Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34342e302f32342d3234203d3e203237383130.roa
File:                     3230302e31342e34342e302f32342d3234203d3e203237383130.roa (raw, json)
Hash identifier:          Yhh61H4NSvkk3lHe5SHZ2b6egJwAEjRjbLMhBOm1rSU=
Subject key identifier:   C9:F3:E2:77:E2:51:A3:9D:EE:8B:B4:84:FE:7E:B5:09:92:15:0B:DC
Certificate issuer:       /CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
Certificate serial:       55A360C62BF1C5D582F66837C08617742EB3ABA7
Authority key identifier: AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34342e302f32342d3234203d3e203237383130.roa
Signing time:             Tue 05 Mar 2024 18:11:14 +0000
ROA not before:           Tue 05 Mar 2024 18:06:14 +0000
ROA not after:            Tue 04 Mar 2025 18:11:14 +0000
asID:                     27810
IP address blocks:        200.14.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a3:60:c6:2b:f1:c5:d5:82:f6:68:37:c0:86:17:74:2e:b3:ab:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
        Validity
            Not Before: Mar  5 18:06:14 2024 GMT
            Not After : Mar  4 18:11:14 2025 GMT
        Subject: CN=C9F3E277E251A39DEE8BB484FE7EB50992150BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ee:71:e5:33:e1:49:5c:16:56:00:b1:3f:fd:
                    a4:2e:c5:16:03:02:02:08:af:af:3f:a1:d5:cc:32:
                    b3:6e:8b:37:44:a1:96:0e:a7:ce:94:3d:b4:9f:8c:
                    22:dd:2e:d6:0e:01:50:69:9c:e7:7a:42:04:1c:f2:
                    16:72:9f:d4:5e:68:c0:32:b1:ec:7d:bb:61:8b:7c:
                    fd:ae:76:9c:b8:d7:a9:dc:72:ea:7d:9d:32:9f:58:
                    9a:06:ca:32:ef:af:e0:44:99:a6:9e:ff:fc:1b:21:
                    e5:f1:e7:ff:9e:1e:d7:72:b9:ac:a9:98:c5:cb:75:
                    cb:98:11:4f:dc:ab:72:a6:00:5a:bf:54:2b:95:9e:
                    61:bd:5f:0b:80:0f:c0:84:3a:0a:92:9b:4f:68:c2:
                    58:04:87:14:0a:22:ac:81:87:b2:60:69:5b:4d:3d:
                    61:2b:49:e8:44:8d:43:23:74:34:2a:5f:f7:fc:27:
                    8c:cd:fa:ee:24:68:5e:27:f2:40:43:cd:04:5c:8d:
                    6b:ac:ae:80:e8:fa:41:32:0c:54:14:0c:c2:21:bf:
                    49:df:31:89:f5:0c:4c:9d:10:62:3f:87:01:5d:62:
                    5f:ea:3f:aa:b4:22:52:aa:d3:03:d8:53:23:31:53:
                    68:53:42:11:71:d8:47:94:0e:bf:38:ec:9f:87:3d:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F3:E2:77:E2:51:A3:9D:EE:8B:B4:84:FE:7E:B5:09:92:15:0B:DC
            X509v3 Authority Key Identifier:
                keyid:AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34342e302f32342d3234203d3e203237383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:75:6b:69:d0:e6:34:54:42:ba:3a:63:29:48:e9:04:18:52:
         7f:75:5c:04:22:f8:de:e5:e7:ed:4b:35:a3:a8:5b:1b:0b:9a:
         b0:42:59:75:f3:c3:0b:f1:bc:88:b6:c2:12:90:a9:42:67:05:
         5e:82:53:b1:27:5c:e2:9f:2f:c7:eb:04:88:1e:ff:c5:79:df:
         51:f5:e3:2a:20:f6:92:7f:d8:56:25:c2:60:ae:2c:02:ad:4b:
         eb:71:40:db:e8:bd:5a:5e:63:ee:e7:1b:da:30:1c:f9:03:dc:
         88:17:26:14:fa:6c:3f:08:e0:85:67:bf:ff:f0:71:36:ae:52:
         46:d3:4f:dc:ff:5c:49:b5:73:5a:c1:4f:a8:fd:a4:13:21:3c:
         18:71:14:fb:5b:ed:f0:8b:4c:26:94:fa:f3:2d:9f:a4:60:ab:
         84:65:a0:92:0a:f6:6f:24:e3:9d:a1:8b:cc:53:7e:6b:9f:48:
         32:4b:e5:6b:f3:e0:15:fd:99:df:37:8d:7e:76:74:d8:9c:49:
         4a:3c:de:c5:1e:a2:23:f4:4a:31:52:89:e0:ad:a2:6f:20:c5:
         52:f2:28:9a:b6:31:ba:c7:4d:dc:2d:2c:2b:5a:54:0b:01:c8:
         84:b1:e3:d1:ed:a2:88:e1:e6:61:92:e4:4e:cb:96:b8:97:d4:
         09:3b:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org