Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/3230302e372e3134342e302f32322d3234203d3e203532333937.roa
File:                     3230302e372e3134342e302f32322d3234203d3e203532333937.roa (raw, json)
Hash identifier:          HFoWPz+rz27+OhlcPAsk7vTIuTiHt6rwdEpmLH0EtDU=
Subject key identifier:   E9:2F:26:AE:EE:8C:69:FB:8B:36:EE:F5:BA:CA:DA:A8:81:84:98:8C
Certificate issuer:       /CN=BF24EBE59688BF1635B9AB14680D9B8088D99CB4
Certificate serial:       74F068A09B9FB5FD360D9F4882AF68A8B54C9344
Authority key identifier: BF:24:EB:E5:96:88:BF:16:35:B9:AB:14:68:0D:9B:80:88:D9:9C:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/3230302e372e3134342e302f32322d3234203d3e203532333937.roa
Signing time:             Tue 05 Mar 2024 17:45:49 +0000
ROA not before:           Tue 05 Mar 2024 17:40:49 +0000
ROA not after:            Tue 04 Mar 2025 17:45:49 +0000
asID:                     52397
IP address blocks:        200.7.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f0:68:a0:9b:9f:b5:fd:36:0d:9f:48:82:af:68:a8:b5:4c:93:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF24EBE59688BF1635B9AB14680D9B8088D99CB4
        Validity
            Not Before: Mar  5 17:40:49 2024 GMT
            Not After : Mar  4 17:45:49 2025 GMT
        Subject: CN=E92F26AEEE8C69FB8B36EEF5BACADAA88184988C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:66:05:1f:ba:92:87:d6:bf:44:54:1f:69:
                    d8:33:37:b8:58:6d:28:2e:e2:c8:f1:a4:c4:20:c7:
                    31:03:1b:e4:b5:5b:c1:38:59:2b:63:ef:2b:40:33:
                    50:81:20:d4:8b:80:d3:c3:8f:6b:15:15:a0:34:8a:
                    a1:11:24:90:df:5f:36:43:f3:f6:ca:82:51:29:0d:
                    14:b1:04:9a:db:9d:e0:7a:d1:3f:77:e4:a3:97:3e:
                    b1:ca:30:4c:92:88:4c:b4:f2:d4:37:75:95:61:ce:
                    ab:ad:20:dc:1c:5f:df:82:86:7b:98:43:e2:42:6e:
                    3e:7c:1c:f5:2e:80:75:0c:b2:0c:39:e4:87:37:bf:
                    79:7c:fb:0a:0a:1c:19:77:51:dd:7f:24:7c:5e:40:
                    9c:74:66:68:c9:c1:aa:0e:d6:fe:20:ad:87:4f:07:
                    a4:ef:af:62:15:8b:72:2e:dc:4e:ea:3d:64:38:d7:
                    69:dc:42:76:9d:70:86:4d:19:e3:9c:96:84:31:a1:
                    90:93:98:4e:2c:77:68:c2:6c:6b:11:92:61:43:67:
                    dd:f1:d9:6a:e5:8d:7f:4b:73:84:a0:dc:73:2b:a9:
                    14:d9:ce:35:c5:8d:44:e1:57:4d:03:9f:d1:81:61:
                    ec:be:b7:57:91:e5:1f:ed:49:40:61:21:03:35:c5:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:26:AE:EE:8C:69:FB:8B:36:EE:F5:BA:CA:DA:A8:81:84:98:8C
            X509v3 Authority Key Identifier:
                keyid:BF:24:EB:E5:96:88:BF:16:35:B9:AB:14:68:0D:9B:80:88:D9:9C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF24EBE59688BF1635B9AB14680D9B8088D99CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/062A918ED9F835603B934A66E5D22366244ABF5ED1B21CB6C9F28D66374D3D43/0/3230302e372e3134342e302f32322d3234203d3e203532333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:e2:96:dd:9f:ad:cd:81:a6:7d:c9:f6:9b:36:72:8d:aa:41:
         d8:44:bc:68:1e:e5:92:6e:93:b5:b6:03:7a:ad:26:9f:b0:f8:
         d4:a8:7d:c9:e2:70:b1:2f:a0:72:9e:5b:31:fb:cd:a1:be:2e:
         39:23:8c:37:d5:a7:80:56:de:f7:6f:6c:e9:33:ee:79:0a:72:
         b8:f5:43:b7:ce:9b:c5:57:6c:57:77:a5:5b:5d:a7:60:52:e3:
         91:ac:d1:09:d7:59:f1:75:3c:74:aa:75:54:ae:ca:a7:ff:a6:
         e5:cc:92:cd:6e:5c:c2:b5:26:13:45:bf:b6:f7:d8:45:17:4a:
         31:16:1c:3a:14:95:79:9f:6d:40:4b:17:e2:d0:43:ad:9d:3d:
         7d:91:46:40:fa:92:4d:0a:70:87:86:48:f4:5a:85:03:88:60:
         f0:3f:8d:33:3e:6e:a2:f7:63:3f:db:f7:6d:b6:14:3f:01:70:
         89:fd:cc:c4:f3:b2:2b:68:4b:04:2c:8c:f1:92:ab:6c:a6:34:
         7e:26:c2:d3:a6:50:13:72:af:ca:55:a3:69:c4:aa:96:82:c8:
         a4:38:8e:db:c2:15:c8:12:b8:36:ca:f0:d2:d6:cd:40:79:f2:
         4a:41:9e:e9:14:4d:90:5d:a8:8d:41:39:3d:49:8f:92:a1:61:
         a2:6a:cd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org