Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3230302e36332e3131322e302f32312d3234203d3e203237393731.roa
File:                     3230302e36332e3131322e302f32312d3234203d3e203237393731.roa (raw, json)
Hash identifier:          vJExelW+ZXXqsnrgMqjBckX3M/qkNnBuKrJewwLkeBQ=
Subject key identifier:   AF:AF:74:79:E1:7B:03:5D:8F:2D:6B:53:BE:43:09:4D:14:3F:3D:81
Certificate issuer:       /CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
Certificate serial:       65AD7B0E9C7AAE88A4E5E0BA2EBFE57A119CB5A2
Authority key identifier: 18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3230302e36332e3131322e302f32312d3234203d3e203237393731.roa
Signing time:             Tue 05 Mar 2024 17:40:13 +0000
ROA not before:           Tue 05 Mar 2024 17:35:13 +0000
ROA not after:            Tue 04 Mar 2025 17:40:13 +0000
asID:                     27971
IP address blocks:        200.63.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ad:7b:0e:9c:7a:ae:88:a4:e5:e0:ba:2e:bf:e5:7a:11:9c:b5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
        Validity
            Not Before: Mar  5 17:35:13 2024 GMT
            Not After : Mar  4 17:40:13 2025 GMT
        Subject: CN=AFAF7479E17B035D8F2D6B53BE43094D143F3D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:ec:0d:1d:17:e9:ec:c6:3a:0b:76:c2:29:
                    46:7a:92:f8:44:9c:28:39:2b:64:30:90:b8:0f:17:
                    21:06:7e:96:29:df:f0:3c:7e:aa:66:ca:e7:05:f8:
                    f6:8a:32:d7:6a:e8:6d:36:f7:4f:19:7d:6a:94:4b:
                    08:b2:1d:37:13:94:9d:ad:91:2a:de:4c:b0:e6:fc:
                    84:f6:35:59:9e:5f:d3:f3:32:50:c9:3b:83:9a:55:
                    15:88:3e:ed:ac:97:71:75:f3:44:57:2a:39:df:14:
                    81:58:f1:cb:f3:72:ab:72:02:7d:ec:15:92:3f:d5:
                    80:58:a6:a7:e0:60:71:15:0c:7d:10:be:0f:e7:67:
                    7a:e7:52:8d:17:b1:23:3a:97:37:b9:88:0d:40:c7:
                    fe:25:e0:a9:02:4f:cf:79:e3:3c:fd:b8:38:32:06:
                    85:22:46:63:0e:fa:3b:46:64:26:a8:36:f3:dc:64:
                    04:45:16:0d:ff:c9:91:bf:bd:ed:97:13:f8:cc:5c:
                    9b:2b:fa:1b:7b:57:6c:5a:e3:63:a5:79:1f:a4:eb:
                    da:46:1c:87:c3:bd:57:ba:4f:d5:f0:47:04:ee:9d:
                    8f:65:85:67:4f:16:17:92:2a:e5:44:53:2d:9b:f1:
                    84:ae:7a:c9:42:ea:3b:34:61:4d:6b:10:cb:54:ac:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AF:74:79:E1:7B:03:5D:8F:2D:6B:53:BE:43:09:4D:14:3F:3D:81
            X509v3 Authority Key Identifier:
                keyid:18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3230302e36332e3131322e302f32312d3234203d3e203237393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:76:55:7f:e3:01:0b:f1:24:79:5f:4b:46:71:2d:d4:8a:4d:
         e4:da:7b:1a:52:e5:ab:2d:11:d9:80:e6:57:0a:cc:14:12:0e:
         fb:e5:00:90:a3:1e:03:b5:35:1e:c7:ec:45:5c:b1:43:14:2c:
         2f:aa:88:00:2d:03:c6:18:f1:0d:59:7a:b6:01:66:7c:2f:b1:
         2e:a0:ab:81:49:87:b8:d6:16:a7:db:45:0a:0f:90:04:94:0d:
         e2:64:89:d9:08:5a:39:82:45:ad:c3:54:1a:3c:dc:cd:c4:4b:
         ce:ae:31:5d:3a:c7:dc:02:a0:5a:fe:4f:38:25:2a:d8:9b:78:
         24:e0:7c:01:b7:91:b9:1d:d8:7f:fe:08:9d:ff:0d:4c:1a:49:
         dd:14:aa:13:23:70:17:b6:9f:a3:f5:75:99:b0:47:b5:00:4e:
         69:bd:23:23:67:fb:3c:fa:53:cc:c9:0b:42:dc:b8:f8:94:21:
         94:85:ce:b0:87:ee:7c:b2:2d:d8:50:71:e7:95:7a:b2:23:7b:
         81:31:12:d2:1c:11:27:1f:80:c3:0f:6c:d4:27:f4:99:77:02:
         d8:70:06:14:eb:ba:0f:1a:fe:b2:30:19:5f:62:38:af:58:54:
         44:5f:09:68:3a:75:22:58:20:37:58:a2:a2:b1:92:62:fc:3e:
         aa:ea:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org