Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2033313332.roa
File:                     3230302e33362e3135362e302f32332d3234203d3e2033313332.roa (raw, json)
Hash identifier:          kTgRXb3ICkvwv3lIUuLajYj9onL3okmRYldE4thWBiI=
Subject key identifier:   9E:27:F9:ED:11:A1:CD:AA:78:CC:6E:D4:A7:4D:FA:6A:C2:D4:17:5B
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       66E61D5CB5FE7D3E6C117BD92BFABACC74C54102
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2033313332.roa
Signing time:             Tue 05 Mar 2024 18:12:02 +0000
ROA not before:           Tue 05 Mar 2024 18:07:02 +0000
ROA not after:            Tue 04 Mar 2025 18:12:02 +0000
asID:                     3132
IP address blocks:        200.36.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e6:1d:5c:b5:fe:7d:3e:6c:11:7b:d9:2b:fa:ba:cc:74:c5:41:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Mar  5 18:07:02 2024 GMT
            Not After : Mar  4 18:12:02 2025 GMT
        Subject: CN=9E27F9ED11A1CDAA78CC6ED4A74DFA6AC2D4175B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:4b:42:fd:30:20:97:b4:c9:32:96:96:4d:
                    88:c0:f1:4d:a2:c5:42:f4:f5:55:89:f8:b7:c6:b0:
                    ef:92:c6:7a:85:a0:6a:2a:0f:a1:a9:4b:a5:9e:dd:
                    1c:07:b4:b2:16:d7:d4:2b:36:62:34:a9:94:6f:03:
                    31:12:86:e4:ee:eb:66:84:bc:09:6f:d9:d5:22:e6:
                    95:ff:52:e5:71:be:63:9c:b8:a9:4d:d3:17:48:1e:
                    48:6c:46:3d:17:cf:98:39:29:24:a9:5e:a3:f4:20:
                    be:a4:35:81:80:7d:de:de:27:8f:ea:ad:7f:94:b6:
                    43:91:16:2e:4c:14:c4:fd:0a:03:82:e2:d5:90:22:
                    09:90:b9:9f:51:e4:c4:7f:e3:b4:69:11:f1:af:6a:
                    9a:25:45:22:bf:9f:0e:bf:86:40:08:ce:e8:25:5e:
                    ea:fb:cb:04:38:45:46:2b:be:14:cf:54:8a:dd:7c:
                    eb:91:01:30:83:73:26:86:d7:4c:4c:44:d4:d3:eb:
                    05:38:66:4e:fe:a6:ed:c9:eb:7b:fc:4d:6d:11:63:
                    29:82:33:bf:a3:a3:a7:86:33:94:75:36:da:3b:ee:
                    43:ad:1e:46:74:b0:31:0d:e1:da:72:08:36:71:99:
                    dc:0d:f9:91:8b:5e:07:a7:83:9a:d9:c6:83:1c:71:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:27:F9:ED:11:A1:CD:AA:78:CC:6E:D4:A7:4D:FA:6A:C2:D4:17:5B
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2033313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:11:dc:c2:ab:5e:4c:67:7a:b0:6c:0d:cf:6a:b9:8e:46:ea:
         d4:7a:51:33:c5:da:cb:a9:03:7a:4d:18:79:80:ea:06:58:8f:
         e9:9e:74:5f:d1:f1:0c:31:cf:e3:94:26:fe:73:bf:f9:81:a6:
         b1:8f:14:e0:00:b6:5d:ab:b6:34:28:c7:d8:8e:4e:bf:a3:bd:
         9d:df:4c:e5:db:20:fe:cb:dc:60:8f:cb:75:37:49:68:cd:15:
         15:52:95:41:9d:c6:08:e3:94:8d:cb:15:e1:c8:ec:90:6e:d2:
         bb:ab:16:c3:5b:ec:66:7e:15:0f:73:6f:ac:18:2b:ea:79:63:
         31:56:41:71:de:76:e6:98:9c:e5:15:6e:29:a7:fc:2b:77:b5:
         57:90:12:af:fe:85:62:b6:9e:ba:11:12:e1:ed:ea:e4:1b:df:
         30:48:bc:9e:8d:78:92:8a:ac:64:b2:17:c4:ab:48:32:14:a9:
         cb:8b:dd:61:dc:3a:ee:81:63:1a:5a:f7:c9:0d:e3:a4:85:00:
         4c:66:e6:fb:b5:5a:24:78:a5:16:56:05:a4:52:72:55:8f:a4:
         c5:d7:37:7b:a1:0d:79:b3:a5:9f:7f:2b:41:72:8c:95:f7:63:
         ef:8f:65:18:60:f3:7e:1f:7b:56:18:cf:0f:8a:d7:e9:41:19:
         d7:ba:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 05:30:06 2024 by rpki-client on console-fra.rpki-client.org