Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f31392d3139203d3e203133393939.roa
File:                     3230302e39352e3232342e302f31392d3139203d3e203133393939.roa (raw, json)
Hash identifier:          bjvbHBTFvXXG9S1++AyAkfWQEkYzWC18VfFcYeih3uM=
Subject key identifier:   06:8F:14:EA:63:94:CC:29:91:1F:94:43:32:71:35:33:60:F1:29:39
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       14987344892AB8BBC68903D351D78AA41688357B
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f31392d3139203d3e203133393939.roa
Signing time:             Tue 13 Aug 2024 16:40:05 +0000
ROA not before:           Tue 13 Aug 2024 16:35:05 +0000
ROA not after:            Tue 12 Aug 2025 16:40:05 +0000
asID:                     13999
IP address blocks:        200.95.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:98:73:44:89:2a:b8:bb:c6:89:03:d3:51:d7:8a:a4:16:88:35:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Aug 13 16:35:05 2024 GMT
            Not After : Aug 12 16:40:05 2025 GMT
        Subject: CN=068F14EA6394CC29911F94433271353360F12939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:f0:b3:58:00:bc:55:8f:91:8f:cb:c0:3f:
                    e2:f4:10:01:d7:63:3e:b7:19:bd:4d:04:f0:9f:62:
                    5c:d7:53:81:02:ca:0b:f9:57:dc:62:f4:e2:30:eb:
                    9d:ea:d6:cb:26:b0:40:af:49:88:63:2e:1b:da:4e:
                    e0:4a:91:5e:ee:b3:e1:73:ab:a5:9b:1f:2a:ce:26:
                    37:77:8f:d2:54:f7:57:ef:bd:c2:c2:2d:07:f9:8b:
                    99:27:4a:6f:c2:c9:28:36:0a:fe:03:62:04:62:f1:
                    96:bf:f2:dd:e0:26:e4:5d:e7:18:00:8d:d0:3a:5d:
                    df:2b:6d:9e:fb:d6:c6:2a:2e:02:06:c0:92:a6:5f:
                    4c:d4:aa:ad:2c:07:e4:ac:c2:5a:e7:b3:f0:66:1e:
                    f3:6c:2d:48:36:c0:5f:af:fe:50:4e:65:a8:6c:80:
                    c4:7a:3e:9a:09:7e:02:97:72:10:39:6e:e1:50:ca:
                    34:d9:c0:a4:e5:02:05:34:76:cd:41:00:03:14:9a:
                    42:9d:1c:8c:c2:97:23:13:e7:40:c8:e4:43:a8:18:
                    34:60:61:35:5f:4f:85:6b:0d:6f:6f:69:aa:b7:1a:
                    49:c4:9e:1b:41:65:2b:4a:bd:fd:fd:11:f6:13:db:
                    2e:cc:15:70:9e:0c:a5:21:71:1d:74:3b:86:32:90:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8F:14:EA:63:94:CC:29:91:1F:94:43:32:71:35:33:60:F1:29:39
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f31392d3139203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:34:0f:17:bd:06:7b:16:73:c7:93:6b:39:2d:46:39:09:d0:
         63:90:fc:64:ac:a0:f2:6e:e8:ea:41:d8:f2:e7:1c:2e:5c:ea:
         b1:e0:b8:2e:1c:b7:c6:5b:b4:86:1d:89:0f:1b:a3:67:bf:64:
         42:b4:5d:d9:58:fd:8d:92:d3:e4:fd:fe:de:b9:69:dd:63:86:
         c7:d3:8a:24:93:d1:f5:d8:45:c5:ae:25:10:b0:d2:6e:f8:27:
         87:27:25:61:26:f2:d7:73:da:2f:3a:19:2a:9b:02:7d:1f:4e:
         f4:af:56:b1:c8:69:12:24:77:ee:b2:d0:8c:76:b5:3c:32:ab:
         83:d7:cc:fc:80:bd:b4:9f:c4:88:e7:bf:a3:09:f9:47:ee:4e:
         4b:28:e6:49:65:8d:84:81:69:d6:cd:1d:55:27:7b:74:f7:1c:
         6a:99:ce:3c:c1:45:55:26:13:4d:01:73:66:2a:ad:5d:ed:15:
         e2:d1:7e:11:c6:5c:fc:e2:26:46:e4:e9:7d:02:67:23:f6:04:
         c0:d7:27:0a:18:7a:56:5f:8f:92:a9:32:13:3d:dc:f6:6e:35:
         d9:11:ce:33:62:73:f8:12:43:f7:4d:ec:af:49:f9:5d:ae:95:
         af:44:ca:da:03:9d:0b:db:90:d7:21:cb:db:8b:e6:9c:7f:0d:
         5f:36:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 15:50:34 2024 by rpki-client on console-ams.rpki-client.org