Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/3230302e3130372e3234382e302f32312d3234203d3e20323634373434.roa
File:                     3230302e3130372e3234382e302f32312d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          2LYi3NtjQUx5/E3xj18qGvtXcBcpexJMMW/t781gPJo=
Subject key identifier:   9B:92:73:EB:39:15:A9:9D:18:E9:EA:B4:0D:79:6E:80:0A:11:3A:EA
Certificate issuer:       /CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
Certificate serial:       74771854AA888A3D557D49D6A6F96C4A1E077323
Authority key identifier: E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/3230302e3130372e3234382e302f32312d3234203d3e20323634373434.roa
Signing time:             Tue 05 Mar 2024 17:57:15 +0000
ROA not before:           Tue 05 Mar 2024 17:52:15 +0000
ROA not after:            Tue 04 Mar 2025 17:57:15 +0000
asID:                     264744
IP address blocks:        200.107.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:77:18:54:aa:88:8a:3d:55:7d:49:d6:a6:f9:6c:4a:1e:07:73:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
        Validity
            Not Before: Mar  5 17:52:15 2024 GMT
            Not After : Mar  4 17:57:15 2025 GMT
        Subject: CN=9B9273EB3915A99D18E9EAB40D796E800A113AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:53:1e:e5:89:5d:9e:9b:0c:26:39:9b:07:
                    34:dd:37:67:11:69:87:54:fc:d9:d1:86:66:e8:1e:
                    7b:7e:8c:9e:24:45:68:04:e1:d2:00:2d:48:78:38:
                    db:2d:7a:0c:14:92:cf:bb:4b:8c:4b:83:9e:25:65:
                    47:78:5f:3c:3e:39:2d:d5:db:44:fe:91:ee:e9:d3:
                    04:f7:db:fc:36:99:87:4d:11:50:7f:ed:78:63:54:
                    0a:82:c3:4f:83:0e:b6:04:d5:2f:26:39:d3:25:7e:
                    f0:b5:da:e6:ab:16:3c:f3:b8:79:18:50:c5:30:b1:
                    1c:8a:86:da:fd:9b:ee:30:52:5c:83:bd:b9:53:41:
                    59:c1:01:25:58:fd:98:fb:ce:61:70:cd:9e:7a:b8:
                    54:eb:c0:bf:23:21:88:dc:ad:35:e0:f0:6e:15:5f:
                    54:31:25:5f:fe:2a:f6:8f:39:19:2d:79:51:3f:0c:
                    e4:1b:91:49:f4:83:1f:45:c3:9f:89:27:7b:a7:31:
                    f5:18:d6:05:af:1a:bf:e4:41:49:a2:5b:d4:42:46:
                    7e:b1:c6:e6:9c:97:04:4a:35:b8:b0:37:ac:4f:3f:
                    8b:6d:2d:8f:f1:fe:4d:60:16:ac:43:0e:cd:a7:1b:
                    1a:ab:c5:de:b8:f1:a7:00:a8:fb:91:4d:55:54:50:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:92:73:EB:39:15:A9:9D:18:E9:EA:B4:0D:79:6E:80:0A:11:3A:EA
            X509v3 Authority Key Identifier:
                keyid:E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/3230302e3130372e3234382e302f32312d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:ec:35:1a:7c:ac:b0:7c:8e:19:d0:6d:0d:42:46:de:b5:ee:
         33:05:ea:10:d7:ae:ca:24:09:ea:f7:f4:ca:4b:9e:6d:a7:7e:
         d6:6b:51:45:a5:18:80:ff:36:49:6b:a1:30:0b:9d:f3:c8:bb:
         bd:68:6a:89:49:46:b0:98:80:ae:97:4d:40:02:1b:fa:3b:73:
         37:07:60:f1:cd:b3:e2:a5:16:a8:1b:48:f6:6b:64:79:f8:d8:
         67:7e:69:fb:2a:b6:f5:6d:19:02:29:8a:4e:68:68:21:79:bc:
         eb:8b:bf:e0:ce:63:8c:03:ad:31:de:99:d1:75:7a:0a:93:b2:
         f2:02:d7:bd:35:bd:1a:d5:50:ea:19:0d:49:bc:04:1c:ec:19:
         bf:0b:bb:d4:8b:3a:9b:d6:a0:4c:68:49:6c:34:01:95:a0:06:
         9d:14:84:b5:18:b2:3d:0b:fe:00:a7:40:6d:f9:18:47:fc:7c:
         d5:f2:0a:a0:d3:c1:97:b5:f6:80:e9:2a:a5:c2:cb:a0:f7:66:
         f0:89:67:24:99:1b:27:86:82:c0:f9:8b:8a:bc:dc:d4:3a:7c:
         5b:3b:b9:d7:81:4d:d4:fc:34:13:13:d1:c8:6a:78:41:f5:15:
         23:7d:50:e1:eb:50:63:7f:2e:7b:7c:c0:f0:74:0f:bf:7a:bf:
         be:4d:7e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org