Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33362e302f32332d3234203d3e203139313830.roa
File:                     3230302e3131302e33362e302f32332d3234203d3e203139313830.roa (raw, json)
Hash identifier:          5RyBYbbL7CwWq1NdtwfPkyE6puSX1slD96j1jX48TL0=
Subject key identifier:   8D:FA:F0:CF:C0:14:87:88:0F:BD:EF:0B:C2:F8:3C:DD:89:BF:77:41
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       558032494B71708A9114BBAE4BF1CA3DD3AE6F80
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33362e302f32332d3234203d3e203139313830.roa
Signing time:             Tue 05 Mar 2024 17:56:47 +0000
ROA not before:           Tue 05 Mar 2024 17:51:47 +0000
ROA not after:            Tue 04 Mar 2025 17:56:47 +0000
asID:                     19180
IP address blocks:        200.110.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:80:32:49:4b:71:70:8a:91:14:bb:ae:4b:f1:ca:3d:d3:ae:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:47 2024 GMT
            Not After : Mar  4 17:56:47 2025 GMT
        Subject: CN=8DFAF0CFC01487880FBDEF0BC2F83CDD89BF7741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:b8:c5:94:99:0a:0a:79:bf:f5:db:e8:33:
                    45:90:24:31:6b:bb:45:b9:13:45:e4:0a:17:0c:93:
                    b3:48:cb:9a:b0:78:48:4f:35:54:01:b8:6c:03:ba:
                    dd:a9:f4:7e:8a:3c:f1:d3:4a:75:de:5f:df:9a:24:
                    6e:41:26:cd:58:60:ae:a6:16:1d:ae:ee:a6:6b:f8:
                    0f:37:bc:79:f2:a5:c6:a3:e5:f9:2c:36:98:d8:d3:
                    a1:bd:42:56:3b:c8:89:c5:15:42:a8:2a:89:c7:67:
                    47:40:80:92:bb:b6:7a:00:d9:64:10:7e:c9:ae:6b:
                    b9:66:4c:0a:f7:4f:38:f8:c7:cc:7f:9c:6b:d3:d2:
                    1e:60:95:35:48:cf:6d:e1:e3:26:8f:93:59:59:7f:
                    bd:84:49:04:37:a4:80:73:2a:77:b5:b3:23:e8:c9:
                    ed:23:2b:1f:d8:9b:4f:e4:60:b2:00:15:5c:93:35:
                    d9:17:12:ef:1a:44:c1:00:5d:8f:75:52:59:bf:85:
                    f0:91:85:09:14:1d:3f:e6:d9:61:c6:85:bd:60:96:
                    4e:e5:9d:1d:fa:1c:36:f6:36:e2:ef:73:aa:50:f3:
                    b1:18:54:36:e2:f8:46:da:49:f0:c8:1c:64:39:22:
                    7d:99:39:e4:39:c7:ac:be:d7:ef:3a:84:25:8c:73:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FA:F0:CF:C0:14:87:88:0F:BD:EF:0B:C2:F8:3C:DD:89:BF:77:41
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33362e302f32332d3234203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:b6:16:34:64:62:7c:f7:81:64:06:65:f4:cf:c3:8c:61:
         9c:42:85:82:9e:28:1d:f8:3b:b1:c3:06:d9:70:e5:b6:e0:20:
         0d:9e:06:07:e9:f4:99:53:c0:f0:4c:32:ac:37:6c:f5:4e:89:
         1c:ae:58:96:67:b3:fd:83:ff:e9:82:5c:0e:23:5d:1d:4a:97:
         09:f7:26:f5:6d:75:6a:7d:fe:4b:67:5c:ef:49:69:a7:0b:21:
         57:47:c2:76:c1:22:80:a9:b3:2a:d4:95:14:32:29:84:b1:cd:
         1d:29:4e:13:35:f3:33:be:38:80:4a:09:c1:8e:9d:e0:8f:7f:
         a0:96:5d:52:4f:0c:70:0c:99:ff:36:f1:9d:7c:4b:19:96:73:
         17:5a:95:b4:37:9e:b5:c7:8e:c7:b4:9d:14:12:84:0e:34:6c:
         44:8f:ae:11:b1:22:24:ff:9e:2c:91:a4:18:67:a6:d7:d5:ea:
         8f:32:50:ea:9f:6f:d2:b3:66:35:48:a1:10:65:a4:87:5b:82:
         6c:4e:ec:9c:cb:c6:62:63:ab:87:5e:58:4e:90:cc:02:fd:31:
         00:42:60:e8:9e:95:de:d8:a1:93:ba:45:01:01:7d:42:63:88:
         80:21:34:68:25:d2:26:d2:87:66:1a:6f:e8:25:6d:30:00:4a:
         a8:e7:2d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 07:39:59 2024 by rpki-client on console-ams.rpki-client.org