Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32342d3234203d3e203139393035.roa
File:                     3230302e31302e3135362e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier:          Ra2CX/ECkKH2Hl0pb+1747ftcfZkbSBmaclF9SM77/A=
Subject key identifier:   BC:77:82:CF:6F:E5:28:D3:F3:2A:B6:07:0D:FE:47:1C:BD:DE:A8:87
Certificate issuer:       /CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
Certificate serial:       4FC0C37395765CBF3B3EF6F29B2CB0957D8D6015
Authority key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32342d3234203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 18:21:28 +0000
ROA not before:           Tue 05 Mar 2024 18:16:28 +0000
ROA not after:            Tue 04 Mar 2025 18:21:28 +0000
asID:                     19905
IP address blocks:        200.10.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c0:c3:73:95:76:5c:bf:3b:3e:f6:f2:9b:2c:b0:95:7d:8d:60:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
        Validity
            Not Before: Mar  5 18:16:28 2024 GMT
            Not After : Mar  4 18:21:28 2025 GMT
        Subject: CN=BC7782CF6FE528D3F32AB6070DFE471CBDDEA887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:d9:4c:86:87:35:33:63:d9:5c:2c:ea:97:
                    4a:65:8d:cf:02:15:c2:ae:8d:c5:39:95:8b:2e:b8:
                    63:30:36:16:54:b5:20:75:dd:e6:7c:55:fe:77:8a:
                    42:56:44:3b:d6:92:0c:a1:17:36:42:f4:cf:27:36:
                    39:d0:fb:5d:fb:40:8a:f3:f3:1a:f6:e1:88:2b:27:
                    07:f2:5a:1c:d3:01:42:83:f6:94:f4:8c:90:8d:7b:
                    35:12:1e:76:ae:71:ab:8f:8e:a0:2e:3a:fe:aa:47:
                    37:cc:01:11:7f:f0:80:aa:8a:f2:e1:2f:33:c9:6b:
                    80:eb:58:21:74:3d:f6:99:b8:c7:41:c4:8f:47:98:
                    7b:8d:d8:65:48:e9:8a:0a:68:06:b3:4a:66:bd:ff:
                    8a:52:5d:bd:e2:e3:83:45:08:86:77:35:22:ba:9c:
                    56:7b:a1:7f:88:15:ce:63:03:a2:84:43:66:97:38:
                    69:1e:ff:f5:fa:b8:5f:70:52:50:04:7f:ff:70:cd:
                    02:c9:72:eb:4b:34:67:37:2d:fa:cc:64:22:b2:1a:
                    14:9a:2a:b7:4f:a2:05:8e:8c:d8:0a:a8:b8:90:2c:
                    84:f4:47:c0:40:a3:bc:0b:20:13:fd:7c:81:d1:c3:
                    4b:99:4f:fb:c2:91:68:ba:87:86:48:94:a1:2d:8d:
                    97:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:77:82:CF:6F:E5:28:D3:F3:2A:B6:07:0D:FE:47:1C:BD:DE:A8:87
            X509v3 Authority Key Identifier:
                keyid:D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32342d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:f7:0b:c9:b1:87:bb:f0:a1:32:6a:a7:d0:57:ba:6f:db:
         1e:d3:20:3c:a9:42:3a:4a:1a:f4:b0:10:e5:ff:3f:85:47:3c:
         86:4e:4a:9a:b4:f0:bd:64:4c:6e:ea:65:db:49:7f:c2:e9:35:
         0e:57:64:73:e8:35:5e:e0:b4:63:88:bd:c4:0d:bb:87:18:5c:
         79:4b:5a:89:0f:fd:b8:a7:19:b7:47:ce:54:95:0a:a7:0b:b1:
         52:32:6b:11:cb:71:ed:ec:8b:ec:2d:87:42:2e:ea:95:c2:e6:
         db:b7:7a:c1:72:62:28:ec:4c:a9:f0:43:88:66:f0:ff:3a:d7:
         0f:84:25:04:12:25:47:af:f7:9e:f1:89:7b:66:f9:b5:d2:0b:
         a7:2d:df:01:9a:3a:7d:68:e1:15:67:b6:4b:65:19:09:9a:79:
         8f:60:b9:43:eb:73:fe:fd:73:c7:50:62:bc:a4:e4:fe:8b:1e:
         5c:a5:33:a2:8d:f5:48:31:b3:da:3d:b7:f5:e6:9d:93:7c:40:
         63:41:04:e1:55:9a:cf:21:21:dc:54:1c:d3:82:d3:11:ac:a4:
         4e:86:88:b2:14:85:10:d0:c8:8b:4d:06:b9:c7:64:46:41:e7:
         19:2c:70:d4:de:ec:c1:9c:87:9a:9a:bc:7c:79:d5:b9:7d:84:
         6d:ec:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:49 2024 by rpki-client on console-ams.rpki-client.org