Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e322e302f32342d3234203d3e2037303034.roa
File:                     3230302e39312e322e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          yqR0i5xFurYxByl4yH53fBPvhx/eYPL+hvI6DgjS2js=
Subject key identifier:   8C:A1:5B:A2:D1:BA:6E:5B:48:58:D8:31:D1:29:B7:D4:FE:9C:BE:0B
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       63DE6E648CAF9C015F4DC4A1152D5CEF11148766
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e322e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:44:27 +0000
ROA not before:           Tue 05 Mar 2024 17:39:27 +0000
ROA not after:            Tue 04 Mar 2025 17:44:27 +0000
asID:                     7004
IP address blocks:        200.91.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:de:6e:64:8c:af:9c:01:5f:4d:c4:a1:15:2d:5c:ef:11:14:87:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:27 2024 GMT
            Not After : Mar  4 17:44:27 2025 GMT
        Subject: CN=8CA15BA2D1BA6E5B4858D831D129B7D4FE9CBE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:11:07:0e:0b:a2:ac:66:1a:ca:90:6b:34:
                    ce:5e:e8:f9:a2:c6:87:ce:7a:b7:50:56:dc:3c:76:
                    f6:68:62:03:bd:b0:99:66:a2:ad:08:2b:97:b9:2f:
                    40:37:1d:e1:74:c6:7f:6f:83:c5:9f:53:97:99:cd:
                    8f:c5:ea:ab:7f:5d:7c:d3:03:e3:7c:e2:61:de:7b:
                    45:67:eb:11:2d:b0:0b:a9:fc:79:14:f4:90:d5:82:
                    bb:78:85:f1:57:b1:13:38:11:28:a7:41:62:ac:74:
                    3c:80:96:2a:5d:0f:50:8b:94:05:df:15:bf:a3:8d:
                    58:56:0c:c5:45:17:fa:cc:7b:07:64:03:29:ba:e4:
                    82:b1:96:5e:84:0d:4d:29:03:44:a1:cb:18:68:1d:
                    ba:94:71:31:33:1f:70:34:10:9a:fb:52:0d:1c:0b:
                    6f:4a:74:52:fb:50:d0:90:e6:a9:d4:7f:14:6b:9f:
                    f5:4d:d2:64:56:91:38:12:ff:26:85:0b:8f:e6:3d:
                    33:90:88:f2:97:42:8c:ef:76:f2:15:d1:de:aa:0f:
                    76:66:d1:c0:e0:98:7b:e4:38:a4:e6:ab:43:9e:b6:
                    68:9a:62:d7:19:29:c5:89:8c:7c:3a:ed:08:55:30:
                    16:2a:d9:43:c1:d6:09:ba:22:c6:25:d3:4e:6a:7d:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A1:5B:A2:D1:BA:6E:5B:48:58:D8:31:D1:29:B7:D4:FE:9C:BE:0B
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e322e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:72:15:c4:b9:61:47:12:8b:f0:f3:b2:b0:93:a7:53:43:b0:
         19:e3:0f:ef:48:8f:93:90:50:24:39:4d:04:b7:30:cd:ea:5e:
         07:4a:4b:75:39:3f:79:47:9c:83:4a:c5:71:76:73:ee:2b:7e:
         b1:fa:f7:75:28:c5:b7:3e:d2:51:c3:83:44:73:da:d4:db:60:
         cc:5d:83:ee:4c:02:72:d2:89:bf:e6:1f:a6:88:45:d2:43:fa:
         a0:4b:44:34:46:29:df:45:66:fe:b2:4c:ae:b9:51:4c:3c:2e:
         a1:50:0a:21:70:0f:9b:31:5c:7a:81:b0:cb:8a:0a:f9:58:ce:
         a6:a9:74:15:fe:94:71:39:eb:2a:87:be:22:ec:a7:45:0a:2f:
         18:95:73:f9:0e:44:b4:79:6e:a9:97:17:64:72:2c:29:ec:ed:
         ee:fe:cd:e9:e2:50:cc:85:ae:b4:d0:86:57:ef:0e:f4:8f:37:
         16:9e:32:ba:2e:5e:f2:2e:42:63:d3:ff:34:c6:4a:49:62:33:
         02:36:dd:c2:4f:ad:d9:72:aa:f2:78:7f:64:56:09:6f:08:06:
         97:97:b4:b2:97:e2:ce:58:fe:14:1d:bd:fc:32:a7:df:5a:0d:
         f0:23:85:2c:62:10:bd:6c:f8:39:91:ae:2b:d1:6c:bc:32:4f:
         53:52:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org