Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/3230302e3132332e3232382e302f32322d3234203d3e20323639393133.roa
File:                     3230302e3132332e3232382e302f32322d3234203d3e20323639393133.roa (raw, json)
Hash identifier:          6Z/tZqu0G3dj9amuFf+sa9HoSt897VYc3GhnQcDYHlk=
Subject key identifier:   11:35:78:82:21:61:2D:A5:7C:27:85:19:64:EE:43:20:80:53:5F:18
Certificate issuer:       /CN=8F9D596B5F4DD5B3F4DC80916A137A68D104D408
Certificate serial:       72913621EF2524140C8F9E00F5777936CDEB1B11
Authority key identifier: 8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/3230302e3132332e3232382e302f32322d3234203d3e20323639393133.roa
Signing time:             Mon 10 Jun 2024 19:10:00 +0000
ROA not before:           Mon 10 Jun 2024 19:05:00 +0000
ROA not after:            Mon 09 Jun 2025 19:10:00 +0000
asID:                     269913
IP address blocks:        200.123.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.crl
                          rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:91:36:21:ef:25:24:14:0c:8f:9e:00:f5:77:79:36:cd:eb:1b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9D596B5F4DD5B3F4DC80916A137A68D104D408
        Validity
            Not Before: Jun 10 19:05:00 2024 GMT
            Not After : Jun  9 19:10:00 2025 GMT
        Subject: CN=1135788221612DA57C27851964EE432080535F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:79:70:4a:f8:84:d5:2f:a9:07:c2:b2:75:24:
                    63:1a:dd:a2:90:ea:2d:0a:58:cc:a0:7c:05:ac:6b:
                    58:02:63:f1:28:f9:6c:40:1b:a6:9d:ca:b1:c1:ed:
                    56:37:56:27:c4:2f:08:ba:db:a3:cf:b3:3b:27:27:
                    18:38:aa:0e:c2:3b:f7:89:02:a2:68:70:6e:0b:c5:
                    6a:f3:62:94:f6:ff:81:12:59:85:24:3f:cc:c3:11:
                    a1:f9:41:97:12:ad:65:f1:84:b0:d4:6f:32:7d:be:
                    6c:0c:45:e5:4f:27:a1:a3:54:93:de:75:b2:d4:3b:
                    40:d9:64:0c:c3:db:65:92:e4:72:ad:43:c8:29:ef:
                    b1:3a:f7:ba:1f:95:45:69:7f:fe:4c:fc:1e:6f:5d:
                    4e:cf:1c:d7:85:97:1f:47:1f:27:a9:74:e2:a2:d5:
                    ca:9d:bb:aa:bd:f0:81:7d:c5:8c:e0:42:cb:1a:51:
                    08:9d:4f:a5:69:13:2b:e4:b6:6b:27:24:d0:40:ba:
                    26:d2:d7:cb:62:c5:df:39:18:83:7c:cc:0e:6c:f5:
                    40:69:43:6b:e0:0e:e8:c1:c8:5d:48:5f:27:d5:80:
                    b6:7f:35:38:1f:25:bd:07:3a:81:0b:0f:d7:dd:f0:
                    f3:db:b1:d9:42:b3:62:43:7d:92:0a:15:f7:60:b1:
                    8e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:35:78:82:21:61:2D:A5:7C:27:85:19:64:EE:43:20:80:53:5F:18
            X509v3 Authority Key Identifier:
                keyid:8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/3230302e3132332e3232382e302f32322d3234203d3e20323639393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:a4:c6:be:99:03:5e:83:a6:e3:32:15:d7:f8:4c:b0:d1:68:
         d0:b7:c0:12:15:37:84:30:9a:1d:45:9b:b5:c7:3b:aa:3c:1b:
         d7:57:0f:90:1b:24:76:92:df:ff:c8:87:d4:1f:b4:bf:c8:32:
         e5:0b:c6:ce:1c:d6:c5:ab:12:6e:78:55:a6:41:12:21:2e:92:
         8a:d6:cd:0a:c7:82:87:cf:10:be:d0:10:f6:77:2e:2e:06:df:
         2f:e5:04:f4:59:35:64:16:38:ad:da:33:27:ec:4e:f0:bf:1b:
         c0:6a:f2:08:e8:b3:28:e4:b3:35:f5:cb:49:3e:0b:6d:c0:50:
         3a:2b:a9:24:d0:f3:0c:66:bc:14:3c:47:b4:da:87:15:3d:3e:
         09:81:1e:c4:39:5b:83:5b:c1:31:2c:c2:4e:9b:b9:18:aa:da:
         03:2b:47:f8:83:95:9c:3e:b5:0d:6b:db:07:d5:cd:15:fd:ec:
         04:1c:7c:d4:0e:e4:b9:c6:35:ba:9a:8b:36:77:f6:2c:a9:1f:
         fa:9d:8f:de:72:9a:df:8c:0c:ce:03:da:fe:e9:c0:b8:a5:d1:
         70:90:52:62:c0:e4:b2:7c:d1:3e:8d:5c:75:b9:d8:38:a3:3a:
         44:f1:3c:5e:e6:37:02:6c:79:d1:9b:be:f5:1b:36:0f:93:c6:
         4f:9c:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:29:24 2024 by rpki-client on console-ams.rpki-client.org