Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e37322e302f32332d3233203d3e2036353033.roa
File:                     3230302e32332e37322e302f32332d3233203d3e2036353033.roa (raw, json)
Hash identifier:          9VLt1B4Yk46PDInr6CWpw4naemZuZSjyJw8g/Y963oU=
Subject key identifier:   C9:49:80:76:58:76:19:BC:B2:AF:37:43:83:A2:8B:BE:98:45:1B:6F
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       47DCBD58E918231FAFBB3092E393E102EF71D0D6
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e37322e302f32332d3233203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:40:14 +0000
ROA not before:           Tue 05 Mar 2024 17:35:14 +0000
ROA not after:            Tue 04 Mar 2025 17:40:14 +0000
asID:                     6503
IP address blocks:        200.23.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:dc:bd:58:e9:18:23:1f:af:bb:30:92:e3:93:e1:02:ef:71:d0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:14 2024 GMT
            Not After : Mar  4 17:40:14 2025 GMT
        Subject: CN=C9498076587619BCB2AF374383A28BBE98451B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:e8:0a:2b:6f:bf:a4:bc:d7:52:fe:be:b3:
                    f9:7c:e5:f5:c3:af:52:cb:ad:49:18:1f:62:52:99:
                    6e:ec:83:01:ef:a7:b7:12:e6:22:52:d7:b6:ec:69:
                    29:a5:ca:5d:1a:88:93:fe:02:20:75:1d:86:69:55:
                    94:77:9b:38:fa:3d:32:2b:ee:c0:c0:d4:2c:da:bc:
                    d1:a0:c6:c3:4a:f4:47:36:f8:f7:92:62:37:bf:73:
                    fb:e7:b3:41:53:7d:eb:1a:92:9a:27:7f:cf:ca:63:
                    cd:ae:37:13:5e:92:9a:74:2e:37:55:8c:09:2f:f3:
                    85:1e:a7:6e:6d:8d:a7:cd:c3:c6:64:2b:25:9d:36:
                    8c:4c:31:22:4c:59:13:fd:d8:c2:81:19:5a:82:e2:
                    e2:58:17:53:8f:92:08:ec:4a:cb:20:f8:cb:aa:bc:
                    82:f3:fb:0a:f8:86:f8:fe:96:00:39:d5:4e:89:a9:
                    44:cf:c6:dc:26:80:52:e5:62:74:93:4b:fb:8a:51:
                    05:3d:ac:13:74:ed:dd:7b:71:aa:5c:38:27:01:b4:
                    7f:35:98:de:ca:28:5c:5d:53:cc:4b:c8:b3:3b:7e:
                    02:aa:52:ac:11:17:71:8d:65:4f:1e:85:e9:c1:95:
                    9f:5e:dd:9d:1d:19:ff:16:0d:4c:e1:8a:58:0d:70:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:49:80:76:58:76:19:BC:B2:AF:37:43:83:A2:8B:BE:98:45:1B:6F
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e37322e302f32332d3233203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:f3:da:c6:20:67:95:58:42:06:3d:ad:11:c6:c7:c7:2d:
         c5:5a:72:58:db:30:d4:be:df:a4:78:53:9a:0e:4c:6f:1e:ae:
         33:f0:28:2d:9f:37:5b:4d:16:e0:57:3a:22:7f:d8:aa:42:f5:
         f3:d9:5b:ae:ec:ad:b5:e2:aa:6a:01:25:be:17:9c:ae:df:93:
         6b:52:f2:81:57:ef:6a:92:d0:35:cb:c5:ff:a0:0a:cd:8a:7a:
         c0:7c:2b:42:e9:5d:2e:d6:3c:66:8d:6c:70:d9:c2:11:b9:70:
         13:7a:15:39:83:d3:c8:52:fa:4c:f4:16:5a:b0:37:b4:46:1f:
         0b:36:ab:32:83:19:28:46:77:7e:64:a2:7a:6f:60:c4:08:47:
         b3:8b:7d:82:af:a1:2c:12:0e:fd:b8:14:b5:5b:65:be:b3:06:
         b8:d6:93:db:52:07:49:a3:7e:71:18:a9:15:bd:4f:05:c5:af:
         e1:36:64:46:69:f5:a9:ad:c2:83:25:19:9e:6f:cc:d4:92:6e:
         c8:8a:59:0d:72:2f:0a:ad:0e:c3:17:05:a3:8b:20:9a:9a:af:
         f1:1b:5d:a7:2d:5a:97:6d:8f:95:5c:3b:fb:38:16:45:c6:6d:
         56:eb:50:ef:3a:2b:8f:5b:c7:04:90:44:71:d5:b5:3b:1a:3b:
         25:5e:45:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:32 2024 by rpki-client on console-fra.rpki-client.org