Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131372e302f32342d3234203d3e203236363035.roa
File:                     3230302e31362e3131372e302f32342d3234203d3e203236363035.roa (raw, json)
Hash identifier:          24VwuTLEQU1AkeAH9wmb2e9/eCWyBePbyANvtoe5wXA=
Subject key identifier:   97:84:C4:B9:A3:9A:99:05:3D:8C:F3:7B:C0:59:0D:2B:1F:5D:1A:C3
Certificate issuer:       /CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
Certificate serial:       753C361F6F932DABD96B1A56E053610BB963D767
Authority key identifier: B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131372e302f32342d3234203d3e203236363035.roa
Signing time:             Tue 05 Mar 2024 18:17:08 +0000
ROA not before:           Tue 05 Mar 2024 18:12:08 +0000
ROA not after:            Tue 04 Mar 2025 18:17:08 +0000
asID:                     26605
IP address blocks:        200.16.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3c:36:1f:6f:93:2d:ab:d9:6b:1a:56:e0:53:61:0b:b9:63:d7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
        Validity
            Not Before: Mar  5 18:12:08 2024 GMT
            Not After : Mar  4 18:17:08 2025 GMT
        Subject: CN=9784C4B9A39A99053D8CF37BC0590D2B1F5D1AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:cb:6c:af:03:9a:4f:e0:04:cb:3a:22:f8:
                    9f:36:ef:98:20:4b:f6:c7:cc:45:89:1d:8e:c8:42:
                    c8:92:9b:1c:bc:c4:0b:78:79:f7:66:27:f0:50:e3:
                    62:0e:64:fd:6c:20:59:e6:ac:53:6d:98:74:a3:dc:
                    ed:36:19:52:a4:02:75:db:18:10:27:86:01:a2:6c:
                    32:46:d0:56:09:6c:a0:72:b0:32:81:ad:08:95:1b:
                    05:eb:f2:c6:ba:ae:47:b2:95:34:cc:11:ad:f7:da:
                    1e:01:bc:e0:c1:4e:aa:94:ab:2b:5e:54:e2:9d:60:
                    7f:67:55:45:d5:4d:bc:69:c7:0c:f5:5d:1a:95:b9:
                    92:cd:4b:fc:9d:c6:36:a8:69:a6:4e:18:55:da:93:
                    ec:61:30:84:6f:c3:c9:0d:3f:ff:2f:5a:3a:a6:96:
                    9e:79:fb:dc:28:7b:ca:29:33:49:ef:23:2b:15:d8:
                    d1:15:ea:69:f6:04:81:0b:48:69:45:d6:1a:d2:7f:
                    fd:fb:1b:bd:be:eb:a1:e1:2b:5a:db:93:e1:ae:c7:
                    5b:46:9d:5c:b5:b1:af:c0:58:f4:4b:94:e4:4c:c8:
                    f7:7f:c6:a7:b9:03:f4:96:1d:b0:be:2d:f8:c9:b9:
                    37:d9:46:36:d8:70:b9:20:4b:b4:7b:44:6c:23:a3:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:84:C4:B9:A3:9A:99:05:3D:8C:F3:7B:C0:59:0D:2B:1F:5D:1A:C3
            X509v3 Authority Key Identifier:
                keyid:B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131372e302f32342d3234203d3e203236363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:6a:2d:34:f5:fb:9e:ab:73:5d:70:61:81:11:e3:ba:e1:
         f0:c7:70:30:33:33:bb:be:bc:2f:ff:8a:73:95:e2:52:6c:d0:
         d3:7e:63:e0:0d:f7:8e:90:25:6f:e6:8c:bd:4f:5c:75:cd:59:
         62:42:79:4c:0e:2a:96:3e:bc:3e:40:38:3a:89:d0:b8:a1:96:
         a2:e7:be:3c:a9:31:fe:b8:19:01:f0:56:83:8c:f6:77:0c:0e:
         25:b4:42:34:b5:8a:a6:1a:d9:44:81:ac:a3:a5:a7:68:a6:14:
         15:7e:bf:df:6e:b1:56:3d:8a:43:ed:99:75:83:02:21:15:e4:
         32:99:af:5e:ac:60:f4:8f:e1:36:43:a9:d4:3f:34:f8:9d:44:
         8c:d9:d3:a3:00:e9:ed:14:41:c5:f6:03:ff:fd:e6:7b:ea:97:
         21:57:a7:e8:4e:62:2b:73:57:29:3f:f8:61:7b:3b:06:25:92:
         63:44:61:61:8e:ef:cc:24:a9:8d:32:bb:2a:1b:ca:c5:3f:51:
         60:08:b9:45:7d:02:66:f8:bc:f8:6b:ea:2c:ea:7e:15:52:80:
         da:73:d9:d8:83:bd:20:99:d8:92:6b:05:84:dd:09:87:87:cc:
         7e:72:2f:5e:78:9f:b3:f3:98:e2:bd:5e:cb:88:2a:95:4c:b3:
         aa:d4:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org