Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa
File:                     3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa (raw, json)
Hash identifier:          jMNgrcTr4F8P98D7aqyJ3HzoaOUGAf8krlLia6+PHOA=
Subject key identifier:   BF:45:33:32:18:24:86:8C:5E:0D:35:1F:EE:61:C4:62:74:67:A6:E2
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       2CA8876B06CB2C41E5AEC8A6090DCDB83A4F8E6E
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa
Signing time:             Tue 05 Mar 2024 18:21:12 +0000
ROA not before:           Tue 05 Mar 2024 18:16:12 +0000
ROA not after:            Tue 04 Mar 2025 18:21:12 +0000
asID:                     263821
IP address blocks:        200.189.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 May 2024 20:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a8:87:6b:06:cb:2c:41:e5:ae:c8:a6:09:0d:cd:b8:3a:4f:8e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Mar  5 18:16:12 2024 GMT
            Not After : Mar  4 18:21:12 2025 GMT
        Subject: CN=BF4533321824868C5E0D351FEE61C4627467A6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:ce:45:33:fc:44:e2:1d:1e:16:3a:aa:bc:
                    a4:9c:a6:45:c3:95:ce:84:cc:af:33:3b:6c:cc:52:
                    86:ba:dd:8c:5b:d9:c4:1c:94:38:26:5f:2f:aa:3c:
                    bb:66:2b:24:68:31:c7:85:fd:89:fb:94:11:40:62:
                    d1:70:b9:c2:1e:a7:e9:71:ef:66:d4:48:26:5b:ac:
                    37:45:bf:cc:bd:24:f7:2c:d8:81:e5:53:28:2d:5f:
                    6e:83:c9:1f:e7:2e:21:a6:3d:c7:e4:70:77:8a:48:
                    b1:d4:f9:ef:67:57:bc:8d:eb:45:f0:4b:30:f8:e9:
                    68:70:dd:4f:23:c6:12:83:b7:cc:64:db:bc:4c:24:
                    f4:a0:c1:bf:eb:09:a2:c0:3f:4b:8b:4c:0c:03:a4:
                    1e:3f:b2:f0:c6:35:c9:61:0a:38:9a:e5:af:be:7e:
                    53:2e:8c:fe:94:46:eb:94:7b:d2:f7:45:1d:9a:b6:
                    f5:97:72:a0:2a:39:9a:31:63:22:08:b4:ba:1b:3f:
                    75:a6:d9:b1:c0:2a:14:7c:7b:e2:69:36:46:7b:38:
                    ce:b4:1e:87:50:4c:f1:cf:69:5b:c8:c9:ad:02:bc:
                    04:dc:5b:12:3a:b2:4a:d1:ed:88:da:8f:2b:4f:b6:
                    e9:40:1e:09:d3:2e:05:e9:f2:57:f1:83:6f:d6:e7:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:45:33:32:18:24:86:8C:5E:0D:35:1F:EE:61:C4:62:74:67:A6:E2
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:f3:ec:88:68:ef:7d:22:0d:4e:8f:e4:64:25:93:1c:ee:16:
         38:cd:b2:f6:9f:65:42:af:fe:ec:68:fd:00:b1:9a:b0:bb:c6:
         e6:17:93:3f:8f:ea:bd:eb:f7:72:92:9e:e5:87:aa:c8:10:c5:
         8e:96:86:6a:59:c5:d2:63:80:cb:7a:b2:6d:f8:98:c9:6e:3f:
         7b:18:36:f8:a0:82:76:e1:dc:f2:2a:fa:29:5c:4e:76:5d:5f:
         d1:7d:e1:68:24:67:84:0c:bb:72:c7:53:49:ef:0c:2d:ea:52:
         f4:ef:7c:ba:3d:3e:59:4a:9a:c9:b7:34:d1:7a:12:96:05:af:
         1b:dd:06:34:30:9a:87:a2:c9:77:c2:64:94:11:e0:a0:b4:11:
         c9:e7:85:1f:ce:68:f4:a4:e9:81:cd:6a:32:22:66:53:c9:cd:
         5f:00:63:27:89:ed:46:01:88:07:4a:8c:4b:4c:7f:f2:b1:81:
         67:d8:94:10:a7:01:b3:7c:8e:6a:f7:11:13:bc:09:f2:b2:34:
         75:2b:9c:3c:0e:b1:b2:fd:67:53:ee:1e:6f:fc:93:f0:f0:4c:
         14:c7:b3:24:0e:43:15:d6:f7:d1:7d:4e:22:3c:d8:4b:44:8d:
         cc:ea:72:e5:de:f9:9b:d9:a0:06:58:7d:5c:23:e1:1b:37:09:
         c9:6f:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:39:16 2024 by rpki-client on console-fra.rpki-client.org