Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20323033.roa
File:                     3230302e312e3137352e302f32342d3234203d3e20323033.roa (raw, json)
Hash identifier:          y0Ag/8KN6eYUNcpygVL2qmoZam9yNnL/Yo+AxSmJ5KQ=
Subject key identifier:   B7:96:DB:4B:21:B2:6C:FC:99:F4:15:F3:36:13:1E:70:4E:51:00:B2
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       6E671C1026C5EADDFC86B66E2B9398E84E155090
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20323033.roa
Signing time:             Tue 05 Mar 2024 17:54:17 +0000
ROA not before:           Tue 05 Mar 2024 17:49:17 +0000
ROA not after:            Tue 04 Mar 2025 17:54:17 +0000
asID:                     203
IP address blocks:        200.1.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:67:1c:10:26:c5:ea:dd:fc:86:b6:6e:2b:93:98:e8:4e:15:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Mar  5 17:49:17 2024 GMT
            Not After : Mar  4 17:54:17 2025 GMT
        Subject: CN=B796DB4B21B26CFC99F415F336131E704E5100B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:83:7d:7c:c3:35:55:5b:1b:fa:e7:bf:f5:
                    15:dd:48:3f:4e:33:45:07:0a:e0:e9:b7:e3:bd:6e:
                    22:28:48:82:b0:80:e1:26:d7:46:86:2a:5c:07:77:
                    d9:e0:fb:ae:a0:fe:59:2c:e6:81:b7:9e:d8:d4:52:
                    97:22:ed:04:af:f3:ab:fc:dd:3a:7a:7d:96:bf:c1:
                    ab:8b:e7:e6:83:8f:e0:42:f1:1c:f9:69:82:bc:1c:
                    cc:b7:c4:68:a0:0d:25:a2:94:11:71:b1:73:e7:87:
                    a0:36:c4:59:36:5d:99:a2:e3:88:42:5a:f5:ab:eb:
                    30:2d:e7:ec:15:a1:cb:97:d0:f8:67:9c:fc:cb:3e:
                    35:38:04:9a:fd:37:fb:06:38:0d:30:f4:79:a1:b4:
                    af:3a:8e:31:25:99:d0:94:d3:93:eb:0d:8a:d6:71:
                    8d:5b:12:34:0b:a9:cf:68:08:12:ea:28:11:7f:11:
                    ca:1f:28:2b:0b:7b:3d:36:84:af:71:cd:ec:05:0e:
                    e3:9d:ec:40:30:c4:21:ec:16:ca:2d:f9:89:92:c2:
                    8a:0e:42:f5:b3:53:f6:e8:94:d3:1f:20:02:1d:2c:
                    a7:f9:99:ab:d0:0e:b5:dd:a6:63:07:09:a3:6c:5e:
                    ee:ff:ea:88:11:43:2c:e5:33:bf:ab:2c:79:80:76:
                    2c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:96:DB:4B:21:B2:6C:FC:99:F4:15:F3:36:13:1E:70:4E:51:00:B2
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:a1:24:45:e3:a2:9c:7c:44:55:fd:9c:66:01:fa:fe:82:
         54:02:6c:42:27:d4:0a:e3:07:8b:1e:7f:8d:cc:24:d8:58:37:
         e7:f3:9a:88:71:72:3e:dd:b2:ef:bf:37:e9:4e:c5:60:0b:19:
         87:11:63:81:63:62:df:91:a2:71:59:e7:59:ca:9e:76:c5:9a:
         60:74:01:12:31:7f:8a:15:c6:5a:cc:78:9a:0f:35:23:41:2b:
         85:cc:47:59:dd:e6:51:82:5c:f2:f2:43:35:68:d5:92:5f:f3:
         4e:ac:59:d6:ab:35:cf:7a:f9:72:7c:d5:05:7b:b9:ee:27:f0:
         1a:a0:e0:c0:c3:8f:63:32:9b:2c:bd:ef:94:74:13:cd:61:16:
         f0:28:1a:6e:d2:60:60:c7:39:ad:65:8d:a2:e8:76:3e:95:d6:
         f3:df:64:f6:6c:43:a2:64:58:08:b4:4a:e4:d9:2e:39:ef:7a:
         3f:c1:aa:bd:54:53:53:73:4c:33:90:96:72:1e:35:fd:32:53:
         aa:70:6a:19:91:20:9f:ef:05:70:39:32:7b:f8:29:ca:78:80:
         53:4b:b6:9d:6f:d6:77:b7:d0:32:bd:95:bc:a8:8e:43:31:a1:
         76:a0:65:1e:1a:a4:ce:4f:21:7a:35:23:60:4f:72:d7:84:68:
         6e:29:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:00:20 2024 by rpki-client on console-ams.rpki-client.org