Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233382e302f32342d3234203d3e203133393939.roa
File:                     3230302e39352e3233382e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          fW4CDpPqXeS/KcpcIBZmLwkT2qzZxDBJfeRlT8J/jJc=
Subject key identifier:   AF:9D:36:5E:55:AF:0D:D2:E2:1B:6A:3F:B3:55:1D:13:5C:B9:D4:25
Certificate issuer:       /CN=8578B31074E0B57459B1C2A690B89261860EA94C
Certificate serial:       0BBDBF46320247B719FE25FAACE055DA0451DF02
Authority key identifier: 85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233382e302f32342d3234203d3e203133393939.roa
Signing time:             Wed 15 May 2024 13:15:00 +0000
ROA not before:           Wed 15 May 2024 13:10:00 +0000
ROA not after:            Wed 14 May 2025 13:15:00 +0000
asID:                     13999
IP address blocks:        200.95.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 03:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bd:bf:46:32:02:47:b7:19:fe:25:fa:ac:e0:55:da:04:51:df:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8578B31074E0B57459B1C2A690B89261860EA94C
        Validity
            Not Before: May 15 13:10:00 2024 GMT
            Not After : May 14 13:15:00 2025 GMT
        Subject: CN=AF9D365E55AF0DD2E21B6A3FB3551D135CB9D425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b0:23:3d:04:43:82:e2:88:29:ee:56:8c:18:
                    c6:36:76:8c:d9:46:63:d8:4c:a3:f8:da:2d:a4:b2:
                    58:1d:79:57:b9:f1:bf:a0:8e:3c:f4:11:2f:46:17:
                    53:3c:d9:ba:d3:ce:38:43:09:18:74:eb:46:9f:fb:
                    87:7a:b2:25:23:4c:33:f8:1f:29:22:d5:a4:40:ac:
                    b2:66:5b:fc:fa:6a:97:34:e5:34:1d:83:81:b5:8c:
                    b1:a9:76:d7:94:71:cd:e5:8c:d9:97:8c:30:92:fa:
                    f7:9d:69:ea:9c:40:d0:c7:5d:4b:0e:ff:59:4c:a7:
                    58:81:9c:81:d3:88:78:4b:d5:65:aa:67:bc:b0:4c:
                    d0:3c:8b:b2:8c:19:f0:5d:13:27:a0:85:67:a2:5b:
                    1e:66:e2:60:9f:e4:06:cb:90:54:f6:cd:d7:d2:f9:
                    2a:14:62:86:fd:40:16:c5:d9:b8:ee:58:9e:9e:d1:
                    17:a6:57:c4:f1:26:0a:a5:70:e3:78:be:8e:80:9d:
                    fe:a6:cb:91:6a:97:17:f7:7c:6f:ed:ae:41:bd:11:
                    d0:17:5e:7f:cb:1a:3d:60:aa:d4:a3:97:c3:c6:de:
                    0b:25:4a:0a:b5:c7:69:55:2a:09:b2:61:eb:8c:7e:
                    08:44:e3:0c:33:d5:8e:35:9c:63:c5:bc:d4:57:73:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9D:36:5E:55:AF:0D:D2:E2:1B:6A:3F:B3:55:1D:13:5C:B9:D4:25
            X509v3 Authority Key Identifier:
                keyid:85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233382e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:16:f6:89:36:01:04:6c:3b:a2:a4:c9:ac:f2:58:37:35:80:
         9c:d9:4d:43:ca:40:1f:69:92:4f:d6:f8:27:e8:97:3a:0a:5e:
         48:19:ac:62:b0:11:45:45:8c:55:a9:ad:99:16:74:0f:ee:6a:
         f3:d9:8a:c3:95:86:56:d4:c9:a6:aa:b3:11:d1:5b:cf:9e:ca:
         ca:c8:67:1d:9c:45:87:f4:40:eb:5e:54:7a:ab:94:6d:09:7d:
         48:ce:ae:16:7b:7a:e9:7b:d5:6a:4d:fe:ba:5a:5f:35:b0:b4:
         75:94:a0:5f:16:1d:a5:7c:c3:e4:59:24:69:83:1e:d0:9d:eb:
         73:6a:20:a2:c0:4b:39:b0:5d:b2:e8:bf:e7:1a:16:fb:de:94:
         bc:8d:1e:aa:1c:0d:7d:4d:34:03:cb:d7:80:23:af:91:57:8c:
         1c:29:3a:26:ed:f4:16:c6:62:17:3a:7f:ca:ee:53:0a:62:3e:
         1e:84:be:f5:49:21:01:b5:27:74:76:44:a8:b1:cc:dc:e2:08:
         90:5f:90:59:9c:d1:cf:02:1e:a0:06:89:60:20:2a:1e:6b:52:
         91:5f:b9:ec:d8:17:22:2b:df:bc:da:1e:e7:7b:f9:80:a6:84:
         2d:1e:ac:bd:2b:89:96:bf:ae:24:a1:67:78:3f:72:3e:d6:0a:
         6f:f5:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:50 2024 by rpki-client on console-ams.rpki-client.org