Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34372e302f32342d3234203d3e203237383130.roa
File:                     3230302e31342e34372e302f32342d3234203d3e203237383130.roa (raw, json)
Hash identifier:          S+0wEZwfRXRj0N9j4rO3JYxBq3e7cLYTh0JPNrj7X7Y=
Subject key identifier:   FD:1C:E2:72:02:B5:65:F8:9F:EB:10:BA:17:3A:4E:68:F4:5A:38:FB
Certificate issuer:       /CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
Certificate serial:       120E21C4AA2FB70103D586CA79DBB8FA201F3BE7
Authority key identifier: AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34372e302f32342d3234203d3e203237383130.roa
Signing time:             Tue 05 Mar 2024 18:11:13 +0000
ROA not before:           Tue 05 Mar 2024 18:06:13 +0000
ROA not after:            Tue 04 Mar 2025 18:11:13 +0000
asID:                     27810
IP address blocks:        200.14.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0e:21:c4:aa:2f:b7:01:03:d5:86:ca:79:db:b8:fa:20:1f:3b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACFD9D629DD7DC5504C90BEB82187223A99FEEA7
        Validity
            Not Before: Mar  5 18:06:13 2024 GMT
            Not After : Mar  4 18:11:13 2025 GMT
        Subject: CN=FD1CE27202B565F89FEB10BA173A4E68F45A38FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:b5:9e:15:ec:ab:3e:c9:95:39:57:98:15:
                    e1:f9:da:78:30:d9:f7:2e:0e:d3:46:84:0e:ac:7c:
                    74:fc:12:c5:84:8b:f8:63:69:16:3a:74:e5:da:47:
                    86:3d:1c:2b:bd:89:c8:78:f4:51:68:4f:11:a9:18:
                    02:bb:a5:1e:03:59:d1:6d:1f:55:9b:c2:8e:46:a2:
                    81:ce:58:36:e3:ec:b4:86:32:b1:7b:05:60:f5:2a:
                    bd:72:d3:eb:34:22:a0:fa:2c:c8:af:f2:a1:c5:d3:
                    a8:0b:2e:0d:81:8f:ba:d8:0e:a7:1b:ce:28:15:eb:
                    f6:11:2a:7f:f5:23:11:49:01:28:76:a4:28:7f:58:
                    f9:4b:9c:3c:05:f2:bf:1c:9c:6f:ea:7d:60:f4:88:
                    08:ce:31:9c:08:7e:74:ab:f9:6b:69:39:ab:4a:e9:
                    a6:ce:8f:e2:e3:97:67:4f:46:53:db:29:70:f4:70:
                    95:23:00:1e:c4:ca:2c:5a:ae:13:cd:44:12:94:9b:
                    9f:d2:3c:76:06:c4:18:69:3c:95:8a:76:2a:98:f2:
                    ac:f3:1b:b1:96:71:73:0d:11:7d:a3:0d:86:dc:2b:
                    34:95:da:87:e3:cc:1d:49:91:55:ce:23:b7:cd:72:
                    bc:49:3d:39:5b:ee:40:a7:34:2f:47:58:1f:54:be:
                    cc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1C:E2:72:02:B5:65:F8:9F:EB:10:BA:17:3A:4E:68:F4:5A:38:FB
            X509v3 Authority Key Identifier:
                keyid:AC:FD:9D:62:9D:D7:DC:55:04:C9:0B:EB:82:18:72:23:A9:9F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACFD9D629DD7DC5504C90BEB82187223A99FEEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103C4FFE8F3FFFA4F8F3FBD4DED3EDD0D8232E29429547E80EDF1F23E23C0D1A/0/3230302e31342e34372e302f32342d3234203d3e203237383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:37:e1:73:47:07:61:fb:32:71:84:50:76:98:c3:f4:64:
         b3:99:75:0b:7e:6c:8f:77:bb:9a:00:cc:e6:90:6a:95:1b:15:
         03:25:21:17:9c:e9:c7:f8:fa:06:d9:58:54:76:26:48:b4:51:
         52:ea:e1:24:e5:31:e3:9c:f1:67:97:49:27:46:ff:78:98:b2:
         03:d9:c8:c2:52:29:4c:82:8f:83:05:9e:8b:32:be:f3:54:b5:
         dd:34:9c:d0:c6:1b:95:13:e1:34:f7:b2:75:cd:68:bf:51:80:
         0c:3a:48:d0:5d:37:53:53:96:8e:56:ac:f0:41:b6:86:f4:cb:
         be:a9:a1:92:4e:7c:22:34:b5:a5:6a:01:42:58:1a:7d:46:b5:
         8e:1d:e5:6b:5b:99:ca:63:31:de:f6:7b:2f:41:74:7b:29:26:
         5e:7c:ca:82:19:7a:bf:ac:15:af:4a:61:51:1b:41:33:28:aa:
         4a:05:01:b9:02:47:3a:35:70:9e:44:ce:2d:5d:1d:5f:86:cf:
         fe:3c:5a:8a:0b:9d:ec:e5:21:36:07:ad:34:41:ff:ee:cd:9c:
         22:54:b8:27:5d:cd:0a:1a:36:52:d6:54:b1:29:b2:69:04:aa:
         9f:f7:e5:b9:4e:1a:49:46:d0:fd:ad:5a:09:25:63:39:88:72:
         1e:88:60:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org