Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35362e3131372e302f32342d3234203d3e20323635353034.roa
File:                     3230302e35362e3131372e302f32342d3234203d3e20323635353034.roa (raw, json)
Hash identifier:          NF2drCchjJUzjej3DqrSWMQ2/Xj80Q0FvA/CIIExRtU=
Subject key identifier:   5F:BB:67:01:AE:BE:6C:C6:FA:F7:39:EF:22:C9:8C:FA:B0:B4:FC:DD
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       3C2FC5A3A5B24DA95E98DD427616B08FE69E68A4
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35362e3131372e302f32342d3234203d3e20323635353034.roa
Signing time:             Tue 05 Mar 2024 17:54:30 +0000
ROA not before:           Tue 05 Mar 2024 17:49:30 +0000
ROA not after:            Tue 04 Mar 2025 17:54:30 +0000
asID:                     265504
IP address blocks:        200.56.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2f:c5:a3:a5:b2:4d:a9:5e:98:dd:42:76:16:b0:8f:e6:9e:68:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:30 2024 GMT
            Not After : Mar  4 17:54:30 2025 GMT
        Subject: CN=5FBB6701AEBE6CC6FAF739EF22C98CFAB0B4FCDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:ba:e6:ec:46:7c:66:90:a4:2d:bb:37:2c:
                    a6:02:3e:40:83:1b:1f:d3:21:04:4a:eb:ff:f8:52:
                    61:09:3a:ac:44:35:c8:a1:0a:a7:19:6a:41:60:71:
                    2e:04:8b:f2:4b:16:88:82:62:7a:ed:95:9c:de:a4:
                    35:a7:15:97:d2:b3:74:6a:3c:08:43:78:f1:4d:23:
                    bc:69:a6:ac:cf:94:4b:50:b5:32:86:4f:6a:cc:31:
                    e9:4a:d5:1b:c0:ed:99:67:58:bc:2b:2d:30:d2:34:
                    d7:5b:74:4d:72:11:10:4e:83:91:b7:42:3f:5c:11:
                    85:6a:e7:5a:b9:7e:54:b4:d4:56:70:b7:c7:0f:b2:
                    6f:b6:bc:9e:26:62:df:1c:78:0d:c8:f4:42:27:92:
                    b6:82:04:ed:c0:25:25:1a:06:7f:95:33:32:82:69:
                    ce:88:7e:73:27:b3:8e:00:6a:8e:e8:59:f9:ee:1d:
                    c8:3d:77:b2:8a:e3:22:d7:06:8f:2c:9c:dc:d9:9c:
                    40:60:15:10:b5:7c:9b:5b:0a:e1:13:9e:c6:73:22:
                    75:3f:77:4f:ad:30:7b:f4:ff:3c:77:0f:80:6d:e1:
                    fa:a2:0f:e5:64:58:f9:a0:c3:1b:43:fd:e9:a6:7d:
                    5f:2c:3c:36:70:a7:d9:58:3a:23:3e:97:f6:15:8f:
                    3d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:67:01:AE:BE:6C:C6:FA:F7:39:EF:22:C9:8C:FA:B0:B4:FC:DD
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35362e3131372e302f32342d3234203d3e20323635353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:d8:75:9d:e4:a2:99:94:3c:fd:8a:14:02:6a:ab:4d:ae:
         a5:b5:fa:d6:93:90:14:10:10:6e:35:a1:f2:d4:37:d9:6a:de:
         61:d5:ac:99:a7:68:08:22:02:a8:ca:1b:1e:d5:9a:2a:2f:a5:
         eb:61:b9:4b:65:69:82:c0:a8:e6:e5:47:05:74:d7:4c:04:4a:
         4b:e5:9a:02:e6:28:76:43:0b:33:f6:08:a6:85:9c:0a:14:55:
         5e:f7:af:42:5a:3a:24:1c:8e:d7:f8:a3:ea:2e:43:99:f1:08:
         33:00:45:aa:2f:30:9e:0b:fc:04:7d:a8:af:e0:e6:4b:3c:39:
         eb:b2:57:7f:e0:f0:d6:3b:bd:17:0e:0b:c9:e2:b9:4d:18:fa:
         83:1f:08:c1:83:87:2b:a2:ea:31:f0:c0:1b:82:64:6c:60:ba:
         6a:30:ab:34:b0:bd:8f:1b:67:91:85:f2:3b:89:6f:96:6d:f5:
         cb:66:99:9b:fd:06:7e:b0:ff:eb:ab:0c:f5:82:0a:9b:a5:7b:
         10:47:80:0d:5c:61:1c:ea:55:b0:91:32:bd:66:19:e2:35:7f:
         90:13:c2:2e:c0:5b:a9:39:22:47:63:c3:83:2b:6f:c7:bb:eb:
         d9:19:e4:db:e8:46:2b:81:c9:3b:d0:f1:26:6e:c2:15:80:eb:
         de:7d:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org