Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139392e302f32342d3234203d3e203532323734.roa
File:                     3230302e31322e3139392e302f32342d3234203d3e203532323734.roa (raw, json)
Hash identifier:          ltxacNgQ3qdjnsqZwRPC/q7RI5uuVLcTxwBHWMt6sCs=
Subject key identifier:   3F:D6:8F:D0:EA:1E:E0:D5:D0:60:E8:05:AC:79:7F:7D:EC:7D:78:C2
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       06F9BF19F87306CDBDA257D9B04992C91082DF9A
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139392e302f32342d3234203d3e203532323734.roa
Signing time:             Tue 05 Mar 2024 17:39:50 +0000
ROA not before:           Tue 05 Mar 2024 17:34:50 +0000
ROA not after:            Tue 04 Mar 2025 17:39:50 +0000
asID:                     52274
IP address blocks:        200.12.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f9:bf:19:f8:73:06:cd:bd:a2:57:d9:b0:49:92:c9:10:82:df:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Mar  5 17:34:50 2024 GMT
            Not After : Mar  4 17:39:50 2025 GMT
        Subject: CN=3FD68FD0EA1EE0D5D060E805AC797F7DEC7D78C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:49:5b:ce:58:9d:dd:0f:6a:eb:99:bc:01:
                    84:bb:97:97:a8:07:bc:fa:29:6c:20:1d:65:80:e8:
                    11:36:ae:14:0d:ad:9b:de:f6:e4:ca:e3:45:5d:f5:
                    5c:39:cb:4f:f8:7e:c5:45:52:63:99:3c:9f:7b:d9:
                    ca:d3:da:09:64:69:78:19:a4:52:ee:a3:e0:a3:1a:
                    0b:d4:c7:4e:af:dc:39:a7:2b:9f:a6:fc:f4:02:1d:
                    97:1b:fd:e0:e2:46:46:00:a6:25:99:26:b3:e6:4e:
                    83:0c:2c:6c:6a:86:9f:f4:39:1e:04:7c:01:1b:4c:
                    27:99:81:94:9e:41:fe:4e:96:1b:55:45:24:9d:82:
                    84:93:59:c6:30:e3:47:05:cb:e4:f0:1c:d4:8e:aa:
                    d5:cc:b7:df:c2:69:0a:d1:57:29:fa:b5:ac:2a:eb:
                    e9:b1:a4:61:e0:02:03:25:3a:30:07:8c:a3:92:4b:
                    50:99:5f:39:e8:95:ab:dd:2d:d6:09:d2:a8:9c:21:
                    1b:be:e1:e3:a3:88:49:b0:44:cd:31:b1:9f:ab:34:
                    d1:17:47:a3:e3:07:38:e2:33:02:0e:f4:18:00:7c:
                    e6:a4:96:37:67:8c:f8:bb:a5:24:d9:ec:2f:82:3c:
                    ca:b8:dc:60:4d:c4:35:cb:92:6a:b1:c7:1e:f4:be:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:8F:D0:EA:1E:E0:D5:D0:60:E8:05:AC:79:7F:7D:EC:7D:78:C2
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139392e302f32342d3234203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:7b:78:62:25:4a:0d:f6:56:8c:97:cb:73:4c:a3:6b:c1:3b:
         8f:ab:d8:ee:17:ea:34:88:b1:54:c9:9e:49:1f:fa:42:14:fa:
         ba:14:8e:b1:5b:53:9a:ed:83:2b:1a:b2:04:09:6d:48:25:0d:
         60:5e:c8:70:c2:d5:b4:d1:1e:2a:a4:14:ec:f8:a6:cf:6a:9f:
         c4:7c:76:da:ae:90:a4:f1:d7:02:b8:69:fa:1e:b7:74:8d:bf:
         61:fb:5e:23:01:43:49:3d:5e:29:6b:ae:04:db:e2:f7:0a:af:
         35:54:ec:26:34:94:01:2b:2b:3e:5c:e2:f9:f5:08:5e:38:28:
         60:e9:b2:1f:6d:e3:83:ef:9b:9e:96:f1:20:a7:bb:25:b3:31:
         58:6a:f0:6d:ca:27:af:8e:26:45:ae:4d:f5:f9:2a:8e:b8:e1:
         44:bd:33:13:85:44:cd:06:8a:a4:1a:1e:fa:a9:5b:50:29:c9:
         11:18:4f:c0:7c:4a:9d:38:81:94:cf:0d:0b:bd:8e:09:16:bc:
         17:60:ec:6e:ca:7b:a7:2a:50:c6:b6:38:49:be:78:59:95:c5:
         88:6b:05:7d:5f:ac:a5:b2:97:08:02:99:37:2f:b5:68:4e:77:
         aa:98:88:a4:f4:99:b9:25:bd:02:4a:5e:b1:6c:22:26:1f:bc:
         41:31:a1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org