Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132322e302f32332d3234203d3e203237383134.roa
File:                     3230302e3131302e3132322e302f32332d3234203d3e203237383134.roa (raw, json)
Hash identifier:          LQT1hdvcCpQ4ajSW0WZoxwiaiI7oPvhZDHGkh5IVzKc=
Subject key identifier:   DE:D2:96:CF:D0:EF:D9:6E:62:7C:9E:30:CF:AB:A4:3B:2C:9D:AF:E5
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       3BDA0097C96ECADC696939597BA2F075536F98F3
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132322e302f32332d3234203d3e203237383134.roa
Signing time:             Tue 05 Mar 2024 18:22:42 +0000
ROA not before:           Tue 05 Mar 2024 18:17:42 +0000
ROA not after:            Tue 04 Mar 2025 18:22:42 +0000
asID:                     27814
IP address blocks:        200.110.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:da:00:97:c9:6e:ca:dc:69:69:39:59:7b:a2:f0:75:53:6f:98:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Mar  5 18:17:42 2024 GMT
            Not After : Mar  4 18:22:42 2025 GMT
        Subject: CN=DED296CFD0EFD96E627C9E30CFABA43B2C9DAFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:e2:33:63:a1:fc:f5:bb:41:a7:43:1b:36:
                    64:6f:51:eb:69:af:41:53:0f:9c:57:46:42:2f:b1:
                    d8:23:8d:a1:46:25:88:2f:34:dd:b9:1b:9a:76:19:
                    6b:73:5c:5a:ea:3e:bf:40:53:15:a1:8c:78:ba:66:
                    18:0c:6f:ee:5a:d4:c1:9c:cd:8b:2d:92:63:32:fc:
                    87:da:2d:0f:e3:49:c5:09:28:b8:52:9b:d7:c1:31:
                    63:d1:4c:56:d8:ac:65:4c:8f:2c:80:94:69:cb:9d:
                    57:ca:62:18:f2:ac:5c:35:54:01:31:bb:3d:65:ce:
                    e9:6f:d4:82:b8:2c:6c:b2:7d:ad:5e:6f:07:5b:fc:
                    af:08:07:2f:ab:bd:ea:f7:61:ed:ec:8c:a0:5d:ef:
                    8f:3e:16:2a:fa:2f:b3:64:42:47:e0:65:0c:70:d5:
                    dc:7c:22:d0:47:7e:cf:63:30:00:f1:c5:06:9e:f0:
                    08:f9:8e:7c:a0:b0:de:c1:d7:2f:9e:51:ea:31:5f:
                    76:4d:ed:ac:ee:17:ef:de:11:ff:02:57:ae:b3:c1:
                    f0:ad:d7:8f:6a:08:81:b0:ae:91:4b:9e:ce:32:0a:
                    84:3a:cd:62:ee:5a:f8:23:b0:39:85:27:10:17:3c:
                    63:20:10:fe:ae:aa:39:9c:20:f5:fc:67:99:d6:c6:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D2:96:CF:D0:EF:D9:6E:62:7C:9E:30:CF:AB:A4:3B:2C:9D:AF:E5
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/3230302e3131302e3132322e302f32332d3234203d3e203237383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:7a:ee:b5:9a:87:58:ca:58:4d:66:9d:04:98:bf:d5:28:49:
         38:3f:25:f3:94:32:eb:9c:9a:8b:a2:a1:7b:7c:58:c3:f0:c4:
         c0:45:f4:67:8d:9b:76:32:68:b7:73:c5:6f:9c:68:67:f9:e2:
         7a:57:8a:bc:45:07:cd:4e:ac:d5:61:6d:8c:6a:a4:b9:4b:86:
         67:a4:a8:75:e5:e1:84:4d:d4:92:1b:ef:3f:3b:ed:6b:59:6e:
         10:a6:ee:04:13:d7:45:e0:28:e7:77:c7:9d:e6:15:c3:0a:5d:
         b1:4d:d3:03:4b:14:58:06:a6:d7:23:74:25:25:bc:e8:a8:57:
         b8:36:4d:08:46:03:b8:33:63:58:2b:d4:04:ba:64:49:e2:fa:
         f8:55:be:28:a1:8d:88:ca:7e:0e:0b:ae:d8:9b:03:6c:04:db:
         b3:92:eb:17:f3:6a:65:74:8a:d4:30:0d:35:94:0f:18:bb:80:
         c5:75:c2:36:a3:6d:1b:ba:17:e2:aa:e7:fa:0d:d6:f9:98:44:
         0d:d1:5c:7c:b3:41:07:26:28:ae:d6:f7:c6:13:df:f8:41:8f:
         1c:f8:f1:10:ea:08:83:fe:4d:e7:73:2e:4a:b2:92:3d:7d:6f:
         aa:e1:f2:a1:a5:f9:74:c7:b1:5e:6b:56:0b:7e:e2:5e:91:db:
         20:b8:0c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org