Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3230302e3130372e38382e302f32312d3234203d3e203532333831.roa
File:                     3230302e3130372e38382e302f32312d3234203d3e203532333831.roa (raw, json)
Hash identifier:          63b3n8aefz6WASSXSCp3qX4KVFB3ljpn2SND0Rx0LSQ=
Subject key identifier:   6B:69:00:91:F6:12:FF:3D:8F:5B:01:3E:37:4A:C9:E8:B1:A2:EF:74
Certificate issuer:       /CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
Certificate serial:       77B1CEF15A12C9B94DC2753BB62846430FCBA1EC
Authority key identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3230302e3130372e38382e302f32312d3234203d3e203532333831.roa
Signing time:             Thu 25 Apr 2024 12:50:02 +0000
ROA not before:           Thu 25 Apr 2024 12:45:02 +0000
ROA not after:            Thu 24 Apr 2025 12:50:02 +0000
asID:                     52381
IP address blocks:        200.107.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b1:ce:f1:5a:12:c9:b9:4d:c2:75:3b:b6:28:46:43:0f:cb:a1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
        Validity
            Not Before: Apr 25 12:45:02 2024 GMT
            Not After : Apr 24 12:50:02 2025 GMT
        Subject: CN=6B690091F612FF3D8F5B013E374AC9E8B1A2EF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:b8:7c:0b:c6:e2:55:1c:26:3f:2f:0a:0d:
                    f8:0f:72:85:d7:e0:2e:0e:b2:52:12:c6:ab:43:a3:
                    ee:7c:81:69:97:fe:84:bb:00:68:5b:e9:46:83:80:
                    db:59:0f:e4:e2:ca:5c:91:25:26:d1:99:84:d2:8c:
                    49:75:6b:3d:8c:53:e0:96:c0:eb:7a:d8:82:9c:60:
                    fa:83:5d:f1:d3:06:49:d9:91:3b:74:48:d4:3b:18:
                    c2:ed:d5:0f:00:e8:29:da:3e:f8:29:2f:3b:9a:66:
                    8f:8a:6d:a3:63:06:81:5b:ea:e6:a0:ba:4b:df:1b:
                    57:21:13:b4:45:0a:8a:65:19:25:05:af:8a:04:93:
                    36:f2:33:c5:0e:98:99:eb:85:11:91:75:5d:df:17:
                    14:96:0d:87:82:1e:60:0a:b8:8d:67:bf:f5:df:51:
                    a3:36:92:be:1e:6c:97:72:ca:ce:b2:07:30:12:ed:
                    1c:8e:b6:57:c0:50:c0:d1:53:53:b5:ec:a1:4e:69:
                    f4:26:d2:4d:4d:46:b0:3f:f6:61:49:a3:61:74:30:
                    90:ea:23:05:47:a7:d3:25:df:29:54:ab:85:9d:10:
                    1b:aa:2d:3a:8c:a2:04:30:bd:14:0c:99:66:86:4b:
                    e2:8b:2f:86:b1:cd:f1:6a:cf:5e:7d:53:8f:5e:96:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:69:00:91:F6:12:FF:3D:8F:5B:01:3E:37:4A:C9:E8:B1:A2:EF:74
            X509v3 Authority Key Identifier:
                keyid:18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3230302e3130372e38382e302f32312d3234203d3e203532333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:67:0b:4f:15:c3:2d:e7:6e:7d:26:93:f4:57:cd:68:b0:7f:
         19:50:a9:dd:d3:15:c9:4e:58:09:7c:8f:fb:d4:3f:18:e2:b6:
         4c:d2:19:4f:cf:0b:c1:fe:bd:e8:f2:ac:20:7e:50:85:a2:bc:
         4b:17:fc:87:a5:81:a5:6c:4e:7a:f5:43:ab:21:2a:1d:10:fa:
         5d:70:da:dc:f0:22:b2:d8:25:bf:7c:9b:30:b7:6c:49:0c:75:
         8f:6c:5b:74:ce:c8:e0:b8:54:a0:48:1d:f8:cf:50:b1:76:47:
         62:8f:20:28:93:75:65:93:9d:e9:60:25:c4:2d:42:f2:a6:2c:
         2d:be:27:77:ac:3b:f4:0d:4d:73:4c:07:ab:30:5d:60:44:2a:
         46:b1:e4:dd:98:f5:d0:6b:a2:29:c7:53:39:f1:1e:eb:5e:94:
         fd:8b:82:fe:de:90:a3:13:2b:50:d0:40:35:41:a5:e0:42:d2:
         96:29:1e:b8:cf:56:27:62:23:24:09:3b:e6:ef:7f:16:9d:a7:
         d6:54:30:85:59:b9:f9:59:78:56:bb:f6:0c:e8:31:eb:eb:09:
         c6:b7:a9:d4:0b:fb:fd:f0:cd:57:c4:90:fe:a4:c5:c5:6e:53:
         d2:99:c6:41:82:d5:6a:8e:49:3b:4a:55:96:c6:b3:10:5b:2c:
         f6:05:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org