Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa
File:                     3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa (raw, json)
Hash identifier:          KxpyZW/3aufpMyeS313rzbbJjokCppPjGEBpCmZo0P0=
Subject key identifier:   56:7C:06:86:48:84:C3:BB:F3:74:57:3B:52:4A:96:8A:04:A1:74:54
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       68774181D12782D4B3C26F9D9AEE3888AFC1AD78
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa
Signing time:             Tue 05 Mar 2024 18:07:40 +0000
ROA not before:           Tue 05 Mar 2024 18:02:40 +0000
ROA not after:            Tue 04 Mar 2025 18:07:40 +0000
asID:                     263781
IP address blocks:        200.123.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:77:41:81:d1:27:82:d4:b3:c2:6f:9d:9a:ee:38:88:af:c1:ad:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Mar  5 18:02:40 2024 GMT
            Not After : Mar  4 18:07:40 2025 GMT
        Subject: CN=567C06864884C3BBF374573B524A968A04A17454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:99:97:c5:1f:2f:c5:25:4c:3a:bc:23:37:
                    1f:51:ee:db:6c:e3:81:56:9b:aa:27:98:d7:b5:8e:
                    fd:ec:7d:27:71:cf:33:73:96:68:50:3c:23:e5:e7:
                    27:48:d2:ee:d0:cb:04:40:3f:f3:1a:ed:d2:3f:81:
                    37:f7:11:39:03:0b:a0:3d:44:4d:79:90:01:82:2f:
                    b4:f5:a0:34:72:0f:a7:4e:27:0a:4c:2b:b6:ce:58:
                    dd:cd:69:15:2d:f5:cc:61:3f:3b:f5:d5:fc:58:47:
                    1e:c8:d3:74:74:bc:a7:eb:4d:6a:d3:08:44:08:04:
                    9b:87:28:33:de:5b:71:49:9a:d3:4d:bb:cf:1a:ed:
                    35:b5:03:28:38:ad:4d:37:85:c6:90:d3:c5:ec:30:
                    cd:9b:a4:36:aa:35:9b:a3:b9:f4:3c:26:64:e9:98:
                    56:c1:79:8b:1e:04:7f:a0:64:41:1a:2c:ca:88:fa:
                    b1:f8:68:08:4b:b5:4c:0e:df:5f:ad:1e:ec:36:d3:
                    15:0f:35:94:3b:44:4f:5f:39:2d:7d:aa:94:b8:3c:
                    4f:7a:59:b0:b2:67:14:c3:4e:cc:47:cc:b1:5c:75:
                    4a:1e:fc:5b:03:fd:ca:e5:de:0c:dc:c7:1e:60:69:
                    dd:44:a9:60:c5:3f:07:6c:4a:7f:e4:e4:e9:9c:e8:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7C:06:86:48:84:C3:BB:F3:74:57:3B:52:4A:96:8A:04:A1:74:54
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:cd:95:c3:f0:63:51:60:62:67:b7:db:6b:53:d1:37:8d:20:
         2d:cb:02:05:16:5a:17:39:ab:06:75:1a:27:13:20:2f:2b:71:
         5d:40:0d:96:3e:17:8c:f9:88:9b:02:f9:e7:6f:93:4c:d8:5f:
         62:4c:8d:fd:45:e9:3d:0f:9e:03:96:98:f3:fe:e6:e3:fd:a5:
         e6:ce:73:64:8a:95:e2:8b:18:ce:b4:40:9f:9b:7e:f4:10:d2:
         b7:14:f3:f2:2a:a2:07:7c:77:e8:6d:79:bb:41:0c:c7:fc:d8:
         a6:b0:21:0a:9a:04:0a:99:f3:54:90:94:dd:5b:81:11:57:18:
         6e:38:14:6a:5e:af:4c:7c:3e:aa:67:43:5f:25:d1:d2:d1:e7:
         47:fe:d1:3b:30:b5:a8:42:3e:5f:d1:e8:64:87:08:a0:8b:8f:
         d0:d7:4d:df:ac:df:51:c8:24:79:90:e3:d6:ec:b2:23:59:be:
         95:23:ba:e1:bb:41:78:25:6f:14:2c:3e:de:17:a1:5c:4f:62:
         0c:12:6c:68:6d:c3:de:47:30:c8:ae:ff:18:1f:8c:df:c9:c9:
         65:74:5d:94:ed:93:65:45:d0:27:6e:ef:fc:ef:32:57:6a:4c:
         b5:34:4f:3e:90:02:20:dc:4f:a1:af:86:67:93:47:53:37:ba:
         20:dd:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org