Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/3230302e3130372e3232392e302f32342d3234203d3e203237393236.roa
File:                     3230302e3130372e3232392e302f32342d3234203d3e203237393236.roa (raw, json)
Hash identifier:          LcVreT0JgwxeH3xAB6MCYAPG359MHAcsjAV7Hw5RBxM=
Subject key identifier:   2D:FB:17:FF:44:55:AE:21:21:32:3A:F0:79:4F:54:CD:6F:17:CC:DA
Certificate issuer:       /CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
Certificate serial:       25251ABA1217EE201125978D36F08EDD8712B438
Authority key identifier: 6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/3230302e3130372e3232392e302f32342d3234203d3e203237393236.roa
Signing time:             Tue 05 Mar 2024 17:50:13 +0000
ROA not before:           Tue 05 Mar 2024 17:45:13 +0000
ROA not after:            Tue 04 Mar 2025 17:50:13 +0000
asID:                     27926
IP address blocks:        200.107.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:25:1a:ba:12:17:ee:20:11:25:97:8d:36:f0:8e:dd:87:12:b4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
        Validity
            Not Before: Mar  5 17:45:13 2024 GMT
            Not After : Mar  4 17:50:13 2025 GMT
        Subject: CN=2DFB17FF4455AE2121323AF0794F54CD6F17CCDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:ac:34:29:f3:4e:54:c0:68:0e:38:a3:98:
                    e0:0f:ac:36:7e:96:93:96:2a:2c:28:ec:a2:74:02:
                    b9:88:52:6d:da:72:24:5d:e6:c0:52:d6:db:de:61:
                    cc:c6:e9:7f:ea:7b:11:8c:0f:dc:c3:8f:d5:ef:f4:
                    50:0b:29:c1:f8:ab:3f:c1:b7:60:c7:b7:a2:ff:65:
                    d0:6b:6a:b2:0d:1e:7a:ab:05:43:fc:f4:f4:68:a6:
                    c5:99:1e:41:dd:81:41:20:5c:d8:27:3b:de:f7:1f:
                    a1:98:e4:4e:72:e2:8c:9a:8c:85:02:f8:c7:40:ff:
                    bf:bb:c5:2b:bc:71:80:a1:a8:08:cd:ee:82:f0:43:
                    47:1e:9f:56:5a:24:b6:59:60:29:e3:d1:ab:39:07:
                    cf:b5:a1:49:8c:25:19:7c:7b:65:59:f1:8a:3b:65:
                    4d:df:f6:1f:05:be:bf:58:f1:9e:1b:33:3b:17:05:
                    59:93:2b:7d:c1:ae:f1:f6:d3:73:48:62:0f:1d:f8:
                    8e:2e:43:6e:34:bf:a1:c8:90:cb:f6:b2:5e:55:32:
                    f2:b3:6f:36:64:d2:76:e0:57:ce:83:19:a6:54:05:
                    50:61:51:87:80:3f:eb:c9:67:ea:d4:6b:49:58:4e:
                    41:2e:55:29:a8:ca:9b:ee:80:14:ea:c3:75:f3:08:
                    ad:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FB:17:FF:44:55:AE:21:21:32:3A:F0:79:4F:54:CD:6F:17:CC:DA
            X509v3 Authority Key Identifier:
                keyid:6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/3230302e3130372e3232392e302f32342d3234203d3e203237393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:10:74:fe:cd:25:09:74:81:b6:b6:c7:79:93:a9:fb:bb:
         20:61:b2:ba:a4:48:81:0e:36:c8:c9:3c:56:67:e3:39:4e:6e:
         b1:01:b8:a1:b9:fd:ad:ec:5a:8f:c3:7d:6d:3a:38:a4:ab:21:
         48:a5:d0:24:2b:91:2b:ed:d2:9f:d4:50:60:c4:63:19:96:a1:
         14:56:f5:71:6b:b7:54:1d:25:3b:c8:6b:4a:f6:7f:1d:55:3c:
         bf:df:36:78:b8:b6:bb:48:0c:4b:c3:a7:07:3a:a4:dd:61:5c:
         6f:74:3e:71:e5:db:5d:25:c7:5d:ff:bf:f1:00:9c:cf:be:f5:
         9f:e1:c5:af:40:19:c4:51:8d:3d:7d:96:ca:a4:67:c4:31:52:
         f3:a5:35:ad:0d:12:73:8b:86:8f:0e:d3:8e:32:62:35:5f:31:
         7c:62:61:a5:05:7c:67:f7:fa:71:89:05:a8:b3:f5:3a:25:64:
         d6:6b:da:83:d6:e8:05:bb:36:b7:e5:6e:aa:8a:36:a3:44:8e:
         9e:a5:43:83:56:c4:98:90:84:1e:7a:46:68:48:50:23:7b:1d:
         42:57:e9:37:81:6c:b6:21:29:7d:ce:02:e4:31:7e:fb:0f:b9:
         e6:cf:29:6a:91:97:8a:b3:23:4b:a6:06:ab:a4:52:88:e0:77:
         50:dd:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org