Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3230302e32352e3139322e302f31392d3234203d3e203233343837.roa
File:                     3230302e32352e3139322e302f31392d3234203d3e203233343837.roa (raw, json)
Hash identifier:          JxBfDGMCHTfM2ERTV0iHtAfaXWKMQCxRPNG/bVT/0a4=
Subject key identifier:   76:3A:01:42:58:18:72:5B:29:12:AB:76:0C:F8:D4:18:BC:43:14:BA
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       78A833E4C17A946E8946E7828664365E7A3002C3
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3230302e32352e3139322e302f31392d3234203d3e203233343837.roa
Signing time:             Tue 05 Mar 2024 18:16:21 +0000
ROA not before:           Tue 05 Mar 2024 18:11:21 +0000
ROA not after:            Tue 04 Mar 2025 18:16:21 +0000
asID:                     23487
IP address blocks:        200.25.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a8:33:e4:c1:7a:94:6e:89:46:e7:82:86:64:36:5e:7a:30:02:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Mar  5 18:11:21 2024 GMT
            Not After : Mar  4 18:16:21 2025 GMT
        Subject: CN=763A01425818725B2912AB760CF8D418BC4314BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:07:96:60:60:3a:f4:1e:da:18:24:c5:b1:
                    6c:d4:ad:99:39:77:8b:51:8c:a0:b0:fb:01:f2:78:
                    40:17:0e:14:e2:b8:73:0b:d9:d6:b2:bb:0b:95:81:
                    93:91:ee:8e:44:f3:ce:d0:03:e0:a4:b2:87:b2:18:
                    2f:2a:4e:d0:9a:a0:2d:bd:8c:4f:e7:76:32:51:c5:
                    cd:66:25:f7:d8:f5:10:ed:f8:26:62:f0:f0:9f:ab:
                    9e:46:f0:26:62:1f:48:a3:60:d6:53:74:98:85:04:
                    73:e7:d6:8b:68:1f:3f:33:5d:69:c0:ed:ff:88:03:
                    66:a9:d5:98:0e:53:b3:61:7c:0c:3e:65:eb:18:14:
                    f3:59:8d:b8:ae:2c:53:3c:1c:9c:0c:44:d4:f8:76:
                    b6:0e:1d:29:bf:47:ff:c7:4a:3f:be:5e:6b:73:80:
                    45:05:eb:51:aa:04:38:0a:5d:d8:fd:55:60:0f:20:
                    b0:10:f8:28:a7:6d:40:b5:f1:15:ba:9b:df:e3:22:
                    5b:3b:15:5f:2f:7a:c4:8b:f4:d9:62:eb:82:93:f7:
                    3e:0a:5c:df:de:d1:2c:4a:66:b1:26:1d:20:77:39:
                    17:89:d0:ed:74:b3:61:5a:66:84:83:7f:84:b2:e2:
                    f5:07:23:ea:15:57:af:f0:69:f2:33:05:42:bb:00:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3A:01:42:58:18:72:5B:29:12:AB:76:0C:F8:D4:18:BC:43:14:BA
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3230302e32352e3139322e302f31392d3234203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:07:c4:77:a4:60:62:1a:84:c6:f5:1d:9f:17:c7:8b:67:7c:
         06:52:d1:f7:a2:72:0a:0c:24:86:9e:e9:bf:c9:4a:8c:ce:e3:
         76:03:9b:be:e1:88:32:4d:bc:71:b1:08:18:06:d6:a2:76:d7:
         f0:91:f3:33:75:2e:c0:ca:42:14:39:6a:83:3c:1c:d8:e9:1e:
         54:bf:d0:b1:b4:aa:8d:e2:ef:e8:21:da:40:06:fa:1e:85:ad:
         94:2d:5c:8e:6a:a6:e1:ec:c2:ed:c4:21:58:a6:24:8b:9c:5b:
         69:a3:4a:eb:30:3f:06:a3:95:da:36:c5:76:38:7e:de:af:72:
         56:a0:8a:1b:c5:ad:22:e0:28:76:2d:e9:3e:93:03:4f:24:f7:
         9f:7e:c7:3a:89:54:4b:c8:f0:ac:10:99:72:c9:d8:c5:56:5e:
         01:ef:b5:fb:6e:3e:c2:e5:e4:1f:bf:88:9a:5d:ff:a9:89:20:
         93:ef:3f:28:3f:b6:44:ff:85:dd:43:47:13:8d:90:e3:c7:d4:
         ce:5c:d5:95:d3:8e:32:a1:92:b9:09:04:ba:9d:89:0d:59:13:
         a0:99:98:6d:2c:1e:f8:7e:ed:e9:9a:85:eb:e6:0e:52:81:27:
         5b:81:bf:fc:1b:15:16:4b:f8:a8:4c:4d:cf:f8:48:04:32:c8:
         a4:93:68:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:58 2024 by rpki-client on console-ams.rpki-client.org