Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa
File:                     3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa (raw, json)
Hash identifier:          8wUoOxO9cVixZiLi+focvDRHEU6tx1IUPQnTKqCgfjY=
Subject key identifier:   53:20:21:64:BA:5C:F7:11:BB:93:28:3A:73:6B:99:89:B0:6E:15:E8
Certificate issuer:       /CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
Certificate serial:       737AFFB71225C652C08B4456466BB3C8738F57B9
Authority key identifier: AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa
Signing time:             Tue 05 Mar 2024 18:22:27 +0000
ROA not before:           Tue 05 Mar 2024 18:17:27 +0000
ROA not after:            Tue 04 Mar 2025 18:22:27 +0000
asID:                     262266
IP address blocks:        200.10.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7a:ff:b7:12:25:c6:52:c0:8b:44:56:46:6b:b3:c8:73:8f:57:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B
        Validity
            Not Before: Mar  5 18:17:27 2024 GMT
            Not After : Mar  4 18:22:27 2025 GMT
        Subject: CN=53202164BA5CF711BB93283A736B9989B06E15E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:0a:32:d4:8f:51:c9:8d:5b:0f:08:d0:8d:
                    ff:be:8b:c2:03:a5:cd:a5:d9:db:6a:36:60:96:be:
                    f4:22:37:51:34:d0:52:8b:1d:7f:57:1b:81:de:1e:
                    99:fb:bc:11:a7:56:61:95:31:bc:0b:77:55:e9:9a:
                    ea:94:84:6e:1b:66:91:9c:d5:06:0e:9b:f9:40:97:
                    18:90:8a:39:b5:12:03:bf:25:34:e6:06:40:6c:2f:
                    ae:ed:42:4e:6c:00:bc:42:66:f1:20:f6:b4:dd:b8:
                    34:73:1d:3c:7a:0e:78:16:9b:a8:14:be:30:06:bd:
                    bc:6f:a4:35:60:9f:46:87:19:7b:70:b9:f2:09:6f:
                    ed:f0:14:72:54:c1:59:f2:e1:04:4d:b3:cc:45:34:
                    f5:5f:c6:ba:f1:b9:08:2e:35:70:f8:97:e3:30:71:
                    bc:88:cb:8d:99:e8:eb:08:19:46:7f:f8:a7:a1:64:
                    c1:57:fc:69:55:ee:55:1a:fe:81:4b:a0:bd:09:86:
                    0b:e2:a0:7d:84:0c:28:b8:bb:df:38:36:45:67:fd:
                    45:08:4b:2f:bd:f8:86:57:9b:d2:3e:19:2e:29:1a:
                    bc:3e:11:19:d2:bb:83:a9:e5:45:0a:62:fa:57:3d:
                    1b:9d:eb:b9:f6:d4:bf:8a:a0:73:e5:bd:43:43:18:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:21:64:BA:5C:F7:11:BB:93:28:3A:73:6B:99:89:B0:6E:15:E8
            X509v3 Authority Key Identifier:
                keyid:AA:45:98:D8:3D:BC:14:2A:16:4A:D7:2F:5D:D9:03:6A:AE:DB:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA4598D83DBC142A164AD72F5DD9036AAEDB0A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E372117B61F3171E3797A9F6840DFB41554D1345CCA827C14FE88BBF42FF66C/0/3230302e31302e3139362e302f32342d3234203d3e20323632323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:b3:c6:02:d6:ed:39:ef:48:45:e1:fe:dd:24:db:72:88:f5:
         cf:86:46:4e:9e:a1:cc:a6:cf:23:29:e5:f3:a1:bd:24:76:69:
         33:b8:87:26:a7:8d:34:f7:3f:c7:1b:de:5a:95:a4:79:2d:04:
         10:ee:8f:e3:bc:6a:59:8a:39:8e:bd:4a:ab:7b:21:48:cc:db:
         de:42:54:35:18:ea:ad:c0:80:ee:3f:43:ba:e1:b6:61:e7:ea:
         8f:0b:ca:f7:c6:de:d0:11:a9:74:c5:cd:5f:f3:6d:6e:d7:3d:
         88:d8:fa:3f:c9:5a:8d:05:b8:0c:45:98:c4:96:6d:61:86:40:
         2c:95:13:55:f8:f0:fc:ab:8d:92:99:29:89:e9:ec:ed:88:d2:
         b2:60:8d:bf:49:e6:db:9d:03:4b:0f:56:b1:3f:a6:e2:55:e9:
         6c:39:68:dc:eb:aa:cc:b9:37:75:dc:af:21:dc:94:c1:02:27:
         ce:5b:44:f5:37:c4:a4:bc:db:c9:f1:14:e5:3a:32:3d:dc:bc:
         bc:02:33:a6:fd:c1:7c:41:d8:cc:fb:5a:05:c5:fb:48:0f:15:
         a1:93:43:92:aa:e4:69:48:e1:c6:13:12:6e:d2:4b:08:ee:35:
         b7:19:73:c1:d4:03:0e:61:13:4e:9f:57:52:1d:21:8b:3c:b2:
         0a:99:66:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:19 2024 by rpki-client on console-fra.rpki-client.org