Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3234203d3e203133353739.roa
File:                     3230302e33382e3136302e302f31392d3234203d3e203133353739.roa (raw, json)
Hash identifier:          jsrCujlfH/wC+HHMZHorSWGJlPoi5PctdrA3MuRzLqk=
Subject key identifier:   84:0A:8C:34:15:64:A6:BC:56:59:99:4D:E4:04:3A:70:F7:8F:27:56
Certificate issuer:       /CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
Certificate serial:       6498D8A0C8C16C79400EBAA1DCC23B2A274600D9
Authority key identifier: C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3234203d3e203133353739.roa
Signing time:             Tue 30 Jul 2024 22:35:00 +0000
ROA not before:           Tue 30 Jul 2024 22:30:00 +0000
ROA not after:            Tue 29 Jul 2025 22:35:00 +0000
asID:                     13579
IP address blocks:        200.38.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Dec 2024 18:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:98:d8:a0:c8:c1:6c:79:40:0e:ba:a1:dc:c2:3b:2a:27:46:00:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
        Validity
            Not Before: Jul 30 22:30:00 2024 GMT
            Not After : Jul 29 22:35:00 2025 GMT
        Subject: CN=840A8C341564A6BC5659994DE4043A70F78F2756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:bd:70:f2:7a:84:f5:bb:65:51:f6:f1:df:
                    5b:a3:70:e5:00:09:75:70:4a:7e:75:20:ca:55:36:
                    2f:d1:e6:84:35:99:70:c9:b1:9d:06:68:ca:e2:17:
                    42:7b:4f:49:8c:b4:e5:9e:b6:ba:47:da:a9:4f:dc:
                    92:f6:f9:9d:80:25:f5:86:2a:fa:4b:42:8d:4b:87:
                    21:5a:62:95:f5:b6:21:5c:aa:41:df:87:d6:7e:58:
                    6c:73:2a:06:eb:6b:e2:08:8a:8b:4f:1a:45:d3:9d:
                    53:6e:f3:81:86:28:eb:0a:b8:49:35:e0:03:e3:c3:
                    65:78:ba:85:2f:99:16:4a:8c:b1:84:42:c4:3b:17:
                    83:53:7c:0d:6a:5b:27:fb:16:8e:68:0f:27:9f:5f:
                    ec:11:44:09:de:c5:96:28:25:56:2e:ac:24:12:43:
                    95:9c:8c:b7:c8:a7:ef:14:cf:07:47:97:97:fe:bf:
                    85:f9:26:e1:a9:08:91:c6:83:60:cc:0a:0c:93:54:
                    86:53:84:a9:26:7c:ab:9f:84:42:85:cc:a3:44:44:
                    7d:0d:0a:b8:28:21:de:e9:51:f4:fc:3d:cb:e9:a4:
                    f8:5b:cc:1e:c0:36:92:1b:7a:67:60:83:d7:bb:fa:
                    81:12:1a:93:eb:07:b8:ee:e8:b7:a6:6e:24:47:02:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:8C:34:15:64:A6:BC:56:59:99:4D:E4:04:3A:70:F7:8F:27:56
            X509v3 Authority Key Identifier:
                keyid:C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3234203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.38.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:76:da:5e:db:43:d2:9c:2e:e3:3a:ed:f8:6a:4d:ff:1d:
         2b:82:fd:51:7f:17:a7:9e:c5:9a:ae:3d:a6:f8:94:7b:40:49:
         f3:f9:e9:ea:bc:45:1d:7f:de:60:da:71:bf:9a:3e:ef:27:29:
         fd:2d:8f:4f:70:76:8a:a6:5b:cf:65:df:40:14:00:92:39:07:
         52:06:2f:25:91:9f:f7:be:6b:84:ed:18:9b:34:07:b1:e0:36:
         72:5a:b1:0d:87:06:b5:20:92:20:42:dd:d7:f8:f8:1d:9b:58:
         56:2f:0c:8b:11:c8:bd:64:bd:39:d2:4c:cc:37:ee:d9:30:c7:
         19:3d:17:a2:17:ac:a6:c8:3a:65:f5:9f:db:23:52:ac:25:f7:
         24:44:67:44:54:9e:d3:97:b6:e1:df:b0:ce:5a:2e:7e:1d:88:
         7e:49:64:37:00:ea:d0:b1:c5:a6:83:48:1c:fb:45:61:0e:bb:
         ef:51:e8:b3:fc:69:03:16:e1:70:ae:bc:b5:b2:c4:c0:f5:ce:
         1e:47:fa:3f:51:d5:88:32:b3:eb:35:d1:e9:81:cd:ed:8e:4b:
         da:c1:8b:c1:7e:09:6d:8a:29:69:46:32:9f:ba:c9:de:36:08:
         b3:8e:53:3a:d9:4c:28:f7:a3:68:5a:b4:b2:22:68:2a:e8:fc:
         c6:33:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 07:22:20 2024 by rpki-client on console-ams.rpki-client.org