Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3230302e38372e302e302f31362d3234203d3e2036353638.roa
File:                     3230302e38372e302e302f31362d3234203d3e2036353638.roa (raw, json)
Hash identifier:          qDssL1zSLXnA/Vz8Aas5s7GuRhZ4RH41iYU+15mHib0=
Subject key identifier:   79:3A:2B:D3:FC:C2:BB:6A:FB:32:F2:C8:B7:38:28:B2:57:EE:E6:7E
Certificate issuer:       /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial:       32F815FAE19603CFEA9CBBEEFBF290A680CA8DD8
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3230302e38372e302e302f31362d3234203d3e2036353638.roa
Signing time:             Tue 05 Mar 2024 18:06:18 +0000
ROA not before:           Tue 05 Mar 2024 18:01:18 +0000
ROA not after:            Tue 04 Mar 2025 18:06:18 +0000
asID:                     6568
IP address blocks:        200.87.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f8:15:fa:e1:96:03:cf:ea:9c:bb:ee:fb:f2:90:a6:80:ca:8d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
        Validity
            Not Before: Mar  5 18:01:18 2024 GMT
            Not After : Mar  4 18:06:18 2025 GMT
        Subject: CN=793A2BD3FCC2BB6AFB32F2C8B73828B257EEE67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:e2:c1:eb:7c:3b:87:e9:77:b2:18:ae:ab:
                    32:3d:00:45:37:f5:ff:82:4e:aa:44:10:70:2e:8f:
                    d3:fd:06:8b:40:ce:fc:78:ad:22:6e:0f:0c:42:4e:
                    a7:17:34:31:87:71:00:d2:4c:43:8d:71:4b:60:df:
                    9f:53:dd:fd:f2:17:e1:ee:19:32:46:c7:4c:6c:b1:
                    58:80:f6:31:8d:2c:d5:5c:d7:7d:d6:3e:b5:b6:bb:
                    0e:da:31:02:87:52:cf:36:d8:d3:da:05:9c:a3:1c:
                    41:b5:ca:13:47:2b:d9:00:5f:eb:f8:77:55:43:e5:
                    d0:88:25:51:b7:a5:0e:b8:0c:5b:cc:f5:60:74:47:
                    d3:07:0a:93:db:d9:12:be:45:4f:97:c3:27:eb:64:
                    1b:82:73:fb:07:79:b9:42:49:4a:c4:d2:47:ca:11:
                    e7:45:78:91:ba:32:bb:bb:31:1f:28:84:0a:fb:94:
                    b4:26:28:0b:2e:c2:2e:1d:4c:6e:69:53:c6:6c:01:
                    88:78:b3:0b:28:59:a9:0b:e7:17:ba:10:c2:c7:c9:
                    cf:1a:d7:81:fb:94:2f:b8:b9:fe:5c:84:5d:ed:b3:
                    4b:b3:bb:75:47:1e:48:4b:be:09:ac:b4:61:32:45:
                    4c:4e:f8:cb:75:84:a5:fb:36:70:cd:a2:93:3b:88:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3A:2B:D3:FC:C2:BB:6A:FB:32:F2:C8:B7:38:28:B2:57:EE:E6:7E
            X509v3 Authority Key Identifier:
                keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3230302e38372e302e302f31362d3234203d3e2036353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:f9:a0:68:8c:4f:fd:1f:bf:be:0a:fc:3d:7c:1b:7e:a2:ab:
         0e:84:2b:74:66:2b:3e:8d:ca:bd:2b:44:80:e0:77:f9:09:aa:
         8c:a9:0e:97:99:8f:51:3a:3b:30:24:86:37:98:5f:30:3a:2b:
         62:c1:71:67:b9:45:c5:c5:c3:7b:b7:cf:3a:b5:b6:cd:60:cc:
         c1:a3:3b:bb:19:06:f5:f1:b9:1f:7e:50:1f:ac:3b:4b:4f:57:
         fa:14:29:53:22:9c:23:fa:65:80:dd:de:42:17:88:c6:e1:fb:
         11:88:c5:e9:7f:bb:2a:08:f2:06:22:e2:87:b1:2e:bc:15:5c:
         e7:4f:46:b7:da:f3:9c:b9:de:65:64:93:2b:96:37:88:b3:87:
         a8:1e:e7:cb:a2:81:a7:4b:e6:4d:fe:a2:ef:fb:23:f3:68:c4:
         ba:a1:d7:5c:52:ad:6b:1c:15:6c:5d:91:9b:6d:83:eb:af:be:
         5b:92:94:1c:fe:c1:c0:4c:d9:3c:2a:2d:10:54:dc:4c:56:dc:
         83:17:18:c4:0c:68:aa:39:77:24:5c:f7:fa:1b:25:7d:d0:c0:
         e5:db:ff:a4:b5:da:81:db:4b:cb:5b:4d:49:6d:2d:ef:e1:da:
         a2:76:82:42:d0:3a:c1:83:17:54:e4:d0:90:a9:b2:be:62:58:
         4b:05:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org