Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/3230302e312e3230382e302f32312d3330203d3e20323635383232.roa
File:                     3230302e312e3230382e302f32312d3330203d3e20323635383232.roa (raw, json)
Hash identifier:          51mAGFRkopIGvbJ4fUK0ighwv8DZA+ZYaulbFkf61gU=
Subject key identifier:   5E:51:70:24:BA:33:16:79:6C:20:BB:55:86:2D:73:EB:8D:15:9C:E9
Certificate issuer:       /CN=044C73C833ED8F4D51E1C1A0A76C06F7DC33562A
Certificate serial:       416A0B917CFA8A3EA417E33AC0050146B9D6BBBD
Authority key identifier: 04:4C:73:C8:33:ED:8F:4D:51:E1:C1:A0:A7:6C:06:F7:DC:33:56:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/3230302e312e3230382e302f32312d3330203d3e20323635383232.roa
Signing time:             Mon 27 May 2024 13:55:00 +0000
ROA not before:           Mon 27 May 2024 13:50:00 +0000
ROA not after:            Mon 26 May 2025 13:55:00 +0000
asID:                     265822
IP address blocks:        200.1.208.0/21 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6a:0b:91:7c:fa:8a:3e:a4:17:e3:3a:c0:05:01:46:b9:d6:bb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044C73C833ED8F4D51E1C1A0A76C06F7DC33562A
        Validity
            Not Before: May 27 13:50:00 2024 GMT
            Not After : May 26 13:55:00 2025 GMT
        Subject: CN=5E517024BA3316796C20BB55862D73EB8D159CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:af:8f:c2:cd:63:5f:0f:95:cb:82:1f:c5:eb:
                    ce:51:a5:29:35:61:cc:9f:51:ac:cf:c6:a1:ee:5a:
                    ff:80:ae:e0:38:4f:8b:68:2a:a3:6a:80:e9:d6:e1:
                    8a:2d:a5:d7:9a:b7:18:e1:18:b4:e4:fe:fc:d6:64:
                    6d:59:8e:94:e5:b5:e0:c9:f3:31:d2:cd:4d:7e:19:
                    ea:f9:36:2a:6f:aa:c2:a7:c6:d2:8a:35:71:ba:47:
                    28:f9:99:bd:9d:ea:cc:74:55:d5:e5:04:06:48:dd:
                    07:8b:88:cc:f4:c7:2f:d6:93:a0:8e:90:d9:4b:9c:
                    1b:21:63:e0:39:73:fb:f4:7b:37:80:01:fe:0c:33:
                    c6:68:f2:67:db:4d:c9:6d:64:54:e0:13:ad:2e:0f:
                    1e:b9:e2:65:9f:f0:d5:01:58:b2:fe:78:1a:36:34:
                    f2:d1:72:c4:01:61:f2:42:d8:19:f9:62:66:61:62:
                    e6:29:c7:ce:8b:12:72:6b:95:76:54:da:38:54:b0:
                    45:b4:3b:74:ea:b2:70:d0:b6:92:3c:8f:8d:9b:92:
                    9b:56:13:ba:19:2f:c0:d1:bd:e5:cd:8a:00:1e:49:
                    b3:9a:bb:27:97:2d:98:9a:ec:2b:27:d2:dd:7b:0f:
                    06:7e:c3:67:57:b1:1c:8b:73:ca:38:26:79:27:4b:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:51:70:24:BA:33:16:79:6C:20:BB:55:86:2D:73:EB:8D:15:9C:E9
            X509v3 Authority Key Identifier:
                keyid:04:4C:73:C8:33:ED:8F:4D:51:E1:C1:A0:A7:6C:06:F7:DC:33:56:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/3230302e312e3230382e302f32312d3330203d3e20323635383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d3:66:76:1a:91:c0:de:24:8f:8a:18:2d:1e:6a:46:31:08:46:
         71:68:87:50:3c:2c:78:66:0c:57:13:d5:9f:b7:3f:4e:d2:50:
         5e:9d:3f:a3:dd:a3:13:d4:b1:9a:72:1b:2e:5e:c6:78:53:29:
         62:34:d0:1d:e2:26:8b:27:bc:35:87:d4:57:0f:9b:53:07:28:
         1b:59:7e:ed:1b:6f:08:20:e5:43:8d:09:0c:8b:92:7b:fa:7c:
         2c:f9:da:16:1e:6e:07:fc:f2:1a:4d:b3:ea:37:a2:4f:f3:d2:
         01:c3:86:2b:2f:0d:0f:48:3b:f3:b4:b0:e1:ca:25:14:9b:64:
         d0:06:ea:77:e7:07:c7:9b:99:51:3b:ac:6f:b9:0c:c9:9d:e3:
         4c:4f:b3:7e:c8:36:59:8c:4e:0c:1b:0c:62:29:0a:94:10:e1:
         a6:3e:02:e9:e0:58:56:b4:fc:90:c6:39:5f:ba:c3:cb:4c:70:
         03:95:6a:51:10:19:2b:30:e5:8d:d4:36:ed:ad:8a:44:d5:57:
         5e:d3:a8:ce:f5:02:82:1d:05:57:c0:fc:67:76:20:9c:6e:34:
         94:a7:c6:94:22:83:4c:90:ca:d7:78:f3:a6:6a:3a:f4:8f:73:
         49:73:8c:f7:77:3b:60:ae:b0:4e:32:2a:4f:0f:da:b7:c5:eb:
         2e:91:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org