Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e32382e302f32342d3234203d3e203133343234.roa
File:                     3230302e39312e32382e302f32342d3234203d3e203133343234.roa (raw, json)
Hash identifier:          wtM5OYYK2iMbZOe/zeWuVFyubD+I9JFpPtuftE9Of+c=
Subject key identifier:   CD:C9:24:53:F1:41:9F:C0:4D:8C:C8:67:DB:6E:CE:F8:55:04:26:90
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       5B24D0FC458D8D460C6B1179FBF93F139654DDA7
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e32382e302f32342d3234203d3e203133343234.roa
Signing time:             Tue 05 Mar 2024 17:44:27 +0000
ROA not before:           Tue 05 Mar 2024 17:39:27 +0000
ROA not after:            Tue 04 Mar 2025 17:44:27 +0000
asID:                     13424
IP address blocks:        200.91.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:24:d0:fc:45:8d:8d:46:0c:6b:11:79:fb:f9:3f:13:96:54:dd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:27 2024 GMT
            Not After : Mar  4 17:44:27 2025 GMT
        Subject: CN=CDC92453F1419FC04D8CC867DB6ECEF855042690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:28:94:60:ca:19:a8:68:ad:d5:f3:ac:29:
                    2c:32:0f:b1:5b:98:14:e7:bd:90:7b:01:fc:73:d9:
                    d2:9d:e3:56:19:91:24:f6:ae:d0:7f:5a:ca:7a:8f:
                    9b:91:13:10:1e:81:0b:6a:ef:d4:fe:55:a0:96:01:
                    7b:c6:4d:f5:22:e8:e0:e1:64:ee:dc:65:d4:ac:92:
                    8a:40:16:93:8c:b9:f4:6b:15:69:38:93:b0:41:03:
                    65:7f:c6:77:59:8f:fc:c1:40:bc:eb:cb:0f:6d:25:
                    61:be:b8:f5:6c:dd:cf:db:c1:ba:ac:7e:f0:0f:07:
                    64:5a:72:c8:1e:3f:fa:b0:cd:f7:22:97:dc:a6:13:
                    ac:b1:8b:56:28:cf:c9:89:a2:55:c3:4f:7e:0e:b5:
                    9f:59:f5:e5:64:fe:9f:28:be:f0:07:6c:77:05:39:
                    dd:86:d3:62:0e:98:e3:a1:90:92:d1:4c:eb:cf:79:
                    50:af:aa:8e:c6:6f:a7:1b:be:16:08:13:3b:d5:82:
                    98:c6:43:94:86:bd:16:18:f2:3c:79:9a:10:ea:83:
                    d0:78:1a:2d:09:10:4f:62:59:bc:27:2d:bd:c6:af:
                    f8:43:ea:64:02:1b:f0:4e:ed:f6:a3:a8:26:60:42:
                    ee:7d:fc:78:2d:2f:e9:00:88:7b:84:a4:34:4f:3e:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:24:53:F1:41:9F:C0:4D:8C:C8:67:DB:6E:CE:F8:55:04:26:90
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e32382e302f32342d3234203d3e203133343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:0c:62:82:7b:48:7f:df:4d:61:90:5d:4a:9d:12:35:37:
         89:9b:dd:72:51:81:79:25:2b:b7:03:48:c8:df:c5:3b:32:14:
         da:1d:35:e4:66:99:31:fa:a4:e7:d6:da:2c:f8:72:28:0c:84:
         61:1b:8b:35:1c:ca:6e:42:5c:76:39:0e:21:99:d0:94:01:ea:
         ea:82:59:c9:69:ea:b5:59:ab:1f:ab:2f:2a:67:df:fd:1d:86:
         13:a0:05:6d:5f:af:83:33:72:01:46:7f:6c:83:24:1d:3d:93:
         17:bc:df:eb:72:44:38:1a:a0:af:a8:4f:75:77:ff:99:54:b6:
         1b:1e:31:42:85:1a:f4:31:a0:2a:21:80:ce:c5:b0:54:a9:47:
         9b:dd:e0:cf:a0:93:7f:48:6c:97:32:c3:66:26:f8:01:74:5e:
         ff:97:ef:9f:0e:cd:1c:b0:db:3b:b0:39:96:fc:9a:eb:f9:a1:
         be:89:50:c9:14:98:6c:d4:4e:be:5a:d1:d0:ed:08:15:e5:ab:
         e6:13:9e:44:1c:cf:ae:7b:74:cc:59:09:5a:eb:06:d5:74:c7:
         c6:d0:78:9c:68:44:dd:52:b4:a8:27:de:d1:cc:0f:49:ea:1d:
         3b:78:b2:6f:7e:54:f7:73:55:0e:d9:88:97:ea:55:ba:6a:4b:
         06:5d:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 06:33:49 2024 by rpki-client on console-fra.rpki-client.org