Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9d10033370000642513293d3f74ec689143c2057.roa
File:                     9d10033370000642513293d3f74ec689143c2057.roa (raw, json)
Hash identifier:          JgVRVnUDkn9E3C7vTFIdx9TrbXviTekiamSVlSJnS9k=
Subject key identifier:   B2:35:F9:BF:5F:B6:71:E2:7B:88:A1:B0:F1:B3:81:AD:F2:F2:DA:69
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2A933E
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9d10033370000642513293d3f74ec689143c2057.roa
Signing time:             Thu 15 Feb 2024 20:41:30 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     265689
IP address blocks:        200.123.59.0/24 maxlen: 24
                          200.123.60.0/23 maxlen: 24
                          200.50.162.0/23 maxlen: 24
                          200.50.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Apr 2024 13:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2790206 (0x2a933e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=9d10033370000642513293d3f74ec689143c2057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:9e:8a:2c:2e:7b:b0:4e:8e:2b:e7:3d:76:
                    62:9e:72:ef:c4:8d:cf:16:f6:d1:a1:99:67:0f:3b:
                    57:b9:b2:c3:bf:75:49:ac:08:98:6b:c0:4f:20:fe:
                    43:a8:80:47:f9:39:ce:df:9d:38:a3:37:a0:ca:0e:
                    1d:33:33:dd:b7:92:0e:03:35:c0:b0:58:fb:5e:87:
                    c2:36:d8:1c:6d:7c:c1:2d:5c:07:91:dc:d0:4c:a4:
                    65:52:9b:a9:77:d3:a5:5f:7f:69:00:2c:ad:0e:04:
                    de:17:90:47:01:be:02:3b:05:4f:49:59:82:2b:37:
                    a7:97:06:89:c8:a3:5f:6b:1c:03:7f:65:c3:a1:27:
                    46:8e:b8:9f:ca:f0:3e:3a:bd:96:a2:8a:e9:1b:2a:
                    65:75:23:05:ad:c9:98:24:17:2b:84:60:5e:74:fe:
                    7f:b1:2e:4c:3d:fe:94:2c:c3:ef:e3:d8:41:68:a5:
                    f5:7d:de:dd:80:45:70:f8:16:9a:e4:d8:1d:90:c6:
                    2b:e7:1b:31:5d:08:c3:2b:c3:37:0c:66:1f:ce:20:
                    04:8d:9e:51:ec:9e:ce:92:fb:67:af:41:6e:a4:fb:
                    d2:a4:bf:c9:73:a8:01:82:bb:ef:08:01:3a:77:ec:
                    7f:c7:a1:8d:d1:0f:e0:ea:60:74:b7:7e:83:56:f8:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:35:F9:BF:5F:B6:71:E2:7B:88:A1:B0:F1:B3:81:AD:F2:F2:DA:69
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9d10033370000642513293d3f74ec689143c2057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.162.0/23
                  200.50.165.0/24
                  200.123.59.0-200.123.61.255

    Signature Algorithm: sha256WithRSAEncryption
         9d:44:9e:44:1f:4f:b4:0e:17:15:39:18:ff:f9:a6:64:0c:44:
         c0:f5:16:03:ee:eb:68:e1:b9:4c:19:1c:e4:ff:62:e8:9f:c8:
         d8:05:ba:88:53:10:a5:31:68:c2:5b:24:30:a9:fd:3c:7a:17:
         be:af:5d:67:f6:3f:87:0a:83:9e:04:8b:f6:ba:6b:0f:72:d2:
         25:3a:99:97:eb:b8:15:a2:66:f5:e6:4f:3d:dd:81:20:58:83:
         8d:67:5f:91:a9:f0:0f:c3:f7:9b:f9:79:9f:ea:3b:6f:cd:a8:
         1b:16:57:5f:f9:e6:2a:22:7c:f0:24:15:f4:16:79:56:cc:19:
         69:c2:d1:66:78:db:e9:22:17:71:59:75:8c:30:17:08:30:be:
         8d:b1:fe:b2:b3:94:88:00:dd:22:59:66:e2:91:d7:03:35:c9:
         36:6a:86:fd:e8:14:76:8f:52:0a:92:c8:11:79:2d:1b:01:24:
         fd:7c:8d:ca:ce:b8:ff:ad:e8:ab:a8:95:e3:c3:c1:b0:52:7e:
         e2:02:9d:cd:33:a1:ca:c9:18:d4:1b:4b:af:f4:05:98:01:50:
         4e:c2:17:dd:2f:ac:69:a7:6e:31:7b:41:96:c5:e7:4d:42:0a:
         71:ad:c8:83:39:34:54:e7:2e:fb:bb:dc:fa:80:eb:ef:f3:49:
         9a:fa:4d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 14:12:08 2024 by rpki-client on console-fra.rpki-client.org