Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e302e302f32332d3234203d3e2037303034.roa
File:                     3230302e39312e302e302f32332d3234203d3e2037303034.roa (raw, json)
Hash identifier:          Cl6Z9lLLuXdiWlmMybH0628/chMgs+SDJRG4D/kkjKQ=
Subject key identifier:   E7:04:C9:E5:EA:68:33:CC:1A:3E:0D:B0:32:0D:DB:B4:28:6D:33:7A
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       44F84704DF8ECE4BB7889D12D1F00E300280A773
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e302e302f32332d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:44:26 +0000
ROA not before:           Tue 05 Mar 2024 17:39:26 +0000
ROA not after:            Tue 04 Mar 2025 17:44:26 +0000
asID:                     7004
IP address blocks:        200.91.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f8:47:04:df:8e:ce:4b:b7:88:9d:12:d1:f0:0e:30:02:80:a7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:26 2024 GMT
            Not After : Mar  4 17:44:26 2025 GMT
        Subject: CN=E704C9E5EA6833CC1A3E0DB0320DDBB4286D337A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:98:9c:1b:a8:97:4d:b3:4d:88:df:75:fd:
                    54:e9:ad:52:c9:53:33:65:c4:58:e9:1d:6f:46:98:
                    7c:1d:c4:ad:47:88:73:0b:9e:45:83:eb:06:40:a1:
                    94:f2:2d:ed:d9:23:d2:9d:85:70:cb:72:fa:36:0d:
                    28:06:17:dc:e0:8b:a7:f2:31:51:07:70:b0:ad:b6:
                    cc:f6:94:73:65:78:cd:bf:33:a6:ce:40:89:65:67:
                    7d:3e:e8:ef:17:6d:6b:9f:4a:a7:91:14:7a:1f:9d:
                    38:a3:23:30:36:43:9b:cd:c6:ba:c2:b6:c4:02:3e:
                    76:6a:fe:c7:f2:cc:de:6e:5d:ab:c4:aa:14:a0:d2:
                    29:0b:90:5a:23:28:e3:a3:52:bd:c2:2f:a6:62:92:
                    11:76:32:fb:db:be:80:09:39:49:97:65:e3:f2:dc:
                    e2:9b:3d:c0:fb:c0:64:fd:47:c5:75:fb:59:b7:05:
                    1b:ef:4b:ca:91:67:bc:2d:72:9f:2b:5f:a6:c8:ff:
                    1b:32:52:cb:7e:df:89:95:d8:18:df:71:a4:19:fb:
                    82:35:15:de:77:27:fb:60:dd:52:12:10:24:eb:9b:
                    07:f3:e9:41:8e:e6:5a:b7:bf:e5:6a:8d:b0:84:e4:
                    2d:04:17:0e:47:dd:2e:cf:55:11:63:b7:20:79:fc:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:04:C9:E5:EA:68:33:CC:1A:3E:0D:B0:32:0D:DB:B4:28:6D:33:7A
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e302e302f32332d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:ed:34:a5:1a:0c:5c:be:ab:d9:c7:16:ba:8b:2e:96:d5:
         c0:41:15:8e:f3:0d:f3:f5:02:f7:78:e5:1a:aa:38:63:eb:23:
         ef:59:9f:05:0b:68:fc:eb:0b:15:47:7d:a2:13:b6:eb:6d:03:
         5d:92:30:63:2a:22:fc:9b:2a:5c:30:78:ed:35:8e:fe:ba:04:
         45:04:34:61:64:36:45:6f:58:53:c3:b7:2c:e9:22:67:40:1a:
         c7:7a:13:d1:d1:b1:a6:ed:e2:d5:09:91:f6:89:27:f3:18:09:
         37:e7:74:ca:1b:47:1f:91:6f:39:b6:e1:9f:ec:9e:45:eb:f9:
         8e:64:3a:6f:01:d5:9c:32:7e:38:b8:d0:31:31:35:d4:07:1f:
         bd:71:27:0a:d2:41:ef:7f:be:a4:64:c4:55:d6:4f:6a:fc:df:
         55:cc:1e:dd:d1:9d:ed:20:65:75:65:9b:ec:ed:ae:1c:96:01:
         84:3b:0e:91:d1:fa:f6:30:3d:a2:fe:99:bb:a5:06:ff:12:8d:
         c1:83:56:7e:23:ba:b1:2f:b1:15:64:e1:27:77:2e:80:4d:7e:
         61:5b:5e:26:44:21:ef:7a:9d:f9:e4:12:cb:3b:d1:5b:72:bb:
         fc:e8:8e:f2:d5:f7:5c:dc:4b:5f:c3:24:3e:67:98:68:2b:a6:
         c1:c6:7b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org