Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237393437.roa
File:                     3230302e302e32382e302f32322d3234203d3e203237393437.roa (raw, json)
Hash identifier:          kRAHP8yWtMR5M31Hv/IR5muU9WVC/VI8ok85orVvbs4=
Subject key identifier:   0C:7A:4F:92:B5:02:B2:40:8E:A1:CD:10:A7:A9:AA:DB:E8:11:F8:08
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       16117F0629058F72A2DE93660DAE098036150565
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:20:35 +0000
ROA not before:           Tue 05 Mar 2024 18:15:35 +0000
ROA not after:            Tue 04 Mar 2025 18:20:35 +0000
asID:                     27947
IP address blocks:        200.0.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:11:7f:06:29:05:8f:72:a2:de:93:66:0d:ae:09:80:36:15:05:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Mar  5 18:15:35 2024 GMT
            Not After : Mar  4 18:20:35 2025 GMT
        Subject: CN=0C7A4F92B502B2408EA1CD10A7A9AADBE811F808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:a6:53:fd:01:4c:53:af:33:89:29:8a:b8:
                    d4:e0:ab:16:d6:08:71:c9:73:9f:82:77:6c:78:84:
                    2d:2c:70:f8:11:38:97:a5:88:5e:2e:5d:44:e8:66:
                    a8:35:6d:96:0c:ec:8e:0e:2b:8f:b7:a4:88:39:55:
                    fd:bb:2d:ed:b2:ff:3f:a5:26:5d:fc:20:c7:9d:3b:
                    92:bd:d3:19:fd:cf:16:4c:02:61:f9:63:03:62:b4:
                    c1:bf:22:b8:47:89:b3:13:7a:6d:8a:a0:8c:20:3b:
                    fc:2a:19:e6:2f:e1:dc:ee:83:a0:b4:8a:ba:37:54:
                    3a:d5:e2:b2:d1:32:e0:06:3d:59:7a:05:b5:b6:58:
                    c6:58:fb:32:a6:74:32:67:f2:7d:10:e9:1f:c6:d4:
                    6f:b2:9a:95:e7:6c:af:72:bb:4a:8e:01:25:06:6e:
                    d7:e1:f1:e5:b6:9d:ae:35:93:ec:54:34:fd:53:1d:
                    ee:5b:e6:81:68:74:f1:36:95:51:35:99:f2:42:28:
                    f7:39:0e:ef:c7:49:5b:bc:99:a5:e7:62:e8:76:4f:
                    09:e0:e2:79:94:29:4b:c3:fc:26:a8:4f:bf:f7:36:
                    4d:ea:13:e4:97:c1:53:5d:72:e8:47:d2:93:0a:16:
                    6e:ca:b8:6b:f5:cc:10:29:c4:48:c4:01:74:f0:7b:
                    74:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7A:4F:92:B5:02:B2:40:8E:A1:CD:10:A7:A9:AA:DB:E8:11:F8:08
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:c3:99:ad:ae:ed:6f:cf:dc:8a:30:ee:c4:e1:d9:1f:0a:f8:
         51:ab:b8:82:05:e2:e9:7f:ca:47:56:e2:a7:98:ba:1f:08:2d:
         53:ff:fa:6d:35:cd:d1:ce:fa:f9:1b:86:5c:50:e0:85:4f:91:
         74:c5:a3:3a:33:24:99:e5:0a:4b:ac:51:40:00:eb:85:50:40:
         c8:5e:23:31:44:39:b2:ec:a3:f6:6d:c4:66:d9:4e:77:d4:a8:
         33:fe:cd:27:3c:9e:1b:9b:0c:87:fa:94:fd:fa:55:8d:bf:36:
         b1:fb:0f:2b:3d:b5:73:91:a2:44:01:9d:d2:75:7f:ae:ca:7f:
         fc:39:ce:43:83:ff:01:6d:fb:63:ce:d9:7c:93:83:14:bf:ce:
         ad:e4:a9:2c:33:34:08:01:90:8c:2d:ba:85:fd:d4:e3:92:08:
         3d:70:18:b8:7a:fd:87:35:ca:d3:85:a0:49:11:67:05:e3:61:
         6d:e4:c6:db:8c:4b:86:ed:a5:25:e5:9d:92:be:95:99:e1:52:
         ec:6f:8a:5d:2c:09:b3:4f:34:f7:e6:6e:3e:4e:ac:e9:0f:c2:
         9a:62:40:7c:dc:86:73:65:78:6e:9e:26:84:ad:01:ae:c4:76:
         6c:d8:7e:30:d1:92:a4:5e:8c:dc:38:4e:ed:3d:dc:83:f0:e5:
         53:b6:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org