Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/3230302e32332e3135392e302f32342d3234203d3e20323730303833.roa
File:                     3230302e32332e3135392e302f32342d3234203d3e20323730303833.roa (raw, json)
Hash identifier:          glixzgPasE0d6ijF+C2YF8CMTBdRPJ1o+muMLXEpoVM=
Subject key identifier:   3B:9D:31:9C:19:0B:EB:BD:84:B2:3E:92:6C:40:F4:0F:61:F2:2E:43
Certificate issuer:       /CN=80C810ED88D5F93C94792378CA0CC223E6DB869F
Certificate serial:       1C3E4A22B8C34396B2CAD5508F4FBFD109387C88
Authority key identifier: 80:C8:10:ED:88:D5:F9:3C:94:79:23:78:CA:0C:C2:23:E6:DB:86:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/3230302e32332e3135392e302f32342d3234203d3e20323730303833.roa
Signing time:             Tue 05 Mar 2024 17:47:34 +0000
ROA not before:           Tue 05 Mar 2024 17:42:34 +0000
ROA not after:            Tue 04 Mar 2025 17:47:34 +0000
asID:                     270083
IP address blocks:        200.23.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3e:4a:22:b8:c3:43:96:b2:ca:d5:50:8f:4f:bf:d1:09:38:7c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C810ED88D5F93C94792378CA0CC223E6DB869F
        Validity
            Not Before: Mar  5 17:42:34 2024 GMT
            Not After : Mar  4 17:47:34 2025 GMT
        Subject: CN=3B9D319C190BEBBD84B23E926C40F40F61F22E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:96:1e:e9:d9:d8:30:75:05:3e:a3:cc:35:
                    60:8e:e7:34:aa:6c:50:9b:67:9f:9a:2e:5f:29:2a:
                    94:44:e5:0e:6d:4b:a2:e4:c6:c8:cb:e9:a0:99:64:
                    7b:62:d9:ba:f2:70:56:e5:98:0c:a9:06:63:3e:12:
                    33:6a:d8:1d:28:7a:66:b6:d6:9e:09:64:60:cd:a4:
                    23:99:40:61:02:e8:5f:38:43:db:66:26:79:34:df:
                    64:15:25:7e:76:77:77:5a:01:14:bc:23:ae:6d:2e:
                    19:2e:0f:ec:04:a9:11:32:2f:ee:53:90:05:1d:ce:
                    bb:61:0f:4e:2c:6a:77:6f:80:4d:4e:d1:df:59:83:
                    21:46:6f:6a:48:4d:23:1d:41:09:20:bb:20:f6:11:
                    08:26:91:ae:79:a3:c4:9e:27:30:c0:23:b4:52:c0:
                    d4:e2:8f:53:aa:cb:83:d6:f8:2d:0a:51:4e:64:8c:
                    ad:99:ee:3f:ba:90:db:67:12:ef:09:81:87:dc:a0:
                    ab:be:b6:0e:4a:2f:62:e0:e0:e7:46:10:48:21:41:
                    11:fc:c4:d8:4d:34:67:88:47:4d:45:92:c7:87:f7:
                    a9:f0:82:f4:91:1d:31:66:a7:58:e1:00:2b:cf:c2:
                    10:8a:d2:36:85:6d:e5:67:c4:45:c3:c4:29:2d:18:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9D:31:9C:19:0B:EB:BD:84:B2:3E:92:6C:40:F4:0F:61:F2:2E:43
            X509v3 Authority Key Identifier:
                keyid:80:C8:10:ED:88:D5:F9:3C:94:79:23:78:CA:0C:C2:23:E6:DB:86:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/3230302e32332e3135392e302f32342d3234203d3e20323730303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:59:7d:85:f5:19:d1:5a:7c:8b:8d:06:9f:45:d2:4d:ed:14:
         74:59:4b:38:3d:52:df:14:0f:61:34:0d:77:db:1c:8a:4c:43:
         9f:dd:a6:48:29:73:42:b3:66:c9:c6:b0:b0:f5:29:bc:f0:17:
         88:d6:bd:f8:ba:b0:60:24:11:72:f2:87:c2:76:e0:a2:08:75:
         a6:a0:1b:bf:32:97:a6:40:1a:84:cb:aa:13:b1:65:19:35:c6:
         de:61:b6:b5:20:59:ce:87:3f:d7:dd:43:4e:81:6a:72:ea:bd:
         ec:d4:f7:b1:b2:de:8d:2b:88:11:3a:31:16:d9:bd:02:a2:54:
         ad:2e:45:d4:ee:08:13:04:0e:9b:63:ac:99:1d:b7:c8:28:73:
         76:d7:13:dd:45:76:36:b7:d3:67:bb:06:93:fd:e4:00:bc:0f:
         c5:80:a6:2c:79:e4:a5:d9:57:5e:74:56:c8:2f:41:c9:2b:df:
         32:83:6c:3a:53:b9:23:66:d0:a6:5c:de:da:4a:46:8d:41:fe:
         9e:61:b8:fc:6f:bd:87:65:12:dd:7d:3b:93:eb:62:66:af:f7:
         2c:d9:49:19:d0:fe:b3:72:b5:e2:07:27:7f:ae:9c:28:5a:28:
         9d:67:2c:13:40:ce:b6:90:3a:15:a3:a8:ed:83:a3:d9:e1:f9:
         5f:a9:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org