Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237383230.roa
File:                     3230302e302e32382e302f32322d3234203d3e203237383230.roa (raw, json)
Hash identifier:          5Mq3BPK7vH8F6odLpdN8Hr5OtVt1U6ertvunoakJYuo=
Subject key identifier:   28:EC:65:28:F1:82:CE:13:6C:DE:AC:3E:72:1A:2F:D3:7E:00:5F:66
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       3AC4CE49A9905AD4FBB4C54F2B8956E20B222F90
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237383230.roa
Signing time:             Tue 05 Mar 2024 18:20:35 +0000
ROA not before:           Tue 05 Mar 2024 18:15:35 +0000
ROA not after:            Tue 04 Mar 2025 18:20:35 +0000
asID:                     27820
IP address blocks:        200.0.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c4:ce:49:a9:90:5a:d4:fb:b4:c5:4f:2b:89:56:e2:0b:22:2f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Mar  5 18:15:35 2024 GMT
            Not After : Mar  4 18:20:35 2025 GMT
        Subject: CN=28EC6528F182CE136CDEAC3E721A2FD37E005F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:e0:28:8a:23:72:83:b7:eb:8f:fc:42:55:
                    90:90:46:4d:0c:43:73:2c:f6:9b:44:d8:25:b9:cf:
                    21:60:5a:d1:56:44:67:ad:8d:92:3d:e1:2d:17:f8:
                    9b:67:ee:7b:8d:e1:0c:b9:3d:db:93:ed:4c:77:8d:
                    e3:4a:db:79:43:35:24:49:0d:99:00:5c:07:54:29:
                    20:00:e5:cd:dc:8c:25:bd:56:e8:89:c7:ef:20:2b:
                    2e:28:4c:ed:fa:1c:22:ee:f7:85:75:95:5e:01:a1:
                    7e:a9:77:a1:ed:20:dc:f5:31:4d:ce:30:3f:c4:7c:
                    d9:0d:31:83:3b:c2:c2:f7:d2:6a:02:5d:95:7d:1f:
                    ee:de:e2:14:9a:37:4f:58:5c:42:f9:bb:9f:ac:c4:
                    d3:37:5e:59:e2:ef:e7:3e:7f:4e:ab:0d:de:38:67:
                    04:0e:bd:16:f0:2c:f2:26:03:37:f8:4b:3e:32:4a:
                    ee:b9:c4:76:5a:66:22:7c:1b:e3:f4:32:99:f8:1b:
                    7f:b9:f4:48:c2:25:ae:0a:07:ac:64:60:92:e4:80:
                    03:2c:12:df:aa:1e:da:67:f0:39:45:09:96:de:1a:
                    d2:9b:44:de:83:8a:48:1f:2a:12:11:70:12:cf:9a:
                    85:07:b6:fe:74:e9:e2:53:79:69:42:44:1a:91:e4:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EC:65:28:F1:82:CE:13:6C:DE:AC:3E:72:1A:2F:D3:7E:00:5F:66
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:33:3c:7c:46:39:75:59:29:4c:20:7f:d2:6b:a3:4d:98:
         c6:ed:b5:c3:c4:fe:e8:e0:f4:e3:da:36:6a:1d:da:1d:ec:bd:
         c1:16:a9:00:e3:86:4f:43:72:ca:7f:62:3a:63:05:49:28:26:
         6b:ba:97:47:b8:5c:7e:69:73:78:70:5f:4b:96:b5:cb:34:0d:
         20:62:9d:eb:f1:e4:fe:ea:3a:6e:bc:dd:57:51:8c:f7:0b:ef:
         ff:68:3f:3c:f2:f0:2d:a6:cf:70:19:7c:ba:42:15:58:34:d0:
         55:1c:83:f0:f4:6c:44:0a:15:6d:eb:ba:5f:8c:73:a1:74:b2:
         0f:ab:13:f6:60:bc:11:f5:02:cb:bb:7b:b3:80:10:72:a7:08:
         72:b8:61:6c:1c:4d:13:df:f3:12:10:f2:5c:f0:7f:9f:b8:1d:
         49:ee:4a:49:0a:40:5b:0b:52:e5:64:1f:a0:a8:b6:3d:66:12:
         7f:06:c4:bd:f9:a7:99:27:1f:b2:75:ff:2c:e8:16:38:21:64:
         c6:f3:37:41:0e:10:12:37:39:1e:8c:f5:ae:ba:74:96:32:82:
         f1:f2:26:09:a7:6f:d4:fd:6c:5c:c2:f0:91:ed:db:79:1a:30:
         df:fd:f7:d5:69:fb:74:e9:80:08:68:f4:69:49:a7:19:db:3f:
         7c:e3:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:09 2024 by rpki-client on console-ams.rpki-client.org