Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e3134372e302f32342d3234203d3e2036353033.roa
File:                     3230302e32332e3134372e302f32342d3234203d3e2036353033.roa (raw, json)
Hash identifier:          6MGBcnUdk/27QKCKnj9ku0pkFvHaCQuaShMpLhLwEtQ=
Subject key identifier:   0F:92:EF:2A:87:D2:EF:7E:A8:A7:9B:68:79:A4:2C:3C:53:09:84:F8
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       3F71C0484CEE8CC6B9BA5ECD7A37F9751A1BD693
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e3134372e302f32342d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:40:12 +0000
ROA not before:           Tue 05 Mar 2024 17:35:12 +0000
ROA not after:            Tue 04 Mar 2025 17:40:12 +0000
asID:                     6503
IP address blocks:        200.23.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:71:c0:48:4c:ee:8c:c6:b9:ba:5e:cd:7a:37:f9:75:1a:1b:d6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:12 2024 GMT
            Not After : Mar  4 17:40:12 2025 GMT
        Subject: CN=0F92EF2A87D2EF7EA8A79B6879A42C3C530984F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:13:41:73:04:5a:c3:c3:26:b7:7f:30:dd:
                    37:94:ca:51:58:d4:61:f0:67:90:3c:95:45:a9:88:
                    a9:bc:71:f5:b7:6a:b2:c1:a3:a5:b8:60:6e:4f:e1:
                    c3:a7:47:25:00:29:1d:2f:f1:e0:84:f2:61:16:eb:
                    e6:16:e4:71:33:66:e3:14:d9:0c:92:38:aa:7c:c9:
                    56:b3:7c:f2:dc:71:e1:c5:e9:16:49:49:f0:b1:ea:
                    e3:40:c2:57:87:e3:52:f2:1b:45:42:13:0c:5c:5f:
                    42:30:c2:69:3f:2e:14:2d:ef:29:43:35:e6:b5:60:
                    d2:29:9a:20:b6:0d:e1:d6:34:d1:c9:08:50:bd:82:
                    3c:89:bc:a7:a6:fc:6a:c3:0c:4f:3f:eb:3e:a6:bc:
                    57:e7:de:fa:bc:80:e0:3b:57:e4:59:f0:ec:92:d8:
                    05:fa:2d:60:46:3e:1e:43:bb:ee:1c:72:7a:d6:36:
                    05:4b:e5:84:13:26:21:c8:a9:d4:a3:48:13:c3:79:
                    9d:d7:82:4e:3c:ba:52:90:25:d8:2b:51:a9:61:ab:
                    b5:59:d2:40:3f:b8:47:16:2e:eb:70:3d:20:15:3e:
                    cd:cd:53:21:d7:ac:6b:37:40:ea:97:71:65:03:cd:
                    2b:f6:b5:36:a1:33:2b:5e:99:b9:1e:fa:79:ab:5f:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:92:EF:2A:87:D2:EF:7E:A8:A7:9B:68:79:A4:2C:3C:53:09:84:F8
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e3134372e302f32342d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:65:67:61:aa:18:c5:31:74:58:a0:51:0e:4e:ef:9f:3b:e4:
         4d:bb:62:47:a3:d5:12:f8:d5:b3:5e:2c:ef:af:76:61:95:70:
         8b:b6:d3:d3:e2:25:a2:ba:85:55:dc:1b:c7:7f:fa:73:c2:7f:
         a2:df:45:08:b9:b7:95:0d:6f:b9:51:9f:23:cf:f8:a4:ee:31:
         a9:05:5e:aa:d4:91:a3:cb:54:4f:83:c4:a3:9e:b8:36:fd:28:
         5d:c3:99:c1:28:a9:b2:af:21:64:2f:87:b5:44:ed:f3:bf:f0:
         f1:2c:b9:43:59:9b:36:de:e1:1f:8a:47:e5:36:06:cb:ff:ca:
         15:f4:c9:0d:27:d4:b9:81:7a:6f:92:18:2c:c4:40:ad:7f:23:
         ce:29:71:82:ca:35:de:1f:aa:6a:e0:6a:87:fb:1b:07:31:ac:
         18:96:12:78:ca:62:3a:9a:88:b0:5b:ac:17:16:1c:b5:44:17:
         95:4f:af:db:a6:08:28:01:4b:85:fe:cc:39:bc:2a:a7:6d:24:
         7e:e3:ee:0d:1a:b8:b9:a3:18:fe:f4:6d:a9:49:99:76:a0:fd:
         ed:28:a1:82:b0:cd:05:9e:eb:c4:c5:71:c7:67:2e:ae:60:12:
         f4:92:bb:7d:ff:c3:38:68:fd:bb:f2:9c:4d:d2:4d:43:6a:d0:
         db:80:02:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:38 2024 by rpki-client on console-ams.rpki-client.org