Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e37352e302f32342d3234203d3e203532333734.roa
File:                     3230302e31342e37352e302f32342d3234203d3e203532333734.roa (raw, json)
Hash identifier:          09gCWYkGt9mTaD4hsyZ8rsJVd3nSEswi72hFqqFrkYE=
Subject key identifier:   23:E9:3C:78:AD:D2:D5:87:15:A4:63:32:12:44:BB:EC:8B:31:F9:20
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       06E0FE17FC4D859D4813069716D16B10957C884B
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e37352e302f32342d3234203d3e203532333734.roa
Signing time:             Tue 05 Mar 2024 18:16:07 +0000
ROA not before:           Tue 05 Mar 2024 18:11:07 +0000
ROA not after:            Tue 04 Mar 2025 18:16:07 +0000
asID:                     52374
IP address blocks:        200.14.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e0:fe:17:fc:4d:85:9d:48:13:06:97:16:d1:6b:10:95:7c:88:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:07 2024 GMT
            Not After : Mar  4 18:16:07 2025 GMT
        Subject: CN=23E93C78ADD2D58715A463321244BBEC8B31F920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:17:80:14:10:0e:50:ee:2d:97:94:32:9c:
                    9a:5b:05:8b:bb:34:7c:ee:a3:18:5d:d4:14:d1:0a:
                    6b:a2:35:19:9a:5a:76:c3:dc:fa:74:81:ac:67:f1:
                    25:d1:9b:cc:94:f0:b0:de:93:be:73:77:09:5b:29:
                    37:9a:4e:57:53:59:ee:24:18:59:ff:37:9c:36:51:
                    3d:c6:bf:4b:3a:40:4b:19:9d:dd:6c:60:98:28:fb:
                    a2:57:97:e0:f1:68:50:93:fb:26:4d:5f:f3:fb:31:
                    64:5a:8c:0e:4c:a6:84:f4:da:86:28:71:60:cc:b9:
                    37:7b:e5:15:45:68:ba:f8:c0:7c:e4:84:6d:ee:6c:
                    d3:e4:3c:d0:cb:6c:0b:f1:58:9f:65:9e:9e:4f:19:
                    bc:b0:a7:93:6f:77:3e:ec:4b:09:1b:43:71:3c:a7:
                    ec:34:bc:f7:37:2b:da:fd:60:a7:d8:2f:41:6e:d3:
                    ce:c9:89:02:5f:cd:25:ed:78:83:66:bc:55:67:1c:
                    16:4f:f0:5d:d6:b6:2d:70:b5:5a:e6:b0:b0:94:f9:
                    b2:5e:91:ca:15:14:68:01:cd:b1:05:37:97:f1:34:
                    e0:9c:24:7f:9d:65:a3:c9:e8:15:87:89:2c:67:c5:
                    4e:d3:c3:eb:dc:23:a5:66:c7:f6:9a:27:b5:06:40:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E9:3C:78:AD:D2:D5:87:15:A4:63:32:12:44:BB:EC:8B:31:F9:20
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e37352e302f32342d3234203d3e203532333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:05:22:c5:f3:f2:ca:10:24:52:50:c1:da:2f:ae:e9:32:49:
         8a:5b:0a:36:72:b3:4f:d5:95:c7:f7:d9:30:42:f0:a3:9d:d0:
         a9:36:b9:10:6d:e7:a5:fa:72:cd:2b:23:98:8e:19:e8:45:65:
         83:7b:7b:2a:2a:6d:7e:4a:c9:42:b9:14:70:cb:59:21:99:02:
         81:1c:ae:db:ba:e6:e6:4a:6b:3f:3d:96:0d:b8:f6:09:dd:29:
         8f:73:22:01:da:c0:ba:cf:d4:ce:13:5c:ac:3b:04:7f:83:69:
         06:06:42:84:23:5a:93:c7:c6:44:5e:d0:c2:cd:c9:f9:72:58:
         3a:29:74:52:e6:de:f0:a1:1c:d2:e2:fc:b8:64:03:cb:50:13:
         4a:ed:32:0b:24:5f:b3:a6:39:b4:f9:c8:a5:7e:26:6f:4f:d1:
         77:55:a8:e2:96:26:b9:56:8e:8b:c3:f2:d6:86:a3:21:a3:3f:
         81:b9:dc:a9:a7:7f:c5:cc:fc:d6:e0:75:09:30:08:a3:c8:f2:
         59:e4:63:da:51:08:f6:cf:31:29:1f:6b:de:be:e6:bf:3d:7a:
         46:66:60:1c:8e:8b:81:15:db:4c:12:9f:56:02:3b:1d:12:25:
         24:9a:44:d4:53:ab:12:ee:f0:d6:d1:2e:03:8c:1a:f0:eb:40:
         c2:f6:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:07:26 2024 by rpki-client on console-fra.rpki-client.org