91:6e:99:8c:1e:8b:
         c0:89:cf:b1:08:7c:82:49:4b:0b:bc:29:f2:c8:a6:83:d1:01:
         4e:95:1a:73:62:88:4d:ed:9b:b2:e0:92:60:e0:81:d1:8c:98:
         a5:52:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org