Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135382e302f32342d3234203d3e203532333939.roa
File:                     3230302e372e3135382e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          GRcG68Cws/IWFzv0CaZFOWTsrH+SxxIdbEF0RSpZO84=
Subject key identifier:   47:72:3C:77:B1:31:D1:82:AB:79:83:AC:4E:23:10:50:5E:09:E8:4D
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       1237626510948FB7D1C3C1DECFF7BCDA184C341E
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135382e302f32342d3234203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 17:43:03 +0000
ROA not before:           Tue 05 Mar 2024 17:38:03 +0000
ROA not after:            Tue 04 Mar 2025 17:43:03 +0000
asID:                     52399
IP address blocks:        200.7.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:37:62:65:10:94:8f:b7:d1:c3:c1:de:cf:f7:bc:da:18:4c:34:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Mar  5 17:38:03 2024 GMT
            Not After : Mar  4 17:43:03 2025 GMT
        Subject: CN=47723C77B131D182AB7983AC4E2310505E09E84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:97:ac:95:0c:4c:2d:71:5d:50:13:b7:43:
                    8c:09:04:d5:f3:fd:7a:1f:02:5b:48:91:ad:b7:cc:
                    e0:a8:2b:60:e9:e6:01:b3:7c:7c:32:d2:82:41:53:
                    0e:96:77:69:3e:4a:e3:60:bf:6b:f9:d7:d9:7c:b1:
                    40:c1:4e:49:36:04:70:bd:a7:52:a8:81:98:3e:5b:
                    bb:f3:e1:22:c2:07:60:16:9f:e7:fa:83:ca:66:d3:
                    a8:75:14:6a:b6:11:95:3f:90:34:10:65:5c:fb:f9:
                    aa:22:11:12:d3:86:5e:dc:d1:20:26:62:c9:f6:ea:
                    65:b3:f8:c1:d6:00:74:f8:06:dc:25:6f:21:51:8e:
                    0d:70:61:f2:68:ae:cc:f8:16:1b:83:0f:6a:ff:36:
                    a5:c7:0d:5b:1a:aa:fc:98:f6:01:70:75:36:67:b3:
                    5c:be:53:d7:b7:ed:c0:af:61:86:ad:5b:af:44:ba:
                    dd:52:34:83:d4:82:2d:a5:01:b8:37:73:b2:1b:4c:
                    6f:92:66:24:66:64:8d:f0:31:e3:4d:b1:82:89:43:
                    96:51:6e:6b:18:60:fb:0d:0d:0d:dc:4b:99:6a:e3:
                    9f:47:81:fa:98:1c:e8:55:eb:61:25:aa:37:ed:ea:
                    fb:77:19:e8:79:54:36:89:75:62:df:30:29:1f:cf:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:72:3C:77:B1:31:D1:82:AB:79:83:AC:4E:23:10:50:5E:09:E8:4D
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135382e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:6f:63:b1:44:be:41:34:81:ed:f2:a9:8e:07:83:a0:82:86:
         0e:c2:56:8e:f9:7c:5b:b3:95:ed:d2:81:d4:da:3e:db:7e:18:
         c9:ab:8e:ed:5b:1b:0b:fe:f0:dc:6a:2f:dd:6a:04:a2:c5:b7:
         98:0a:49:f9:63:c1:7e:b4:da:f0:b0:88:6b:80:93:c4:3f:1c:
         e4:eb:18:cd:15:38:9f:74:d2:ee:4f:75:f2:4a:f8:d9:bd:de:
         63:59:70:cd:84:01:5c:82:72:36:eb:dd:7c:6b:47:99:65:8c:
         b7:5c:24:4f:f8:d2:90:46:a5:9d:a4:43:5d:20:43:b1:be:93:
         1f:e5:9f:63:a4:be:4e:90:df:d4:22:0c:03:03:c2:c5:76:65:
         2e:2d:ec:77:15:17:fb:9b:d6:f4:2f:2a:a7:1a:d2:3e:e1:9d:
         5d:77:42:13:80:10:91:33:be:ad:b5:30:36:c2:46:a9:90:3c:
         59:d3:3a:28:b1:85:de:77:c9:9e:aa:34:28:93:0f:d2:b2:13:
         f0:67:43:0a:61:bc:3a:51:d0:b5:6b:53:7d:b2:d8:85:f6:b4:
         fd:54:f0:78:47:57:17:ae:a1:41:c5:d7:47:55:8e:28:6e:db:
         37:ee:94:ff:ee:14:1e:2e:b3:23:97:9e:74:7f:80:f8:b0:7b:
         ce:a7:f2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:05 2024 by rpki-client on console-ams.rpki-client.org