Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e36392e39362e302f31392d3234203d3e203139343239.roa
File:                     3230302e36392e39362e302f31392d3234203d3e203139343239.roa (raw, json)
Hash identifier:          oUzpwcEtfcr42/aK32TPqxECPYZnVMtHSWIhum71ot4=
Subject key identifier:   7B:9E:7A:E5:F1:4F:2E:35:FA:BD:11:EE:34:B4:2E:12:C3:D1:FB:31
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       2C68F7DD1F3B1EC5245EC4B4E2F530E784B57A79
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e36392e39362e302f31392d3234203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:15:11 +0000
ROA not before:           Tue 05 Mar 2024 18:10:11 +0000
ROA not after:            Tue 04 Mar 2025 18:15:11 +0000
asID:                     19429
IP address blocks:        200.69.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:68:f7:dd:1f:3b:1e:c5:24:5e:c4:b4:e2:f5:30:e7:84:b5:7a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Mar  5 18:10:11 2024 GMT
            Not After : Mar  4 18:15:11 2025 GMT
        Subject: CN=7B9E7AE5F14F2E35FABD11EE34B42E12C3D1FB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ea:31:4f:87:bb:55:9f:4d:87:2f:a3:92:f2:
                    d1:f7:87:12:39:75:b4:50:5f:c8:f9:e3:61:76:a3:
                    4f:7d:bd:8d:36:fa:0c:2d:a7:63:f9:6f:4c:48:2d:
                    52:25:37:8b:a7:78:2d:d0:c9:e1:58:b5:c2:9e:70:
                    fd:5c:fd:23:55:ed:51:3b:cd:0e:80:0f:98:45:e8:
                    2b:d7:46:83:5b:ee:0e:ce:e5:be:f6:c4:79:dc:48:
                    da:62:9c:79:ae:d7:bd:35:37:13:25:1e:8e:8e:4e:
                    9b:b7:ac:c3:1b:df:1e:90:11:03:0d:4c:94:9a:39:
                    dd:a6:a2:0b:de:74:73:1c:de:d2:8d:74:6d:ec:75:
                    ba:4e:1a:07:23:bc:1d:94:e2:ff:14:49:95:ba:bf:
                    9e:b5:f5:02:92:20:7b:66:00:aa:61:14:76:0a:c5:
                    04:26:91:85:13:28:6a:4a:bd:16:3a:ac:e8:65:b5:
                    37:3d:3c:3b:73:2e:0a:18:53:eb:51:03:16:50:76:
                    f2:59:f4:4e:6e:74:6f:7c:84:d6:2a:48:d8:9f:4c:
                    9e:94:73:9b:e7:69:b3:75:f8:eb:c6:a6:60:aa:50:
                    a4:53:c5:77:f7:c6:17:79:83:94:63:5c:d8:93:17:
                    e1:4d:b7:07:c5:da:68:03:16:2b:59:40:bb:41:0c:
                    8d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9E:7A:E5:F1:4F:2E:35:FA:BD:11:EE:34:B4:2E:12:C3:D1:FB:31
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e36392e39362e302f31392d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:9b:73:7d:eb:a5:d9:08:84:3f:ac:19:f8:bd:94:4c:fe:
         15:99:89:e0:33:96:02:df:e4:6d:99:09:45:53:57:d6:7e:c5:
         f0:dc:6b:30:4b:27:61:d2:3e:90:64:96:da:96:76:af:db:4e:
         ec:e6:e1:cc:ec:92:45:a6:f0:8e:cb:1f:f0:16:5b:93:9e:5d:
         26:a0:2d:c9:43:15:e8:49:ba:20:ce:83:e9:c6:18:0c:57:42:
         a9:2f:85:7a:2a:c9:8b:a9:aa:ce:f3:75:cd:aa:6e:b9:49:95:
         ee:8b:54:9d:a5:c2:c9:ae:fe:22:8f:87:ce:b2:7a:f6:5d:3d:
         70:58:bf:6b:22:2e:68:b7:a9:cf:53:2d:76:af:cb:df:c1:82:
         52:ea:eb:a1:7d:c7:cd:2c:a9:ff:60:8f:96:2c:0d:f3:84:89:
         ae:9c:1a:f2:84:a9:ba:94:fe:49:98:98:20:3a:52:65:79:da:
         f7:bf:12:9f:31:ce:eb:5c:bb:eb:91:6a:88:c8:56:4f:0c:f7:
         60:a3:1b:f2:06:ef:4a:22:45:b3:73:8c:de:e9:f7:db:40:72:
         2e:37:16:ec:52:04:79:25:d6:35:37:23:d6:57:e0:24:09:07:
         ea:06:de:e0:89:3e:51:9a:2a:06:39:7a:1c:6d:4f:fa:31:c0:
         7b:fb:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org