Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/3230302e3231352e3232382e302f32322d3330203d3e20323731383638.roa
File:                     3230302e3231352e3232382e302f32322d3330203d3e20323731383638.roa (raw, json)
Hash identifier:          Kxd5fsosEORZVEwhMjATyj9z+XqgZ3wOr25wRYi3PQ0=
Subject key identifier:   18:80:47:1A:E2:30:F7:0B:BD:F6:BC:25:AC:CA:E3:CE:D7:B1:E4:3A
Certificate issuer:       /CN=2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B
Certificate serial:       431B78528779CA8A4624B9F461CCF70D983E171F
Authority key identifier: 21:06:B4:3C:1B:8B:D4:5B:DE:F6:E3:DB:81:01:E6:DE:7E:03:E7:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/3230302e3231352e3232382e302f32322d3330203d3e20323731383638.roa
Signing time:             Tue 05 Mar 2024 18:18:15 +0000
ROA not before:           Tue 05 Mar 2024 18:13:15 +0000
ROA not after:            Tue 04 Mar 2025 18:18:15 +0000
asID:                     271868
IP address blocks:        200.215.228.0/22 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1b:78:52:87:79:ca:8a:46:24:b9:f4:61:cc:f7:0d:98:3e:17:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B
        Validity
            Not Before: Mar  5 18:13:15 2024 GMT
            Not After : Mar  4 18:18:15 2025 GMT
        Subject: CN=1880471AE230F70BBDF6BC25ACCAE3CED7B1E43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:80:e1:6c:0c:4e:e2:fe:ea:b0:1f:be:1f:
                    e4:22:b6:d5:e3:12:65:79:ca:3c:d3:06:f1:b0:fd:
                    aa:93:ac:8c:e5:89:2f:f7:ad:7d:6c:1f:de:f8:78:
                    6a:f5:72:4c:ab:5a:92:36:b0:7e:dc:50:69:53:f1:
                    72:76:62:e2:3a:3b:31:f3:d2:e9:64:22:dd:81:d3:
                    02:30:a2:b7:74:14:20:55:f8:d9:dc:c4:e2:88:6e:
                    95:ff:7b:85:52:a9:12:54:2e:b4:09:70:c8:c8:34:
                    c8:f4:8b:56:5b:73:db:f9:3b:1e:3e:e9:ba:b7:34:
                    3f:b7:ce:d5:7e:9f:b4:b8:77:44:d6:a9:14:1b:a7:
                    e7:d7:bb:ed:50:a6:0a:47:68:15:ad:87:56:b4:68:
                    2b:b1:74:24:0b:d5:b7:8a:26:1f:ad:eb:64:f5:7f:
                    84:80:d7:a2:fe:9e:15:c3:de:b7:1e:7c:d5:d4:93:
                    1e:5e:f3:c5:4e:42:8d:35:ab:08:fd:1c:5e:d1:ac:
                    4b:77:4b:87:1d:f3:23:36:3b:76:f7:dd:8c:e9:1c:
                    06:9b:c6:47:64:ab:cd:22:8a:1f:d3:49:12:d0:61:
                    5d:cc:53:95:de:ab:56:ee:4e:d1:75:66:b3:e6:9a:
                    90:f1:e7:75:fa:fe:47:91:07:e9:e1:a0:06:ea:44:
                    95:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:47:1A:E2:30:F7:0B:BD:F6:BC:25:AC:CA:E3:CE:D7:B1:E4:3A
            X509v3 Authority Key Identifier:
                keyid:21:06:B4:3C:1B:8B:D4:5B:DE:F6:E3:DB:81:01:E6:DE:7E:03:E7:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/3230302e3231352e3232382e302f32322d3330203d3e20323731383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:29:d5:0a:ea:ca:51:82:80:68:ee:4a:0e:5b:68:c5:80:
         5c:28:99:15:4b:9f:d5:c5:a7:31:e2:54:7f:64:4c:e7:ff:59:
         84:18:89:0f:7c:45:f7:d5:4f:2b:9f:b7:90:27:79:e4:50:e8:
         fd:52:f4:ed:04:75:81:27:4a:fb:9b:93:28:4f:2d:9c:86:b1:
         c9:15:ba:a4:a2:6e:af:e5:e0:9c:0d:06:0c:08:bd:16:88:7f:
         d6:8e:a3:db:90:34:db:4a:01:c9:68:b8:a2:69:54:f6:1f:67:
         e9:4f:f8:88:bb:2a:31:8e:06:2a:3b:5d:80:42:70:f2:0f:fb:
         e1:68:76:68:b3:66:6c:9e:55:5a:e7:8f:f5:7a:e0:6e:d3:26:
         d1:7b:81:3b:b9:64:03:d6:8f:01:b7:96:67:93:23:9c:e8:7f:
         ff:dd:9c:c7:3a:b4:e2:c0:ef:de:eb:93:56:3e:b7:f4:ed:5f:
         57:30:7f:cc:3b:6a:1f:ec:17:70:dd:c6:a5:ac:03:84:e9:a2:
         53:03:f5:5d:84:f4:fd:14:14:0c:09:64:bb:9d:a2:97:0f:2a:
         5e:e1:15:a6:50:7b:52:c9:69:9b:69:6c:e3:04:5e:99:3b:ef:
         32:0a:8c:e8:8f:41:a0:9f:fa:f9:89:29:2b:e5:0c:e9:b1:08:
         7e:f1:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org