Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233372e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39352e3233372e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          na9mZ1yS1MeOpTs3JdtAeCSwURx827ZYPlvod99IOFo=
Subject key identifier:   C6:CE:04:0C:25:A5:8F:9B:59:60:B0:45:DC:BC:A5:8F:34:BF:B1:4B
Certificate issuer:       /CN=8578B31074E0B57459B1C2A690B89261860EA94C
Certificate serial:       3758C16F404B04E9775605E6C5D9B12924A5CADB
Authority key identifier: 85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233372e302f32342d3234203d3e20323632393136.roa
Signing time:             Wed 15 May 2024 13:15:03 +0000
ROA not before:           Wed 15 May 2024 13:10:03 +0000
ROA not after:            Wed 14 May 2025 13:15:03 +0000
asID:                     262916
IP address blocks:        200.95.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 05 Jul 2024 04:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:58:c1:6f:40:4b:04:e9:77:56:05:e6:c5:d9:b1:29:24:a5:ca:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8578B31074E0B57459B1C2A690B89261860EA94C
        Validity
            Not Before: May 15 13:10:03 2024 GMT
            Not After : May 14 13:15:03 2025 GMT
        Subject: CN=C6CE040C25A58F9B5960B045DCBCA58F34BFB14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:e2:f9:17:8a:48:5c:82:85:83:8a:f0:fa:
                    c0:ff:3e:90:e0:b0:6b:eb:a0:bc:5c:72:f3:b8:66:
                    7e:b8:c2:8b:49:2b:f2:29:47:6a:76:69:c9:bf:f5:
                    e9:82:e5:78:c0:c2:f4:bc:7f:30:4b:6c:4e:3f:19:
                    18:c4:e3:bd:26:e2:5f:a1:14:d8:bd:7c:df:b1:be:
                    48:db:4f:dd:b4:f5:98:71:69:1d:3d:fe:c0:a4:dc:
                    29:28:7c:e6:e7:c9:be:d8:4c:79:f2:5e:fc:16:12:
                    5c:ca:0a:7a:3e:97:ff:2c:45:ef:68:b1:67:23:15:
                    01:b6:17:7c:4b:b3:33:87:21:b6:74:ce:06:e3:cd:
                    f1:40:6f:81:45:74:02:b2:eb:15:1c:2a:e0:82:6e:
                    69:05:52:c2:10:fd:2b:85:24:b3:90:84:1d:86:22:
                    26:49:5c:14:fa:cd:7e:e8:c6:db:af:3e:02:73:aa:
                    d9:f0:9f:93:5d:f5:aa:b8:86:cc:14:62:b2:73:ac:
                    6c:99:db:e5:eb:3d:73:6a:de:94:a7:40:6c:4a:1a:
                    b1:66:eb:28:06:e5:2f:ca:5e:2f:75:f7:7c:33:5f:
                    74:76:f3:44:73:db:12:87:2d:34:88:e7:08:a4:65:
                    ef:15:75:af:dd:29:c3:86:76:5f:d7:61:96:38:d5:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CE:04:0C:25:A5:8F:9B:59:60:B0:45:DC:BC:A5:8F:34:BF:B1:4B
            X509v3 Authority Key Identifier:
                keyid:85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233372e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a1:cc:7a:a5:75:84:24:4b:82:b9:cf:54:59:72:77:7d:11:
         26:2c:e9:e8:27:db:2b:6f:91:9b:da:b7:9f:bc:3a:a0:d9:76:
         aa:41:6d:90:25:6e:7a:4c:cc:34:9c:db:b9:06:e7:1e:bf:6f:
         ba:7f:ac:30:ee:4a:68:4c:1e:1f:84:e0:cd:d5:0d:15:5e:db:
         d9:83:92:59:8d:9c:43:f7:e3:b5:3d:87:8f:0f:6e:36:22:1f:
         d0:8a:2b:ba:24:e4:a3:b1:47:64:d0:d0:16:13:8e:84:57:cc:
         a2:86:0b:ce:4d:c5:01:6d:40:3a:09:31:8f:2a:63:68:7d:40:
         b0:21:24:08:4d:bc:fe:0c:f6:4a:83:ba:0f:77:f8:a0:22:ef:
         f5:fb:ee:00:fe:4d:56:86:42:cc:91:de:06:54:d0:f7:83:24:
         e5:dd:e1:12:e9:2b:45:7c:c6:5e:8a:c8:f6:01:04:c3:11:1d:
         31:b0:0b:64:25:0d:ed:d2:05:1b:90:62:26:63:c0:14:10:7a:
         3a:89:29:95:b9:71:91:ee:9d:ca:5e:60:f6:01:f1:70:2a:37:
         42:b8:63:7d:c4:37:7a:48:4a:b4:96:3b:58:64:50:0e:d9:ae:
         44:47:a6:38:a2:2f:15:8c:4a:f4:13:c0:b2:d8:cf:ec:2e:a3:
         6a:a1:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:56:29 2024 by rpki-client on console-ams.rpki-client.org