Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233392e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39352e3233392e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          O9orjktrLSEy3teCriPoH1DyHpeF9W/aR2+Sidq5X5g=
Subject key identifier:   E0:50:D8:27:A3:36:D8:4F:C7:0A:A1:F4:3F:D7:FD:DF:7E:08:27:80
Certificate issuer:       /CN=8578B31074E0B57459B1C2A690B89261860EA94C
Certificate serial:       3191FA7C0EE0EC1DE5DAACA3E2754A8DCBC86A47
Authority key identifier: 85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233392e302f32342d3234203d3e20323632393136.roa
Signing time:             Wed 15 May 2024 13:15:03 +0000
ROA not before:           Wed 15 May 2024 13:10:03 +0000
ROA not after:            Wed 14 May 2025 13:15:03 +0000
asID:                     262916
IP address blocks:        200.95.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 05 Jul 2024 04:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:91:fa:7c:0e:e0:ec:1d:e5:da:ac:a3:e2:75:4a:8d:cb:c8:6a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8578B31074E0B57459B1C2A690B89261860EA94C
        Validity
            Not Before: May 15 13:10:03 2024 GMT
            Not After : May 14 13:15:03 2025 GMT
        Subject: CN=E050D827A336D84FC70AA1F43FD7FDDF7E082780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:73:d2:a2:36:60:ff:03:9b:41:ee:d7:68:
                    1f:32:30:dd:3b:19:3d:85:71:4e:4c:d5:72:ae:e6:
                    99:56:55:be:c5:c2:71:72:21:22:6a:d6:96:86:9b:
                    14:a8:99:1b:15:b4:79:e3:dc:d3:6c:61:36:f7:8d:
                    18:0a:ce:29:53:99:d5:7f:b0:21:f8:b7:b9:28:af:
                    6e:67:4d:bb:ce:b4:d7:1c:a6:c2:b6:71:79:88:e5:
                    79:f0:3c:4a:cc:7b:50:4a:d5:99:10:9c:e9:47:54:
                    f3:04:fb:ac:4c:1a:45:9d:6a:41:a5:6d:2d:6b:2d:
                    99:44:eb:c3:81:25:b2:03:91:fd:54:a9:78:c1:1b:
                    a0:90:3b:48:d8:de:bb:27:ab:ac:7b:e4:db:c9:98:
                    a7:27:69:c0:62:b9:ba:dd:95:2d:ab:c9:ec:12:93:
                    ad:be:55:a6:99:af:e8:5d:0b:e6:a5:8b:92:4f:dd:
                    ed:c4:bd:83:28:5e:84:f9:15:50:eb:73:08:05:38:
                    5a:21:3c:c0:74:dd:e1:cc:da:3b:d8:ea:b9:e1:b7:
                    9c:63:80:c9:5d:e6:7c:6b:b6:e0:08:e6:43:14:c9:
                    fa:ed:19:b5:c0:c0:21:e2:e6:6e:e1:bd:7f:72:ac:
                    a3:94:ec:83:91:95:01:59:6d:a3:41:a8:60:5f:83:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:50:D8:27:A3:36:D8:4F:C7:0A:A1:F4:3F:D7:FD:DF:7E:08:27:80
            X509v3 Authority Key Identifier:
                keyid:85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233392e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a8:ea:70:2c:50:df:3f:f0:7e:4c:1b:d4:92:b1:f6:8b:58:
         a3:a4:f1:44:49:5b:a8:7a:2f:e9:b8:fd:99:9a:d2:e2:5a:bf:
         2e:84:1c:30:f9:85:f3:2c:a4:a2:58:1d:18:bb:36:c0:79:f0:
         7c:b4:0c:41:d1:29:f3:49:dd:c1:6b:21:fd:56:5e:ff:19:e7:
         9f:27:84:0a:c5:66:8f:e2:72:e3:b7:8a:89:23:da:b6:97:36:
         e9:f5:6b:4f:9f:8c:70:ca:7f:9e:09:6e:62:e1:0e:31:ff:ab:
         92:c0:87:d8:f4:4f:db:4b:55:d8:6b:75:f0:74:70:d5:a9:3e:
         b3:a6:e3:1f:0f:8b:fd:f9:62:64:e8:c0:e2:45:76:58:b9:d5:
         fe:58:4a:27:41:38:c8:b9:27:63:ad:02:3d:15:29:b8:06:5a:
         9a:e8:f9:4b:c2:79:c1:e2:ef:c1:c8:11:21:e7:0c:cb:81:5d:
         da:86:95:4d:fa:6b:88:9e:b3:6b:c9:47:12:d0:de:9c:3e:c4:
         05:52:4c:77:93:13:e7:34:f1:47:43:bf:ae:a2:16:5c:a0:78:
         74:02:9d:df:1e:45:92:7b:31:77:91:d4:27:a7:c6:fc:c6:df:
         44:a4:b5:d7:54:9d:03:99:d5:c2:b6:ac:10:42:d1:94:b5:67:
         10:ec:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:56:29 2024 by rpki-client on console-ams.rpki-client.org