Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32302d3234203d3e203237383238.roa
File:                     3230302e372e3136302e302f32302d3234203d3e203237383238.roa (raw, json)
Hash identifier:          EbEr5JCBQ9RaRQcZgET8F4AFxhnhJfgEm53LUGD0fvw=
Subject key identifier:   39:D7:47:C0:1E:4D:6E:8F:D3:D9:75:3F:1E:B2:0E:A4:A5:68:26:16
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       27B85C7C2CFFC524FEECD4C5085D703FA1DBF993
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32302d3234203d3e203237383238.roa
Signing time:             Tue 05 Mar 2024 18:12:19 +0000
ROA not before:           Tue 05 Mar 2024 18:07:19 +0000
ROA not after:            Tue 04 Mar 2025 18:12:19 +0000
asID:                     27828
IP address blocks:        200.7.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b8:5c:7c:2c:ff:c5:24:fe:ec:d4:c5:08:5d:70:3f:a1:db:f9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar  5 18:07:19 2024 GMT
            Not After : Mar  4 18:12:19 2025 GMT
        Subject: CN=39D747C01E4D6E8FD3D9753F1EB20EA4A5682616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:3e:de:19:f1:ba:ef:58:10:ec:5f:81:10:
                    8e:6d:e2:e4:5e:3f:29:d2:09:72:67:59:e7:80:40:
                    7b:9a:08:1c:03:b0:26:cc:79:d3:2d:c8:be:4c:eb:
                    8c:6f:b8:cb:fd:5a:ab:e0:1a:62:bf:b7:3e:6a:1d:
                    24:4c:14:cf:07:06:4f:e1:09:a9:34:78:73:09:f2:
                    41:f9:14:69:91:15:1f:f2:1a:59:73:b4:3a:6a:be:
                    01:80:d7:5e:7c:d8:53:99:00:04:61:f0:e8:8f:7a:
                    2c:06:2a:52:16:eb:b3:fa:f1:53:2c:06:36:ef:05:
                    9e:9d:42:ac:9a:66:08:9b:b8:2b:33:46:e4:28:63:
                    3f:f2:94:8c:63:b7:bc:c8:2d:07:75:00:6f:bb:30:
                    69:f5:05:b5:23:63:36:51:6e:97:9a:26:2c:83:91:
                    3e:ef:9b:be:44:48:3c:43:c2:df:56:40:06:09:13:
                    5f:0c:d5:63:71:0f:53:fd:c9:7c:f9:7d:7b:0a:88:
                    94:2d:ac:35:11:06:18:b5:44:6d:ba:2e:bc:4f:36:
                    2b:f8:14:98:ea:11:4e:f7:2d:d0:e0:0a:2b:01:cd:
                    92:04:6e:2d:c5:6e:15:c8:5a:9f:7f:d4:4c:7a:22:
                    79:46:65:d8:65:b6:14:ab:01:6e:e4:83:90:0a:9a:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D7:47:C0:1E:4D:6E:8F:D3:D9:75:3F:1E:B2:0E:A4:A5:68:26:16
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32302d3234203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:d8:5a:52:1b:a5:7b:e6:7b:2a:db:dd:e4:b1:b5:85:3e:fc:
         77:17:92:82:24:d1:a3:66:64:66:d9:4b:18:42:5c:33:4c:64:
         bf:a6:40:16:13:dd:c7:78:8e:44:3e:20:6b:cd:f1:2d:5b:6f:
         17:cd:16:f7:e2:3e:7c:a6:0d:61:10:f0:55:67:d4:72:f3:57:
         ff:1b:ff:b8:ef:ea:15:97:80:79:39:9f:71:ab:5a:c6:25:97:
         ba:ac:5f:60:a6:a7:05:0c:d9:06:8d:59:7d:1a:9a:b2:4a:6b:
         26:e7:d9:7a:be:9f:3a:ed:ad:b5:52:0d:5b:5c:f3:da:12:89:
         c2:dd:35:43:dc:0e:c3:6f:c4:cd:f5:79:c3:00:2c:ee:32:08:
         10:5d:fd:98:92:96:41:af:ee:f6:b6:d7:b0:c8:ac:67:54:fa:
         fa:6c:8b:b2:57:26:92:42:c5:34:48:0d:30:c3:1c:30:6d:e1:
         16:f3:c7:f0:25:ff:22:12:42:e9:01:16:47:f3:3e:5a:88:07:
         71:00:d5:0e:13:4e:28:5e:d4:3a:5d:9f:b2:f6:57:89:e7:51:
         89:e8:36:cd:9e:0a:0c:03:0e:9e:df:10:0c:af:da:96:83:b9:
         cb:35:03:5c:9e:ff:4b:61:25:e5:7b:49:c3:6f:c6:f5:69:61:
         ea:bc:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org