Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230302e36332e34302e302f32312d3234203d3e20323635353430.roa
File:                     3230302e36332e34302e302f32312d3234203d3e20323635353430.roa (raw, json)
Hash identifier:          hlpH80LVXyy6eHAUPZ93DQyBIGNEE6ATTuMG9nz9I3Y=
Subject key identifier:   F6:83:52:18:CF:D7:4B:75:55:41:69:95:85:C3:48:45:7B:17:46:36
Certificate issuer:       /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial:       2AA31C2E0B2259F2132A067BD6A8CD8D205D478B
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230302e36332e34302e302f32312d3234203d3e20323635353430.roa
Signing time:             Tue 05 Mar 2024 18:01:27 +0000
ROA not before:           Tue 05 Mar 2024 17:56:27 +0000
ROA not after:            Tue 04 Mar 2025 18:01:27 +0000
asID:                     265540
IP address blocks:        200.63.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a3:1c:2e:0b:22:59:f2:13:2a:06:7b:d6:a8:cd:8d:20:5d:47:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
        Validity
            Not Before: Mar  5 17:56:27 2024 GMT
            Not After : Mar  4 18:01:27 2025 GMT
        Subject: CN=F6835218CFD74B755541699585C348457B174636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:03:4c:bc:64:d1:59:e7:6a:0c:11:00:94:
                    ad:1f:08:8f:8a:03:ca:58:2a:b7:89:f7:01:af:0a:
                    74:0b:e8:07:ce:e4:b6:8f:a1:a4:5f:f3:68:1c:8b:
                    12:ee:df:0c:ba:e8:bd:40:36:50:26:6b:49:13:43:
                    63:00:16:e4:71:bb:40:90:54:cf:81:da:be:bd:c0:
                    85:db:1e:3c:a3:0e:e6:87:ed:c0:8e:ea:1f:19:41:
                    e5:75:9b:ce:96:18:ee:1d:82:38:19:af:26:59:76:
                    58:14:be:39:8d:f7:e8:fb:8d:f1:06:41:0d:ac:46:
                    1e:4a:5e:65:48:6e:f0:49:29:0c:40:a7:bf:ef:08:
                    b4:dd:2c:2f:c6:bc:92:19:e0:ca:73:5f:f8:49:c0:
                    31:ef:68:80:66:bb:06:aa:9d:74:e6:13:95:d7:89:
                    75:b0:2e:2e:ab:1b:14:27:3f:8d:c9:21:9a:70:2e:
                    f8:cf:f4:10:54:b8:11:95:8e:06:80:d5:ed:82:80:
                    d4:4f:d8:e9:a5:a8:4d:8a:63:1c:59:e6:98:89:45:
                    b5:40:65:c9:c4:9e:ec:7c:72:3a:f6:da:13:b5:ff:
                    4b:bb:e1:cb:af:bc:b9:3a:2f:7c:11:5c:db:8d:76:
                    f4:d2:3d:60:89:b7:b7:8b:f1:36:41:12:45:ff:d5:
                    80:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:83:52:18:CF:D7:4B:75:55:41:69:95:85:C3:48:45:7B:17:46:36
            X509v3 Authority Key Identifier:
                keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230302e36332e34302e302f32312d3234203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:87:b1:0a:cb:98:1f:fc:0c:ee:a7:82:34:4e:be:d7:77:
         b2:c0:cd:9e:85:c1:dc:0d:4d:56:82:5d:72:84:99:5a:06:2b:
         6c:fd:cb:30:17:4e:14:69:6d:81:9c:e2:cb:b1:77:fe:83:2c:
         e7:95:e6:22:a0:d0:7e:80:31:0e:c4:ea:1b:18:15:d2:95:1f:
         8c:91:3e:f4:29:bb:0f:34:89:b5:e3:f6:64:81:99:ba:c1:d1:
         ed:d5:b6:2b:19:af:78:b1:b4:66:ef:a1:b2:93:f4:af:d5:d7:
         86:b0:78:d4:40:43:83:11:c1:d5:b0:e3:1c:61:4e:df:41:5b:
         fe:a9:e6:d5:10:20:a0:72:d1:69:24:c9:fe:b8:11:6f:aa:31:
         e1:ec:94:ed:fe:13:bb:26:08:0d:4a:63:31:26:0b:ee:20:4f:
         5b:1b:22:55:65:11:9b:a5:14:24:2f:a9:39:97:c6:e6:b2:a1:
         4c:7c:70:86:f2:da:62:18:55:57:cb:85:40:3a:d1:cd:59:b7:
         ba:c1:38:0c:93:28:ed:06:fc:8a:ea:2b:a7:e3:83:ec:23:7b:
         20:f4:bf:08:43:7a:3d:c1:17:c6:e7:58:1c:d1:f3:4a:b7:83:
         95:ae:61:65:25:c8:c1:04:36:ba:54:9e:02:d3:c8:71:ef:73:
         ef:54:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org