Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3132382e302f32312d3234203d3e203237363639.roa
File:                     3230302e3130382e3132382e302f32312d3234203d3e203237363639.roa (raw, json)
Hash identifier:          IkEk1kCyWmeXI+nuDbXykFnextkL0fG1fmcBGmmWW2w=
Subject key identifier:   18:97:FC:77:22:C7:DF:CE:12:4F:D9:9F:63:F5:A6:86:5F:B0:5A:C1
Certificate issuer:       /CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
Certificate serial:       2F9B0504C23C8E803C08B8488128AEB654047301
Authority key identifier: CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3132382e302f32312d3234203d3e203237363639.roa
Signing time:             Tue 05 Mar 2024 18:00:10 +0000
ROA not before:           Tue 05 Mar 2024 17:55:10 +0000
ROA not after:            Tue 04 Mar 2025 18:00:10 +0000
asID:                     27669
IP address blocks:        200.108.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:05:04:c2:3c:8e:80:3c:08:b8:48:81:28:ae:b6:54:04:73:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
        Validity
            Not Before: Mar  5 17:55:10 2024 GMT
            Not After : Mar  4 18:00:10 2025 GMT
        Subject: CN=1897FC7722C7DFCE124FD99F63F5A6865FB05AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:cc:27:d3:07:a8:2b:f5:b8:16:43:e3:94:
                    92:72:ce:7b:18:3c:ee:fb:04:4c:96:19:45:e7:b2:
                    f3:01:34:52:a0:71:c6:1f:f1:a3:06:d7:b0:45:a5:
                    a6:d3:a6:5d:a6:9d:79:fb:e3:dd:65:70:2c:e3:62:
                    26:58:88:46:b2:93:a0:1d:da:bd:50:cb:52:75:63:
                    87:74:29:37:67:33:56:35:7c:75:47:a2:3e:d2:c1:
                    d6:c9:73:d9:ea:ea:5b:bf:20:fa:15:d9:f7:84:ea:
                    de:1e:d2:c4:7e:6d:ba:25:94:fa:ee:72:c9:2c:a1:
                    34:aa:bb:48:4d:9e:a5:e6:09:d9:52:5e:c1:a3:dc:
                    69:32:96:66:90:09:94:a1:86:fc:50:f3:2b:f5:61:
                    2b:88:8d:2b:12:1b:c6:28:27:d7:5f:86:9e:e7:65:
                    c7:b2:2a:7e:a6:70:a5:96:fb:a9:72:41:cf:7a:5c:
                    db:08:26:90:07:4b:78:26:0c:a7:f8:af:30:ed:b7:
                    e4:00:5f:49:be:c7:9f:47:5c:d0:8a:b8:42:22:51:
                    14:40:20:e4:3f:b0:21:c0:b6:94:63:6d:f2:e1:f8:
                    5d:d3:0f:44:f2:5e:9f:c7:2c:8f:4c:37:fe:ac:67:
                    74:88:e3:30:e9:e2:c0:cd:6d:4a:a3:68:bf:31:b2:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:97:FC:77:22:C7:DF:CE:12:4F:D9:9F:63:F5:A6:86:5F:B0:5A:C1
            X509v3 Authority Key Identifier:
                keyid:CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3132382e302f32312d3234203d3e203237363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:bb:da:57:2f:85:95:f0:98:5b:29:00:fc:86:c0:b8:3c:
         f3:b0:75:60:b2:fa:ee:26:8a:54:bc:1a:72:8a:ee:a5:05:88:
         17:be:55:1b:f3:72:6f:c9:e9:1c:f3:60:85:8e:4d:57:69:8b:
         24:fb:38:e6:1c:1c:2d:c6:17:bc:ca:1a:9d:0e:11:87:e0:72:
         f0:fd:05:3e:54:22:d3:81:8d:28:99:00:0d:5d:42:94:b6:bd:
         23:ce:49:1e:e5:83:8d:b4:48:e4:d2:a1:bc:c5:34:b5:03:8e:
         08:ad:05:e1:d5:a4:70:79:68:aa:6a:7a:c0:72:82:be:f9:75:
         07:7b:d6:58:92:68:de:b7:fc:1d:99:91:85:51:ad:6c:75:75:
         cb:ee:f8:db:81:f0:ed:17:96:a7:50:36:c8:d4:e3:b3:90:dc:
         df:3e:85:a6:a0:21:90:fb:9e:73:68:fe:9a:67:66:19:45:3a:
         3c:54:9b:62:4f:8a:cd:90:3f:a9:cb:e8:52:72:39:74:c9:a6:
         14:90:03:b5:f7:b4:e3:62:51:51:96:84:03:2c:68:8c:f4:d9:
         8c:3d:d1:24:dd:be:8c:94:51:8d:71:62:a1:75:35:c7:2d:7e:
         c7:9a:0b:86:ea:92:9a:fb:91:b5:e9:ff:2c:55:f0:d0:fa:e3:
         0c:e1:f9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org