Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/3230302e3139342e3138342e302f32322d3234203d3e203136393231.roa
File:                     3230302e3139342e3138342e302f32322d3234203d3e203136393231.roa (raw, json)
Hash identifier:          73sbgkP7og5HL0aIaOPql4jKJobz7rbclpvJ7xhrDI4=
Subject key identifier:   92:D6:FF:71:C2:61:D2:6A:9C:BE:70:D8:82:CD:45:26:F7:FA:27:E7
Certificate issuer:       /CN=122452530145B6E9E7000BD6632DFA81AB3C70CB
Certificate serial:       710C860CA9FBBD2D3F276CAE15CFE1C2D42D811F
Authority key identifier: 12:24:52:53:01:45:B6:E9:E7:00:0B:D6:63:2D:FA:81:AB:3C:70:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/3230302e3139342e3138342e302f32322d3234203d3e203136393231.roa
Signing time:             Mon 18 Mar 2024 12:15:00 +0000
ROA not before:           Mon 18 Mar 2024 12:10:00 +0000
ROA not after:            Mon 17 Mar 2025 12:15:00 +0000
asID:                     16921
IP address blocks:        200.194.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0c:86:0c:a9:fb:bd:2d:3f:27:6c:ae:15:cf:e1:c2:d4:2d:81:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122452530145B6E9E7000BD6632DFA81AB3C70CB
        Validity
            Not Before: Mar 18 12:10:00 2024 GMT
            Not After : Mar 17 12:15:00 2025 GMT
        Subject: CN=92D6FF71C261D26A9CBE70D882CD4526F7FA27E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:e5:fb:2f:0a:01:d0:3c:89:d2:25:f8:66:
                    e7:c4:0c:b0:81:98:3c:c1:8d:f0:32:90:26:f4:f3:
                    75:c5:a4:42:42:b5:f6:c6:64:28:a6:1c:a5:ae:ae:
                    d0:a3:4b:3c:7c:b4:46:1d:75:d3:5a:b5:8a:2b:69:
                    74:47:48:e8:04:ab:3e:b9:7e:05:22:1c:d6:60:42:
                    6d:43:55:89:1b:87:80:4b:ac:ba:50:22:bd:a1:5d:
                    2e:be:12:38:6e:86:9e:0d:30:cd:a3:3e:a2:d3:62:
                    cd:c1:86:d9:8f:f1:86:27:09:2b:c5:33:06:96:ed:
                    34:02:d2:65:e5:3b:99:91:a3:9b:e4:3c:9a:0b:50:
                    f2:01:2f:ba:87:e6:80:9c:62:75:75:19:fa:b2:b6:
                    d7:f2:71:24:4b:cc:ed:83:fe:28:f2:3f:d7:8a:20:
                    3c:18:d1:a9:7b:8a:80:55:8a:e7:3a:97:55:f6:a8:
                    fb:f1:f1:77:d2:d8:98:1e:5f:b1:df:85:1d:27:b3:
                    b1:c4:dd:bc:cb:40:5d:0c:d5:c4:b8:0a:8f:16:99:
                    d5:fa:52:e4:56:5f:e0:0a:ac:3f:6e:32:56:2a:7b:
                    b6:91:db:39:6e:1d:43:cf:b8:6e:ca:73:eb:c4:6a:
                    27:a7:08:4e:c4:21:9d:fc:a0:94:9b:19:00:4c:73:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D6:FF:71:C2:61:D2:6A:9C:BE:70:D8:82:CD:45:26:F7:FA:27:E7
            X509v3 Authority Key Identifier:
                keyid:12:24:52:53:01:45:B6:E9:E7:00:0B:D6:63:2D:FA:81:AB:3C:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/122452530145B6E9E7000BD6632DFA81AB3C70CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3399E2409C58AA6BF0608A9ADFFD011EF15937B1393220FC65E24012684ACADE/0/3230302e3139342e3138342e302f32322d3234203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:08:96:f8:12:17:74:75:b0:a8:ca:9c:8e:7c:5a:46:fc:5d:
         f6:fd:04:10:d7:49:5c:73:98:59:63:68:de:4c:00:05:8e:07:
         81:4b:e9:ba:a5:15:5c:4a:89:9d:40:e5:94:7e:09:91:39:ff:
         f5:2b:53:96:2b:8c:18:9f:fe:3f:02:ff:7e:94:60:18:de:0c:
         97:5f:3c:a2:64:d6:80:b2:90:4e:8f:d5:6d:d9:89:9c:07:e2:
         9d:c3:2e:d0:a2:56:d3:94:f6:85:11:58:cb:9b:c8:d9:c7:ba:
         cc:c7:79:5f:da:95:25:06:ca:13:e2:65:13:22:76:2a:7d:98:
         ba:f2:56:26:cd:b4:38:5a:26:5e:8a:6f:d6:20:70:38:d1:16:
         00:10:06:da:59:37:8f:d9:b5:82:38:a4:7b:d5:52:31:2c:91:
         25:47:9e:27:41:6b:2c:5a:33:c8:91:d0:c9:75:ed:92:97:68:
         98:e6:29:c7:26:ad:0d:8c:74:98:60:83:51:90:62:73:1b:f7:
         49:36:11:8e:3b:27:6e:b5:cb:59:6a:b9:3a:6d:44:02:60:a2:
         c4:17:d8:5e:11:33:b2:12:df:10:0a:c8:24:44:86:2b:76:a3:
         fc:d5:1f:38:47:9b:69:d0:9e:1d:7a:ba:97:25:57:b0:ee:8e:
         35:a1:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 00:32:35 2024 by rpki-client on console-fra.rpki-client.org