Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3230302e3130372e3234302e302f32312d3234203d3e203237383339.roa
File:                     3230302e3130372e3234302e302f32312d3234203d3e203237383339.roa (raw, json)
Hash identifier:          /twpfgVIvI/hA2aoPmKEG5nQatEs4XlwiNx6HPHKP2s=
Subject key identifier:   3F:CD:1E:FA:A3:D9:27:BA:EA:6C:5A:85:12:2F:1C:CE:FD:F3:50:3D
Certificate issuer:       /CN=52A0CD9886DF104498561B789483DB0D9F8E804F
Certificate serial:       2DA56803700F50776DD74122AAC057C18A1968F2
Authority key identifier: 52:A0:CD:98:86:DF:10:44:98:56:1B:78:94:83:DB:0D:9F:8E:80:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3230302e3130372e3234302e302f32312d3234203d3e203237383339.roa
Signing time:             Tue 05 Mar 2024 18:14:28 +0000
ROA not before:           Tue 05 Mar 2024 18:09:28 +0000
ROA not after:            Tue 04 Mar 2025 18:14:28 +0000
asID:                     27839
IP address blocks:        200.107.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/52A0CD9886DF104498561B789483DB0D9F8E804F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/52A0CD9886DF104498561B789483DB0D9F8E804F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a5:68:03:70:0f:50:77:6d:d7:41:22:aa:c0:57:c1:8a:19:68:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A0CD9886DF104498561B789483DB0D9F8E804F
        Validity
            Not Before: Mar  5 18:09:28 2024 GMT
            Not After : Mar  4 18:14:28 2025 GMT
        Subject: CN=3FCD1EFAA3D927BAEA6C5A85122F1CCEFDF3503D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:f0:69:d9:6c:df:ee:29:60:4b:d9:93:24:
                    1d:ee:d4:b8:98:26:d4:76:47:7e:df:59:84:42:26:
                    51:12:d5:38:31:ad:40:ed:ea:10:bf:30:ee:6d:54:
                    be:67:1e:1d:68:f7:00:1c:f5:ac:ab:2b:d5:f1:b9:
                    9e:46:7e:44:8d:ed:f1:40:85:bb:e2:d6:67:51:53:
                    14:3f:8f:55:73:46:73:ca:63:97:1e:dc:5a:07:b4:
                    8f:bc:87:1b:0a:41:f6:8d:e9:6f:cf:45:94:f0:6b:
                    65:0e:37:e3:70:92:ee:46:56:d0:a5:77:ca:24:9b:
                    db:6a:70:e2:03:06:c3:51:e6:75:6e:b0:53:e9:cf:
                    58:3c:3a:50:03:8f:3c:ae:1e:0a:bd:b5:e1:93:d2:
                    d7:00:0d:ed:90:80:21:44:83:6a:7e:95:39:f3:ed:
                    df:c7:40:a1:fb:69:55:5e:81:89:a6:2e:b9:47:a0:
                    e1:9d:41:f1:40:75:e7:ea:0b:17:7c:e4:77:28:bf:
                    9e:5a:c6:6f:bc:f0:58:e9:c9:d8:1d:77:76:b6:1f:
                    28:fc:9f:a1:f0:5f:79:20:4c:37:b8:3a:bf:e5:8d:
                    59:2c:92:c7:f0:00:a8:a4:b2:a4:8f:ee:21:62:99:
                    08:6a:aa:ba:a1:9c:81:2b:26:74:f9:14:e1:a1:b0:
                    7f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CD:1E:FA:A3:D9:27:BA:EA:6C:5A:85:12:2F:1C:CE:FD:F3:50:3D
            X509v3 Authority Key Identifier:
                keyid:52:A0:CD:98:86:DF:10:44:98:56:1B:78:94:83:DB:0D:9F:8E:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/52A0CD9886DF104498561B789483DB0D9F8E804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3230302e3130372e3234302e302f32312d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:0c:cd:21:91:28:85:8e:8f:3f:a2:15:29:e5:68:73:0c:
         00:11:e6:8a:a0:1a:2c:27:51:96:77:52:23:f3:b4:17:2d:bf:
         e8:1f:04:a2:d5:9e:12:af:10:65:8e:55:a7:35:73:c4:2a:87:
         8b:b3:a5:89:2d:20:c9:1f:a3:58:a8:ae:ee:b4:f7:34:b6:5c:
         c6:a4:7c:e6:a5:37:9c:32:ff:21:94:9c:56:1c:29:83:d0:aa:
         5e:7b:53:34:54:cd:27:54:0d:c2:12:52:33:be:e5:c8:f3:73:
         7d:b4:a2:22:c8:26:25:36:60:ba:27:2d:f3:04:b2:be:c5:d1:
         38:e9:f4:21:21:3d:1d:2f:cb:25:5a:74:26:e3:22:98:75:ff:
         57:61:f1:4e:c7:28:64:ef:f3:48:d7:2f:ac:4a:00:89:5c:37:
         d6:d4:e3:ba:ee:59:89:d1:e8:67:4d:ef:ce:2a:c3:6c:4d:ef:
         76:c3:84:fb:b2:cd:cd:3f:5f:d9:0c:0d:27:63:53:ec:aa:1a:
         1c:f6:7d:91:c1:0d:a9:4a:b2:da:99:91:29:8f:98:8c:77:19:
         84:c2:7f:b1:cf:82:90:88:77:85:e5:64:08:5c:9e:8c:70:80:
         0a:85:15:b1:42:48:f3:0b:89:67:f0:29:a5:be:2b:08:59:e4:
         bc:c1:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 12:11:47 2024 by rpki-client on console-fra.rpki-client.org