Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139382e302f32342d3234203d3e203532323734.roa
File:                     3230302e31322e3139382e302f32342d3234203d3e203532323734.roa (raw, json)
Hash identifier:          nIg3odUUU1zDkWY31jnRpFO/Bv5GW7WjdkGgyaH9dm4=
Subject key identifier:   E9:9C:14:58:39:8B:84:F9:FE:00:48:0B:16:BE:DD:30:0A:31:1B:77
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       5201298FC3C13CF8265FAA8233266DBA29A282F7
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139382e302f32342d3234203d3e203532323734.roa
Signing time:             Tue 05 Mar 2024 17:39:49 +0000
ROA not before:           Tue 05 Mar 2024 17:34:49 +0000
ROA not after:            Tue 04 Mar 2025 17:39:49 +0000
asID:                     52274
IP address blocks:        200.12.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:01:29:8f:c3:c1:3c:f8:26:5f:aa:82:33:26:6d:ba:29:a2:82:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Mar  5 17:34:49 2024 GMT
            Not After : Mar  4 17:39:49 2025 GMT
        Subject: CN=E99C1458398B84F9FE00480B16BEDD300A311B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:ff:af:e0:e9:7c:c3:f3:92:3e:c2:f1:34:
                    13:ec:4b:39:c9:e2:09:9f:3a:b2:1c:e6:ee:f6:8f:
                    b4:54:81:02:50:ac:70:e8:9d:0f:32:33:34:66:1b:
                    fc:9f:03:25:9b:79:fc:2b:80:4f:21:f3:51:c2:11:
                    1f:42:28:0b:74:38:7c:a6:54:d1:7d:06:53:de:73:
                    16:ba:00:d4:e6:9b:6a:17:85:6f:35:cc:68:5e:69:
                    2e:82:ae:5f:c7:f7:af:c2:c3:59:60:9e:08:19:6d:
                    07:df:4c:6f:9a:04:1b:7f:28:1b:8d:28:6b:72:a5:
                    f9:2e:b9:29:9c:ef:75:dd:9e:c1:d2:eb:f5:7b:65:
                    a3:2b:bb:07:98:02:a8:9f:3a:ad:be:fe:0d:a9:8a:
                    0c:7e:01:3f:71:5c:a1:81:67:84:ef:8e:37:68:7e:
                    f5:c3:9f:65:9e:e3:1b:b4:c1:81:59:53:5c:14:9e:
                    95:05:e9:5c:f5:b8:7a:c2:5b:de:38:e1:3c:32:a1:
                    af:d6:4e:60:ff:37:d8:fe:b3:04:6e:20:db:f4:d6:
                    01:95:d3:ed:bc:ee:fe:95:dd:ab:57:5f:bd:a7:f0:
                    ac:bb:e4:a7:59:6c:a0:26:d4:bb:5d:78:c2:31:9e:
                    42:48:a2:72:f8:b2:94:bc:03:34:29:df:e0:cf:e6:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9C:14:58:39:8B:84:F9:FE:00:48:0B:16:BE:DD:30:0A:31:1B:77
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139382e302f32342d3234203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:66:fa:4b:9c:81:a9:d6:10:fe:86:6f:1d:fe:d6:dc:33:
         9a:e1:cf:4c:af:f4:3a:77:2d:9a:c0:55:ad:38:86:65:fa:b0:
         00:03:b3:40:a1:31:05:d3:34:3f:e9:6d:c0:17:ed:51:87:06:
         3d:c0:46:ea:47:52:ed:dd:48:d7:ea:85:ef:b1:b2:82:d7:60:
         b7:e5:17:04:df:0d:6b:20:f5:0e:25:54:38:9c:93:b7:2f:63:
         e2:5b:65:dd:c4:cf:70:3c:54:73:c0:95:67:e2:f8:ae:b8:2f:
         fc:b2:22:be:44:98:6a:aa:61:98:c3:41:a3:02:d8:44:92:ff:
         a2:0a:dd:a0:4d:36:d3:59:f2:f6:92:10:4b:00:14:c7:fe:d6:
         13:ce:fc:75:09:90:fb:28:0d:bf:43:8c:62:9d:2a:6a:c3:58:
         19:99:84:0f:b8:b8:b6:2c:c2:ad:ee:07:fc:ef:e7:67:fd:3e:
         12:87:ce:ea:77:61:b7:2b:89:1a:ec:aa:f2:9d:a1:2e:d1:78:
         7a:65:8b:3e:49:f0:41:fd:57:c0:2a:b2:13:e1:7b:0a:89:fa:
         f6:0b:68:39:e3:83:11:df:49:64:56:48:13:50:c0:9e:f9:36:
         bc:3a:dd:8a:54:b4:99:17:28:5c:08:9f:57:ad:54:8f:8e:ec:
         8e:3f:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org