Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133382e302f32332d3234203d3e203237363732.roa
File:                     3230302e37372e3133382e302f32332d3234203d3e203237363732.roa (raw, json)
Hash identifier:          j7B5vwigKQQ4npTZjIrbNoYk0MfXG/L6zk6SEGnU0DA=
Subject key identifier:   2B:B0:90:EE:DF:F1:9B:86:7F:24:B0:EB:E8:5E:9D:AB:C3:B6:9E:29
Certificate issuer:       /CN=8578B31074E0B57459B1C2A690B89261860EA94C
Certificate serial:       202FD5C613B58F4F8F47D52697FE5E7A209D96F7
Authority key identifier: 85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133382e302f32332d3234203d3e203237363732.roa
Signing time:             Wed 15 May 2024 13:15:05 +0000
ROA not before:           Wed 15 May 2024 13:10:05 +0000
ROA not after:            Wed 14 May 2025 13:15:05 +0000
asID:                     27672
IP address blocks:        200.77.138.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 05 Jul 2024 04:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2f:d5:c6:13:b5:8f:4f:8f:47:d5:26:97:fe:5e:7a:20:9d:96:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8578B31074E0B57459B1C2A690B89261860EA94C
        Validity
            Not Before: May 15 13:10:05 2024 GMT
            Not After : May 14 13:15:05 2025 GMT
        Subject: CN=2BB090EEDFF19B867F24B0EBE85E9DABC3B69E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:17:aa:a9:45:70:88:23:d6:0c:f8:9c:90:
                    cf:42:2e:bc:7f:4d:20:1b:85:00:2b:d5:4a:8b:a4:
                    bb:62:18:a9:cd:b0:ca:3f:5f:be:a2:73:66:55:5e:
                    6f:5b:fc:ce:bc:38:60:ec:9f:38:38:d3:53:6d:ae:
                    fe:2e:a4:92:b8:6d:e2:99:95:9d:60:dd:da:af:de:
                    4e:29:62:54:94:f8:e5:36:0a:02:85:70:d5:9e:06:
                    d4:2c:bc:59:34:d2:04:f1:cf:20:8c:5b:cb:40:2b:
                    e5:82:d0:a9:ea:d6:5a:0a:50:77:ea:4d:20:bf:67:
                    78:74:3e:d5:30:3f:23:59:e8:e8:93:f3:ad:6c:48:
                    82:b9:ed:77:31:3e:bf:57:61:0b:c5:64:68:f9:b2:
                    a5:df:45:ec:df:4c:12:06:36:36:5b:7e:4f:57:2b:
                    f9:46:39:83:f8:37:7b:18:08:5e:74:6f:56:e3:91:
                    bb:2d:e7:07:9a:e9:64:89:b3:a6:cc:14:43:04:93:
                    ad:f9:48:d4:16:40:cd:e1:9b:c9:21:c6:39:c8:15:
                    95:4b:93:a9:ed:7d:ee:f6:8e:90:a6:b6:d7:e5:ef:
                    cd:ba:0c:59:82:89:69:8d:bf:d6:93:cd:55:e5:99:
                    ef:93:67:15:31:7a:73:f8:21:9f:2b:ac:78:41:f4:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B0:90:EE:DF:F1:9B:86:7F:24:B0:EB:E8:5E:9D:AB:C3:B6:9E:29
            X509v3 Authority Key Identifier:
                keyid:85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133382e302f32332d3234203d3e203237363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:11:d8:17:35:90:02:e0:27:0a:82:1d:ef:2e:e1:3b:21:
         0f:54:b1:a3:05:f7:60:36:03:69:37:17:0e:0b:ac:68:b4:d1:
         45:82:b7:c8:d8:b8:29:57:6d:25:8f:a1:5e:e8:73:d6:fc:fd:
         c8:f4:e7:3f:72:d6:6c:74:da:76:eb:fd:47:ef:69:30:63:32:
         4a:f8:eb:40:82:ee:e2:38:d1:f6:2e:74:66:63:a6:89:3b:e9:
         ff:25:c0:72:20:63:b7:7b:ab:3a:29:a8:1f:fc:55:ea:3b:fd:
         cf:15:57:82:6c:43:8d:9c:f8:d5:64:87:cf:e6:a1:e8:77:14:
         14:2b:8c:a5:3f:74:c8:f2:0e:08:a2:5f:ac:c3:ac:44:d4:0a:
         15:55:2e:e4:4c:3c:57:88:90:1f:bd:8a:f9:4f:51:8a:3e:62:
         72:46:fd:90:d1:ac:84:69:d3:fc:82:d8:32:82:4e:08:24:69:
         c5:f7:8e:57:ed:e6:d4:fe:de:83:fa:21:7d:9e:2a:03:6e:7f:
         39:c6:0a:d8:63:19:09:d5:42:13:93:8c:f1:ca:d0:fb:23:ed:
         ff:49:d6:42:bf:ea:8c:86:e4:c3:4b:8a:04:02:01:2a:6e:11:
         f5:f4:af:11:2d:c5:89:b1:b0:10:73:1d:73:9d:6a:32:32:37:
         21:ae:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:56:29 2024 by rpki-client on console-ams.rpki-client.org