Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e32392e302f32342d3234203d3e2037303034.roa
File:                     3230302e39312e32392e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          c1ni64LvXG2vkap+Fymn6vjyGK7jFpPQtovl9nkxSWE=
Subject key identifier:   EA:38:54:74:9C:F1:2B:63:D7:34:EF:22:57:F9:EE:FF:FE:CF:24:E5
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       25882BE9A87C9F62B4582F3E5251B9FC81C3F250
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e32392e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:44:29 +0000
ROA not before:           Tue 05 Mar 2024 17:39:29 +0000
ROA not after:            Tue 04 Mar 2025 17:44:29 +0000
asID:                     7004
IP address blocks:        200.91.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:88:2b:e9:a8:7c:9f:62:b4:58:2f:3e:52:51:b9:fc:81:c3:f2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:29 2024 GMT
            Not After : Mar  4 17:44:29 2025 GMT
        Subject: CN=EA3854749CF12B63D734EF2257F9EEFFFECF24E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:a7:0b:3e:95:9e:72:c4:db:81:da:22:ac:
                    86:f5:48:09:02:a7:44:31:99:61:30:a1:ad:c2:37:
                    de:a2:f2:29:b0:ca:07:01:98:f0:f0:ca:92:b2:b3:
                    1c:dd:e0:11:91:32:68:29:ce:ce:f2:3e:0a:0e:3e:
                    84:24:c1:58:3d:f1:9a:32:36:8b:90:78:e1:52:1e:
                    9c:61:47:26:6c:0b:d7:31:42:4e:e9:9b:ce:b5:07:
                    86:79:f9:c2:24:7f:12:ad:68:ca:c6:b6:93:7d:22:
                    bb:ae:d3:11:b4:2f:aa:bb:22:6b:84:11:e5:e2:07:
                    ee:44:89:a3:73:0f:51:7f:0e:13:31:0b:ee:01:c2:
                    4c:fc:c7:36:1d:6a:25:b4:2c:72:fa:4e:e8:9d:57:
                    aa:25:a2:81:b9:fb:62:18:07:0b:11:d3:ee:61:e2:
                    2e:3f:07:8c:32:54:bb:76:14:65:56:2b:75:82:2a:
                    cc:4b:81:4b:02:bb:73:27:cb:b5:4b:31:23:70:cb:
                    23:42:06:ea:14:09:aa:51:7e:1d:e9:c6:51:59:6e:
                    a3:18:4e:eb:29:86:31:85:cb:ff:7e:2e:7b:05:ee:
                    58:d0:4d:a4:c8:bf:e8:a5:40:5b:73:3d:7c:5b:42:
                    53:a3:7e:c8:5c:e9:ad:b2:b5:c8:14:97:00:c8:1e:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:54:74:9C:F1:2B:63:D7:34:EF:22:57:F9:EE:FF:FE:CF:24:E5
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3230302e39312e32392e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:75:f8:18:a3:69:f9:81:40:52:8e:46:66:11:a6:d3:5a:02:
         d9:e2:69:0f:12:2f:9d:ff:c3:24:fb:e8:b2:16:e3:d5:99:78:
         95:2c:eb:db:c9:50:84:c9:8d:c5:c2:27:86:5c:43:7f:78:f4:
         d9:cc:e9:18:77:41:6e:cd:00:a0:02:c4:d5:d9:5d:ff:57:4b:
         76:d3:fe:b8:eb:04:57:7f:1b:01:aa:2a:b7:db:88:70:d8:b9:
         d9:ad:98:e2:42:73:e6:be:38:ab:00:74:44:5e:a1:79:d5:24:
         2d:e2:86:25:d3:ce:f2:5f:b5:8b:34:d6:8c:1d:b3:cb:41:66:
         a3:de:e0:2b:b8:aa:01:dc:63:03:2c:f4:96:9f:3a:88:f8:9e:
         dc:a1:c1:4b:7c:38:ea:b9:e4:ee:90:51:8e:55:45:7c:f3:5d:
         e0:38:59:7b:aa:66:dc:58:f4:5a:52:3a:8c:3d:97:f6:10:da:
         3a:77:13:cd:9d:05:96:d3:52:7d:88:97:f7:15:29:8b:d4:eb:
         d4:d8:c3:49:a2:85:73:79:75:d9:a7:3f:d2:97:96:23:7a:ac:
         ff:af:d2:f8:b1:60:52:ad:cd:15:a9:0a:48:cf:65:de:0c:cb:
         b5:c6:37:89:fb:74:71:e4:90:5b:55:4e:a3:8a:a2:1d:35:7a:
         32:e4:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:46 2024 by rpki-client on console-ams.rpki-client.org