Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34322e302f32342d3234203d3e203237383130.roa
File:                     3230302e31342e34322e302f32342d3234203d3e203237383130.roa (raw, json)
Hash identifier:          AhCE8f0tqUNlgK/3CClsPpz/GTFvz56WBfRXBCZVH/w=
Subject key identifier:   54:85:BB:82:F6:22:D7:7C:D0:D5:41:49:87:BB:15:6A:B8:5F:36:84
Certificate issuer:       /CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
Certificate serial:       3218D8AD7E4C7B440D318EC8E322588191CB7D60
Authority key identifier: AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34322e302f32342d3234203d3e203237383130.roa
Signing time:             Tue 05 Mar 2024 18:11:13 +0000
ROA not before:           Tue 05 Mar 2024 18:06:13 +0000
ROA not after:            Tue 04 Mar 2025 18:11:13 +0000
asID:                     27810
IP address blocks:        200.14.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:18:d8:ad:7e:4c:7b:44:0d:31:8e:c8:e3:22:58:81:91:cb:7d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
        Validity
            Not Before: Mar  5 18:06:13 2024 GMT
            Not After : Mar  4 18:11:13 2025 GMT
        Subject: CN=5485BB82F622D77CD0D5414987BB156AB85F3684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:4c:4f:5f:f0:0d:7f:41:46:51:c6:4d:0a:
                    35:e1:f3:4b:a1:14:00:98:ac:1b:72:a1:0e:c0:c0:
                    c1:eb:15:ea:44:17:85:46:9e:bb:4a:98:dc:5c:54:
                    a2:5d:5b:a7:56:0b:30:22:bb:63:23:45:14:00:da:
                    30:e3:78:a5:1f:11:35:da:44:64:0e:d4:b0:66:59:
                    14:ae:d9:a3:85:c3:85:6f:ca:db:a0:24:09:47:48:
                    7c:3c:04:1a:d3:bb:d7:79:71:95:97:1d:29:e4:a2:
                    e3:5e:e4:4b:f9:f3:90:39:b0:f0:8e:8d:19:7b:08:
                    c6:79:1f:c6:d4:75:75:ca:1c:12:25:c7:65:ec:a3:
                    48:8c:ee:7b:82:c7:af:34:d4:1c:74:8c:74:d8:74:
                    5f:99:5b:2a:e9:07:22:1d:74:8a:f8:34:02:1a:40:
                    2d:41:6d:37:36:a2:99:23:eb:e3:bf:f1:be:f4:36:
                    89:e7:09:41:5e:f7:61:b3:4a:72:eb:f1:2a:f4:07:
                    5d:9c:37:dc:37:80:93:58:2d:18:a8:c5:cf:98:59:
                    da:e9:1a:2b:7c:14:df:92:0a:cd:f0:9b:87:96:b5:
                    c4:48:f8:87:d3:8e:01:4f:1a:7d:2f:c2:13:ec:32:
                    fd:a7:d9:62:fe:62:bd:67:90:8c:68:57:69:9a:24:
                    51:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:85:BB:82:F6:22:D7:7C:D0:D5:41:49:87:BB:15:6A:B8:5F:36:84
            X509v3 Authority Key Identifier:
                keyid:AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34322e302f32342d3234203d3e203237383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:f2:60:b3:9b:c3:36:80:54:6d:81:b6:94:92:bf:a4:30:
         ff:a1:d4:49:89:54:9e:4c:a3:70:dc:be:c1:6f:91:4e:e5:48:
         41:02:88:a7:24:3a:ad:eb:e8:5f:ca:99:0f:89:75:76:16:0d:
         80:4f:f6:de:04:c6:e0:8e:81:bb:34:67:b4:4a:2e:0c:8c:2c:
         dd:87:15:b7:49:11:41:23:80:14:c8:61:2b:02:db:0d:fc:22:
         68:4c:35:03:79:ac:af:53:31:3b:2b:6a:cb:73:4a:73:20:83:
         99:79:7a:73:e4:ec:32:58:b9:60:52:1b:28:31:3f:da:c7:c4:
         be:49:42:e9:b4:91:1c:e7:8a:df:97:4f:3d:25:d5:ab:7b:eb:
         48:71:fb:f6:b3:f9:c1:af:79:56:8f:43:b5:6c:d1:32:6c:b6:
         af:8e:e1:d5:81:b1:13:95:93:f1:5a:cf:be:5e:fb:4f:76:20:
         0e:d5:4d:30:70:55:e9:c3:8a:7d:b5:53:8b:20:15:4d:86:78:
         7c:36:d5:26:57:11:4b:07:f6:4c:cd:30:5e:04:e6:43:24:07:
         50:b2:5a:a4:12:d5:db:cd:62:1a:10:59:90:c0:88:48:02:f5:
         46:71:be:ce:df:6f:84:0b:e2:60:5f:5d:c4:27:d2:44:db:6b:
         e6:5a:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org