Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e302e302f31382d3234203d3e2036353033.roa
File:                     3230302e37362e302e302f31382d3234203d3e2036353033.roa (raw, json)
Hash identifier:          opdX38vIfPR3c49ikjXyqYqMo+i6VD6ydpJiXO5S4Q4=
Subject key identifier:   58:B8:11:F9:5B:E7:56:61:38:03:39:CF:C2:28:FF:D1:A4:1F:E9:E4
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       5B8920F9F1D584EE4963F6C8D53E430BF924C742
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e302e302f31382d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:32 +0000
ROA not before:           Tue 05 Mar 2024 17:49:32 +0000
ROA not after:            Tue 04 Mar 2025 17:54:32 +0000
asID:                     6503
IP address blocks:        200.76.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:89:20:f9:f1:d5:84:ee:49:63:f6:c8:d5:3e:43:0b:f9:24:c7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:32 2024 GMT
            Not After : Mar  4 17:54:32 2025 GMT
        Subject: CN=58B811F95BE75661380339CFC228FFD1A41FE9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:0f:8b:13:c7:25:69:02:e8:a8:d2:26:27:
                    b5:be:33:50:29:a7:ba:d9:22:72:85:22:9e:56:53:
                    18:de:1f:34:54:40:2c:3f:bc:df:24:b6:0b:ee:28:
                    a7:92:a2:05:1c:d8:85:77:15:8c:89:d7:c6:37:cc:
                    9f:37:55:27:21:fc:12:1d:a8:ff:5a:e7:da:1f:e1:
                    fe:e6:82:3d:a6:74:27:c5:87:55:f7:43:c3:bd:dd:
                    4a:28:c9:35:92:e6:f5:1a:38:9c:66:90:dc:c6:bd:
                    2e:12:cf:c8:00:91:9b:d1:25:05:0d:84:b2:b0:cf:
                    54:88:ba:5c:11:d1:30:33:ba:df:82:ec:00:b7:6d:
                    08:0e:77:04:d5:6b:f3:fd:ab:92:26:34:a5:fe:d2:
                    f5:5d:07:d3:f6:23:a6:05:37:83:37:3a:43:69:41:
                    dc:84:2d:ab:39:46:ab:bc:0b:a0:c5:03:bc:f8:af:
                    a8:03:f8:f5:8e:7b:21:94:52:55:81:c4:0c:a7:d3:
                    e9:68:29:6e:95:53:43:d4:3d:be:3a:87:1d:af:34:
                    f5:f9:80:a2:71:24:8b:47:51:27:45:44:76:15:53:
                    c1:5a:41:be:54:57:22:ca:29:f2:ff:9c:8a:89:6b:
                    80:bc:a4:91:dd:fe:2f:fc:56:31:86:59:c5:81:ba:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B8:11:F9:5B:E7:56:61:38:03:39:CF:C2:28:FF:D1:A4:1F:E9:E4
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e302e302f31382d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:17:d2:d7:e8:c3:0c:f8:7c:f5:09:3b:cc:ba:98:09:b3:
         a4:83:79:72:6c:9a:79:cb:e6:06:30:31:ef:08:aa:38:45:f2:
         99:50:0c:b2:4b:8b:04:ba:31:18:99:70:a4:06:0e:6d:a4:fb:
         50:d0:5a:f0:f2:f4:b5:52:b0:df:1f:a7:99:65:90:50:65:c4:
         8c:0a:95:08:33:67:cb:8a:23:df:6f:79:30:7a:70:d0:6a:12:
         4a:69:db:c7:32:d9:12:65:94:6b:8c:33:03:31:62:73:50:21:
         25:3a:c0:8c:cc:5b:ea:32:36:ee:af:a3:58:38:f8:8c:40:8e:
         a2:e5:5d:6d:30:a9:2e:cb:e0:2e:8a:1a:3c:4c:25:20:0d:1a:
         64:e0:d8:f5:90:75:db:69:b7:e3:e3:8d:c6:a9:34:61:1e:d5:
         42:10:15:15:78:3d:aa:95:4a:28:fe:59:ba:4d:a3:35:b5:bf:
         06:21:47:29:9e:bd:b4:af:df:92:0f:a2:8a:f3:d3:c6:09:f7:
         1e:bf:9f:96:50:a5:45:ae:40:d5:36:ea:25:d2:2b:82:be:b7:
         fa:5c:70:7f:5d:7b:3a:76:76:f2:47:24:89:94:54:3d:3e:3d:
         c2:a5:99:bb:78:36:fb:26:65:a7:97:31:e5:29:c8:9f:15:f8:
         31:ea:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org