Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/3230302e31342e38312e302f32342d3234203d3e20323730303133.roa
File:                     3230302e31342e38312e302f32342d3234203d3e20323730303133.roa (raw, json)
Hash identifier:          HvmpB+qezbIahR60ZuWrebxcgsgExCeDcrY9Ss19sgU=
Subject key identifier:   61:6C:18:D1:FC:71:98:81:37:30:04:D7:F2:51:E8:47:32:EE:7B:6B
Certificate issuer:       /CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
Certificate serial:       27BA71A82799C6069601D5AE0CDCA65D22583B12
Authority key identifier: AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/3230302e31342e38312e302f32342d3234203d3e20323730303133.roa
Signing time:             Tue 05 Mar 2024 17:56:34 +0000
ROA not before:           Tue 05 Mar 2024 17:51:34 +0000
ROA not after:            Tue 04 Mar 2025 17:56:34 +0000
asID:                     270013
IP address blocks:        200.14.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ba:71:a8:27:99:c6:06:96:01:d5:ae:0c:dc:a6:5d:22:58:3b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
        Validity
            Not Before: Mar  5 17:51:34 2024 GMT
            Not After : Mar  4 17:56:34 2025 GMT
        Subject: CN=616C18D1FC719881373004D7F251E84732EE7B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:e0:45:4a:62:36:0f:95:04:e8:15:c9:f8:
                    fc:39:1b:b4:4a:31:73:bf:43:14:67:73:7d:6f:c2:
                    17:e4:9f:e1:61:6a:48:fb:1b:e7:04:5a:eb:22:fc:
                    d7:44:3a:d1:d5:98:e4:96:5b:63:0f:7e:af:be:e5:
                    a0:df:3b:02:6a:35:16:6c:1f:b6:9f:2f:f7:a6:32:
                    8c:40:93:53:eb:a4:24:44:f3:2d:10:35:6d:7b:5c:
                    14:29:33:a8:b7:7b:72:88:27:2c:87:86:a5:e4:18:
                    43:77:5d:13:7a:b0:b1:81:cd:af:26:dd:86:cd:a4:
                    ca:c2:86:77:6b:5f:b1:c5:36:c4:17:a9:35:4e:e3:
                    6a:c2:28:51:c2:51:bf:4e:5a:fe:a7:da:33:61:5f:
                    49:82:2e:c9:fb:32:59:5f:d5:b7:54:c6:69:c2:35:
                    35:52:00:ab:7e:12:75:9e:b2:e0:74:d8:ee:02:29:
                    92:1d:e5:10:1f:38:cc:ab:0c:9d:0f:f2:24:da:9e:
                    18:c6:9c:8b:cd:0c:12:b9:ab:1e:81:f2:6a:79:31:
                    45:04:82:01:73:0b:28:83:d8:dd:05:2e:89:df:3e:
                    45:db:cd:c9:5b:8d:87:9e:5e:a9:ac:a7:ad:28:be:
                    fb:82:f1:62:6e:38:e4:97:c4:6f:9e:5a:1d:8b:26:
                    89:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6C:18:D1:FC:71:98:81:37:30:04:D7:F2:51:E8:47:32:EE:7B:6B
            X509v3 Authority Key Identifier:
                keyid:AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/3230302e31342e38312e302f32342d3234203d3e20323730303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:2b:ad:34:96:67:d4:00:87:73:f0:7f:85:ec:b0:2b:b4:
         44:1a:d4:d2:e6:1b:38:af:82:58:6b:d8:46:c2:88:e9:18:01:
         80:3c:68:11:cb:e4:4f:2d:f8:41:f2:50:19:d2:4d:d4:a1:4e:
         92:07:42:7a:be:ee:45:0d:f7:01:5d:ac:47:4b:49:65:14:2f:
         f8:9f:b9:c2:31:3f:60:74:47:ea:56:82:c3:06:41:a1:80:4f:
         52:70:ef:1f:5d:f5:f1:ed:76:5f:e8:cd:12:cd:f3:2d:e9:31:
         5e:2c:69:64:63:00:4c:e6:4e:5e:4a:e4:ae:14:5b:a0:ba:f4:
         d8:7a:fa:b3:fc:68:f6:9b:28:58:47:81:3e:28:e1:fd:99:42:
         70:94:c7:26:f7:8d:51:2a:43:20:35:f5:b2:7d:24:69:93:3e:
         70:e5:c6:43:4d:62:80:63:d6:dd:7f:e0:a9:bb:5c:61:82:78:
         bf:40:d0:f3:fd:ab:f4:a3:35:8a:02:97:84:47:e5:97:58:52:
         6a:ab:c0:b8:ff:3d:21:42:85:ce:a8:6b:34:97:02:67:31:42:
         db:9f:91:58:d9:5b:50:d0:fd:8b:1a:c7:96:0f:fb:4f:b9:c6:
         f8:ba:74:08:8f:ee:ec:af:e5:c8:79:d5:a4:ad:69:64:63:03:
         cf:5d:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:21 2024 by rpki-client on console-fra.rpki-client.org