Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139362e302f32342d3234203d3e203532323734.roa
File:                     3230302e31322e3139362e302f32342d3234203d3e203532323734.roa (raw, json)
Hash identifier:          VyndR0JcQPr5Q8GenK1Eu463ynJt/wrh55Rj4CEGacI=
Subject key identifier:   6F:46:37:32:FE:C2:D7:2E:CB:59:89:BF:1E:C2:E3:9B:79:CD:66:2F
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       0491CC762D47F28A2E0A3C7654969F4BA66C4957
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139362e302f32342d3234203d3e203532323734.roa
Signing time:             Tue 05 Mar 2024 17:39:51 +0000
ROA not before:           Tue 05 Mar 2024 17:34:51 +0000
ROA not after:            Tue 04 Mar 2025 17:39:51 +0000
asID:                     52274
IP address blocks:        200.12.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:91:cc:76:2d:47:f2:8a:2e:0a:3c:76:54:96:9f:4b:a6:6c:49:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Mar  5 17:34:51 2024 GMT
            Not After : Mar  4 17:39:51 2025 GMT
        Subject: CN=6F463732FEC2D72ECB5989BF1EC2E39B79CD662F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:80:2e:a5:13:b3:91:a9:da:cf:b1:1b:fe:
                    64:a9:fc:2f:c2:dd:20:f7:38:1e:58:ae:ff:bc:61:
                    01:41:00:9b:f2:7d:32:fa:16:42:a8:2b:da:0e:44:
                    44:7f:c0:79:3d:f1:53:c3:3b:c5:4d:0b:20:8e:24:
                    8d:c7:b5:72:15:59:2d:4f:be:ff:16:c7:8b:dc:5d:
                    1f:77:31:1b:f1:c2:a9:97:b5:4a:1d:19:76:e0:86:
                    84:b2:ef:c5:c9:cc:54:f8:3c:0c:69:9d:9a:27:7d:
                    1e:b6:70:3a:f3:0b:15:93:83:dd:e4:91:b3:db:a2:
                    5a:fa:46:2f:47:07:8f:26:a6:6a:ad:4b:86:ba:fc:
                    1f:40:be:5c:ee:b0:c2:a6:f9:f2:6b:21:a1:3b:fc:
                    92:c7:a8:83:da:fa:ff:a1:11:cb:4d:67:f0:36:0a:
                    18:79:6a:de:ab:5b:6c:fc:4c:d6:29:a5:77:7f:35:
                    f3:96:c6:63:1a:3e:72:76:5e:4b:c7:39:98:91:81:
                    71:c3:6b:e7:56:d8:11:9d:b3:eb:c0:88:24:58:5e:
                    96:65:0e:86:25:d0:3e:19:d6:83:6b:a6:64:f9:e6:
                    5e:74:ce:ca:5d:a1:6c:09:7e:ec:07:7a:53:04:b7:
                    b5:90:3d:ba:88:f3:c9:a4:bc:35:cf:c0:76:7a:ff:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:37:32:FE:C2:D7:2E:CB:59:89:BF:1E:C2:E3:9B:79:CD:66:2F
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139362e302f32342d3234203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:38:ae:53:24:7f:6b:b4:79:58:1a:b3:df:88:e9:d4:01:c9:
         fc:05:3e:49:56:77:26:42:c2:74:39:49:6d:6c:4f:a9:c5:f8:
         5b:9d:08:59:61:74:34:58:9f:29:1d:00:a3:1b:b7:c5:65:ec:
         d8:79:3e:32:33:18:e0:fc:5e:a1:5a:82:e2:a8:38:ef:ef:4f:
         12:74:39:9b:b6:4d:73:55:5a:b9:5b:fc:be:71:29:7f:3e:12:
         37:48:8e:68:4d:6c:4f:06:cf:b6:e3:dd:08:6a:b5:ce:39:ce:
         e3:4f:d8:c3:48:ab:f7:75:16:fb:29:84:1f:14:bf:9f:86:3f:
         ec:9c:53:da:da:2b:69:2a:5e:9e:de:75:d1:40:ec:db:3c:9c:
         0a:dc:48:50:22:82:f1:30:77:c0:31:d6:42:41:9f:cb:a0:f3:
         cb:1c:31:ba:2d:40:e8:3a:0e:12:59:e7:84:39:60:0f:c1:22:
         3e:8e:c0:07:32:8a:ed:f5:fb:72:07:c0:a7:cf:1a:49:1e:43:
         09:b7:7d:36:0d:39:79:b3:fd:21:2a:6d:83:9d:99:ba:0f:5f:
         27:6c:a5:ae:6a:4f:9a:87:bc:37:8f:7d:54:19:39:ff:44:92:
         89:4e:a4:22:ae:16:eb:12:3a:06:0c:7f:71:05:aa:fd:a2:36:
         4d:05:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org