Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136382e302f32322d3234203d3e20323639393331.roa
File:                     3230302e3132352e3136382e302f32322d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          nhdg9JKyjWDE5NtqD4VWQ0k2T5bbDq7islXlEcOybZs=
Subject key identifier:   D8:61:A1:8D:68:FA:7F:44:79:A3:E6:FA:84:F3:0D:22:1E:36:C1:6F
Certificate issuer:       /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial:       47C69F946921B016CC6F9B8211C54D31FCABBE55
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136382e302f32322d3234203d3e20323639393331.roa
Signing time:             Tue 05 Mar 2024 17:53:59 +0000
ROA not before:           Tue 05 Mar 2024 17:48:59 +0000
ROA not after:            Tue 04 Mar 2025 17:53:59 +0000
asID:                     269931
IP address blocks:        200.125.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c6:9f:94:69:21:b0:16:cc:6f:9b:82:11:c5:4d:31:fc:ab:be:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
        Validity
            Not Before: Mar  5 17:48:59 2024 GMT
            Not After : Mar  4 17:53:59 2025 GMT
        Subject: CN=D861A18D68FA7F4479A3E6FA84F30D221E36C16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:2d:d5:56:e3:02:ac:b3:bb:bd:60:98:4d:
                    c2:b2:8e:57:f7:40:71:86:17:5b:05:94:67:55:b5:
                    04:82:10:56:85:40:57:a3:8d:de:89:ce:1f:1c:32:
                    d2:67:76:56:ca:88:e7:66:45:6e:a3:56:8a:18:01:
                    2d:ba:72:b2:15:d0:38:3c:6c:6a:f2:cd:b1:85:e9:
                    9b:77:2b:f6:6e:9a:14:52:e0:3f:85:85:9d:3c:00:
                    8a:42:bc:69:93:92:ab:ac:aa:50:e0:41:2d:a1:2b:
                    8b:89:30:1c:d6:56:52:a0:40:51:0d:65:f7:74:ca:
                    23:1b:af:81:da:d2:19:a2:81:49:a5:4c:36:27:d3:
                    9f:cf:5e:84:fe:9f:fd:3c:5d:5f:22:87:2a:7d:14:
                    7d:64:07:4a:d8:63:83:87:12:ad:73:92:bc:66:ed:
                    8f:e5:2d:9e:ad:fd:17:50:ed:4b:52:dc:8c:ab:65:
                    ea:8e:bf:1d:9a:e0:6f:d6:4f:b8:47:51:03:9f:1f:
                    ad:49:78:c0:eb:9c:10:5c:8b:01:8b:f5:7d:31:8d:
                    f7:8e:25:42:e9:fb:03:8a:46:b8:39:0a:2e:4e:33:
                    8a:14:54:8b:3e:5f:91:64:96:b9:a0:d1:a6:27:05:
                    c9:4f:da:b7:d1:3b:87:a1:b0:89:3c:d7:7e:c4:fa:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:61:A1:8D:68:FA:7F:44:79:A3:E6:FA:84:F3:0D:22:1E:36:C1:6F
            X509v3 Authority Key Identifier:
                keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136382e302f32322d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:1f:89:72:d9:53:43:59:80:9a:fe:ea:af:fe:cc:e2:59:19:
         a9:dd:1e:1e:bb:2e:05:41:4b:29:93:11:f9:29:7a:27:78:8e:
         ed:e0:f6:82:ee:8a:3d:f9:9d:0f:6a:3e:75:5f:23:90:df:6d:
         da:33:14:7b:ca:28:01:27:22:37:c5:91:e2:5e:a5:6a:fb:1f:
         e5:82:25:27:8a:c7:84:5c:b3:c7:32:66:35:f1:34:6a:e4:55:
         f4:b9:38:8f:80:09:31:b9:36:43:52:30:64:83:3c:65:e3:40:
         ba:60:59:43:46:ec:28:6c:eb:c0:41:c3:b3:92:a6:92:a4:f7:
         c8:b9:ed:4c:47:c4:ff:cd:40:1d:d0:54:95:10:a8:5e:51:32:
         38:b3:70:67:82:85:2c:a0:66:43:84:2d:ce:80:a2:bf:32:31:
         ec:2f:f1:84:ad:93:16:0e:cb:5b:e8:ff:0f:1f:b6:99:44:f6:
         d1:7a:de:fe:55:58:f6:ae:af:88:d8:cf:d9:86:f7:74:94:d1:
         42:f9:ad:8f:85:6b:43:a3:d5:78:89:91:2a:da:64:a0:bd:41:
         95:84:4d:6e:7d:e8:00:57:30:44:3b:07:64:27:06:c1:2c:d0:
         2e:d6:ea:77:18:31:62:5e:f8:3a:a4:75:d8:39:0e:02:02:7a:
         1c:48:99:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org