Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130362e302f32342d3234203d3e203237373636.roa
File:                     3230302e31342e3130362e302f32342d3234203d3e203237373636.roa (raw, json)
Hash identifier:          vjgF1vwZmgJW5RQYKMCbFUeY6fikykemZRI6wMjb0og=
Subject key identifier:   A4:69:EE:0E:11:62:72:70:EF:A9:C4:DB:55:C5:66:68:E9:00:73:16
Certificate issuer:       /CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
Certificate serial:       3C5A28A7B19BD72FB1C3628F82705CCC958381CC
Authority key identifier: A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130362e302f32342d3234203d3e203237373636.roa
Signing time:             Tue 05 Mar 2024 18:23:38 +0000
ROA not before:           Tue 05 Mar 2024 18:18:38 +0000
ROA not after:            Tue 04 Mar 2025 18:23:38 +0000
asID:                     27766
IP address blocks:        200.14.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5a:28:a7:b1:9b:d7:2f:b1:c3:62:8f:82:70:5c:cc:95:83:81:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
        Validity
            Not Before: Mar  5 18:18:38 2024 GMT
            Not After : Mar  4 18:23:38 2025 GMT
        Subject: CN=A469EE0E11627270EFA9C4DB55C56668E9007316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:db:a2:5e:16:b1:6e:93:05:82:88:8a:c4:
                    66:ad:fb:c0:32:82:ee:f4:2d:f7:97:40:af:fd:91:
                    ff:b7:ac:61:0a:90:e8:53:33:52:19:cd:55:6d:2e:
                    14:48:08:7f:ca:ca:b1:15:00:b3:52:93:9a:40:09:
                    4e:f1:ce:c0:40:d1:bd:57:9f:85:58:0f:25:64:ea:
                    f1:9a:3a:81:1f:80:eb:62:ec:f5:55:13:63:1f:84:
                    11:56:eb:99:cf:af:8d:0d:64:e6:7f:51:e8:51:ec:
                    e0:f5:4e:44:6f:6d:fd:fc:4f:d1:22:0a:6a:15:23:
                    9c:d6:0c:e7:63:84:40:78:81:82:65:69:3a:29:65:
                    d7:3f:bd:15:42:8a:35:21:97:f4:a2:ea:f3:bb:f0:
                    b0:6d:42:f5:64:dd:5d:7f:b1:0b:2c:4f:d7:98:4e:
                    0c:ed:cc:8f:e8:6b:cb:93:eb:c8:87:44:f2:bd:cd:
                    b4:23:b9:ab:e1:39:a9:d9:47:1a:07:8a:8e:60:5b:
                    84:a5:ea:76:c1:53:c1:35:40:d1:b2:a0:13:ed:4a:
                    15:7f:e7:92:a8:40:c7:13:11:05:0a:4c:99:1e:ac:
                    db:67:67:d3:75:9e:c9:13:a6:29:6c:43:57:80:c3:
                    17:a3:c1:be:1d:4f:31:97:73:c4:49:56:30:79:38:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:EE:0E:11:62:72:70:EF:A9:C4:DB:55:C5:66:68:E9:00:73:16
            X509v3 Authority Key Identifier:
                keyid:A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130362e302f32342d3234203d3e203237373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ec:e0:09:e9:0a:75:65:f4:58:a5:07:3b:72:7d:5a:27:0f:72:
         92:26:ff:64:c0:a4:b9:c8:88:c5:5a:b7:aa:b5:8d:5a:c5:b7:
         9c:29:23:1b:e4:6c:fa:e2:06:2d:ae:b0:dc:ab:8b:ec:12:2d:
         6c:7f:bd:3e:fc:5b:96:fd:de:1e:d2:0f:2c:5a:69:a9:8e:83:
         97:9c:a4:96:39:7a:60:87:1d:4e:93:ff:4c:b6:94:5c:fe:6b:
         fc:27:39:b7:08:46:3f:f3:29:9c:e7:26:b2:a1:ca:ff:ce:6d:
         4a:36:9c:c6:43:1d:78:ea:ae:94:be:2e:44:b4:8b:76:8b:e4:
         25:65:e9:34:ad:27:1a:2f:b4:50:dc:a4:56:46:37:f3:66:b7:
         a1:96:81:8b:49:af:42:a6:b6:91:91:21:10:3e:a1:3f:5e:3e:
         34:5e:bd:2f:75:9e:0f:4c:63:ed:f0:a6:ab:86:68:12:6a:bb:
         1e:c3:ff:db:6b:89:a6:f5:89:34:05:43:d6:81:06:ea:93:e3:
         f6:3b:ea:8a:b3:97:5d:6d:b7:ad:45:42:4a:27:ef:2e:08:6e:
         81:52:52:05:1a:72:70:ce:d1:ae:c4:42:dc:a2:2f:2d:2f:87:
         bf:69:04:68:d1:39:49:f6:7d:bf:a2:9a:60:61:a7:12:bb:2e:
         66:1c:ca:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:18 2024 by rpki-client on console-fra.rpki-client.org