Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e312e362e302f32342d3234203d3e203532343832.roa
File:                     3230302e312e362e302f32342d3234203d3e203532343832.roa (raw, json)
Hash identifier:          dhvG8lDQ+d2oeQJWDWqLsYLbADwGsVO3lYDiCHzHRK0=
Subject key identifier:   B6:E8:87:85:94:FB:47:6D:F0:E5:8E:CA:E4:F0:2C:54:B0:73:59:3F
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       7848AE6AA209438CE940E5E289828272099D5F44
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e312e362e302f32342d3234203d3e203532343832.roa
Signing time:             Tue 05 Mar 2024 18:22:44 +0000
ROA not before:           Tue 05 Mar 2024 18:17:44 +0000
ROA not after:            Tue 04 Mar 2025 18:22:44 +0000
asID:                     52482
IP address blocks:        200.1.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:48:ae:6a:a2:09:43:8c:e9:40:e5:e2:89:82:82:72:09:9d:5f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Mar  5 18:17:44 2024 GMT
            Not After : Mar  4 18:22:44 2025 GMT
        Subject: CN=B6E8878594FB476DF0E58ECAE4F02C54B073593F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:4a:67:4e:c3:39:84:64:1e:b6:be:3a:f9:
                    72:b4:a4:33:ab:f6:85:bf:b8:4a:b1:b9:ea:2a:b1:
                    97:f3:39:15:85:8a:ce:0a:73:29:a9:28:85:1c:e5:
                    c1:fc:18:b2:39:1c:57:ac:69:f0:d0:9e:38:0a:09:
                    b3:4c:f4:b6:65:ce:e6:75:18:0d:66:df:78:91:eb:
                    de:96:32:c2:99:1f:41:40:3b:34:16:36:e9:e3:8b:
                    bf:60:6c:a8:3b:9f:8b:70:0a:70:ee:ef:63:11:58:
                    20:05:b3:27:c0:2b:4e:85:ea:c1:9c:08:bf:da:a8:
                    ff:bf:69:a1:6d:92:d2:f6:f4:46:a7:26:fc:50:90:
                    5d:ca:ae:8f:5b:45:e4:ae:45:5b:28:e8:69:b0:bb:
                    9d:ec:cf:7b:3a:8a:e4:86:5b:a9:3c:a5:a8:2e:5f:
                    6c:ae:03:fc:b7:59:2f:9a:6f:5d:d1:28:e6:47:90:
                    2a:b2:07:07:ab:3f:b9:ce:cf:6d:62:9e:0e:39:0a:
                    9b:73:8c:2f:5f:76:7a:05:b9:6e:e1:27:6d:4a:e1:
                    6b:e4:b7:65:32:da:7b:d1:74:7e:87:2d:45:ff:76:
                    5b:32:50:b7:a1:54:af:0a:5d:9e:75:3f:b2:cc:93:
                    29:f7:f9:2f:af:c6:29:a1:94:53:c1:ae:31:ca:e8:
                    3e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:87:85:94:FB:47:6D:F0:E5:8E:CA:E4:F0:2C:54:B0:73:59:3F
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e312e362e302f32342d3234203d3e203532343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:25:bf:8a:ad:fa:b7:70:d1:4e:12:46:a3:eb:55:49:71:
         83:06:fa:e4:22:44:88:c5:60:45:87:be:81:34:f9:63:70:a2:
         04:a0:c4:f0:d2:c4:ac:81:16:34:c8:82:c6:4b:ea:ca:43:30:
         8d:73:75:17:74:d9:2c:c4:ca:51:e5:32:42:cf:43:e4:02:87:
         51:42:ae:d5:ee:cf:6f:1a:23:06:47:07:3d:18:bd:d2:f6:9e:
         78:7e:de:18:f1:c7:67:51:eb:bb:cb:e7:93:70:01:7e:8a:e4:
         bf:06:b0:1a:ec:dc:82:f7:92:4f:93:ef:1a:67:6a:f7:ee:c0:
         40:08:f5:51:17:fc:dc:56:a9:8f:3b:31:b9:db:54:75:2c:8d:
         00:6a:09:49:05:30:f2:6c:da:0a:a3:25:00:d1:e5:43:a3:a1:
         bc:24:f5:e2:05:5f:37:16:e7:ab:3f:ee:76:43:d8:53:8d:ce:
         42:79:35:dd:c0:3a:f1:6c:2e:a3:dd:f4:72:e1:38:05:91:29:
         c6:fd:58:50:f6:22:dc:43:ed:46:05:c5:b6:bd:ee:e1:02:ed:
         f2:1e:8d:f6:2e:3f:05:4b:23:19:e9:0f:c9:50:25:42:23:aa:
         e8:35:5d:51:fa:0e:43:66:47:6c:eb:95:64:e0:21:7d:86:6c:
         1a:5c:90:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org