Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e33322e302f31392d3234203d3e2036343239.roa
File:                     3230302e33312e33322e302f31392d3234203d3e2036343239.roa (raw, json)
Hash identifier:          pZrfWNTkJQb/xAez/zHjngTuGXORxAOzrvkJDzm72yA=
Subject key identifier:   72:83:1F:9E:D1:64:E4:6A:27:BC:27:E7:7A:95:42:B2:3C:7A:49:09
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       243FE5D25972A3F735F0F9ECB5317932FD5C5105
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e33322e302f31392d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:17:05 +0000
ROA not before:           Tue 05 Mar 2024 18:12:05 +0000
ROA not after:            Tue 04 Mar 2025 18:17:05 +0000
asID:                     6429
IP address blocks:        200.31.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3f:e5:d2:59:72:a3:f7:35:f0:f9:ec:b5:31:79:32:fd:5c:51:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:05 2024 GMT
            Not After : Mar  4 18:17:05 2025 GMT
        Subject: CN=72831F9ED164E46A27BC27E77A9542B23C7A4909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:a8:5c:48:44:d0:22:6d:41:45:b5:b0:f3:
                    f1:e1:30:aa:e8:c0:7a:79:7b:8e:73:92:c1:44:f8:
                    81:12:78:da:41:a9:ed:01:e4:fd:d3:05:c6:55:71:
                    46:2a:d1:ab:a1:2d:58:2f:81:e8:c5:50:05:ae:aa:
                    99:b4:7d:43:94:31:17:2c:a4:8e:d9:1d:52:a7:7a:
                    1d:84:1d:c0:70:f2:34:62:0b:ab:dc:d8:ad:c7:d3:
                    9b:e5:6f:dc:0a:ed:5c:3f:92:68:42:77:de:18:98:
                    f3:f1:b7:34:12:2b:b8:39:cf:b7:0e:41:ca:79:f2:
                    69:db:94:cc:11:b9:f0:1f:9c:60:ce:c3:d8:96:ba:
                    a4:66:42:55:fe:c5:c4:ed:1b:5f:80:df:7b:9c:c1:
                    d7:76:ed:e7:86:88:52:da:7f:95:03:6b:00:65:d4:
                    7d:ee:2d:a4:27:05:c1:c3:cf:36:13:07:2e:c3:a7:
                    11:5a:f1:7f:eb:10:35:a8:6f:57:aa:8d:d3:c2:43:
                    85:24:8b:cf:2a:ad:c2:8a:87:71:e1:d9:6f:39:55:
                    2d:58:b2:89:d4:dd:7e:be:e2:cf:76:a1:26:7b:5b:
                    58:51:57:e9:5c:bf:eb:a1:87:12:f1:d7:eb:bd:e5:
                    4e:66:dc:0b:9f:ec:b3:8e:cc:47:66:97:dc:91:8e:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:83:1F:9E:D1:64:E4:6A:27:BC:27:E7:7A:95:42:B2:3C:7A:49:09
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e33322e302f31392d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:b2:e9:ea:4f:a2:7d:87:c2:65:ac:5f:b0:94:cf:7f:5b:
         53:43:e9:b8:a2:30:02:da:a3:40:c7:a0:6c:17:89:f0:d2:70:
         48:e9:ab:a4:04:5f:fa:82:93:21:df:b6:a4:1d:98:4d:c3:f0:
         b8:30:3b:d7:d7:b1:ac:46:a6:53:74:b2:1a:97:d9:c0:68:61:
         4a:78:f0:8b:1e:b8:65:2e:cc:2b:bb:b4:5b:ce:4d:6a:04:a5:
         a6:09:d5:5d:d4:b9:6f:c4:c4:8c:c8:21:c7:15:1c:68:5a:24:
         28:0b:88:92:ac:47:a5:ea:69:38:c4:62:31:3d:9e:e5:49:e7:
         7c:d0:a6:d3:13:79:6e:f5:23:dc:d5:7d:e7:f8:e0:a6:ac:56:
         6d:37:1c:af:50:e8:56:1f:3c:ee:34:fa:68:9f:52:98:78:00:
         42:33:18:da:50:b9:bb:c1:5f:83:08:66:c7:85:a0:07:ac:02:
         1d:76:88:7a:00:6d:72:2d:5c:be:e4:33:07:24:06:23:f5:13:
         c3:c7:27:31:03:0f:59:bc:37:e5:11:75:88:9a:3f:5a:66:b0:
         05:ce:84:71:be:3c:d0:30:4c:0d:98:00:4e:53:85:a0:cb:89:
         3e:72:2b:1d:31:f0:5b:aa:65:73:eb:35:ea:5f:53:0d:f8:9b:
         5e:2b:30:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org