Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3234203d3e203230333035.roa
File:                     3230302e36312e33382e302f32342d3234203d3e203230333035.roa (raw, json)
Hash identifier:          71/9Tsbe9CuwiQ6GotUQHgjdGUQ0gfFK4l4KWz4rwyE=
Subject key identifier:   04:43:6A:04:07:CB:6E:72:83:58:2E:B2:5B:FB:D5:DF:D2:19:84:7B
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       58E46B1205571F0B9EF13D1BC6D62DCDAB58919F
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3234203d3e203230333035.roa
Signing time:             Thu 11 Jul 2024 19:05:00 +0000
ROA not before:           Thu 11 Jul 2024 19:00:00 +0000
ROA not after:            Thu 10 Jul 2025 19:05:00 +0000
asID:                     20305
IP address blocks:        200.61.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e4:6b:12:05:57:1f:0b:9e:f1:3d:1b:c6:d6:2d:cd:ab:58:91:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Jul 11 19:00:00 2024 GMT
            Not After : Jul 10 19:05:00 2025 GMT
        Subject: CN=04436A0407CB6E7283582EB25BFBD5DFD219847B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:1f:ec:28:a7:7c:7d:ef:a2:13:07:66:c8:
                    bf:8a:65:c3:fd:02:74:be:84:79:12:76:6a:80:cd:
                    41:c8:9d:35:8f:0d:b0:35:3b:cc:ed:09:b2:70:60:
                    83:72:e1:51:b2:fc:8d:7e:e5:af:a1:8e:b1:13:84:
                    5e:e1:0e:85:d5:ed:a2:2b:dc:03:ed:71:b1:07:11:
                    c8:1a:cd:7d:49:bc:b4:00:e1:44:2d:fc:bd:d3:c1:
                    82:81:0a:78:83:60:5f:59:6d:22:20:a5:5a:7f:73:
                    55:c0:47:40:22:1d:bd:95:3b:74:73:ef:3c:93:b7:
                    ee:67:d8:f0:d2:a7:1c:ca:80:a9:8f:cd:80:fa:b7:
                    12:27:5d:a7:b4:ce:76:f6:72:3b:8f:2a:df:42:f9:
                    f7:47:fe:4f:5d:14:28:cc:97:5b:21:67:f8:39:f3:
                    a5:5f:5a:85:23:39:d7:15:15:f6:90:e6:02:a5:dd:
                    48:92:61:bf:85:60:2c:af:c8:20:5e:fd:3e:81:34:
                    f3:78:77:0b:75:af:1d:ae:9c:b6:95:97:f7:71:6e:
                    32:19:61:ac:bc:d9:8c:75:7b:e9:54:98:96:c2:60:
                    ca:98:11:6a:da:94:9e:4b:73:b8:07:f3:b9:27:ab:
                    c6:4d:dd:7a:f9:21:4c:5f:3b:24:9f:d3:c2:8b:36:
                    9f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:43:6A:04:07:CB:6E:72:83:58:2E:B2:5B:FB:D5:DF:D2:19:84:7B
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3234203d3e203230333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:b8:5d:69:58:8f:11:c6:ef:c2:20:26:de:9d:b2:69:20:2c:
         38:fe:a5:5c:31:54:29:ce:ee:6a:0b:49:83:27:86:b4:9a:d4:
         91:ec:3d:9f:45:1e:99:57:2f:4c:ef:1a:ce:c5:ce:2e:56:f5:
         cd:e6:0f:d9:51:8a:fc:1d:28:ba:e2:c6:83:85:49:5c:41:be:
         e9:7f:6f:9f:4e:5b:2c:36:79:3f:92:9d:9f:0a:fc:25:4d:85:
         3a:88:1b:3e:00:1a:4c:1f:b8:e4:25:c6:ca:8f:c1:26:18:d6:
         58:9e:38:b6:91:20:bb:a6:b2:61:13:5d:26:be:3d:90:f6:f3:
         f4:1d:bd:bd:f0:a3:ce:d8:92:0a:7e:bf:01:7f:bd:c0:b4:9a:
         8c:57:ed:7c:1c:4e:e8:fa:aa:03:b3:8b:10:ce:cc:0c:38:e5:
         02:fd:2c:fb:0e:9b:82:93:31:8b:db:ae:b3:7a:c2:3a:e7:5a:
         ca:44:58:7b:95:86:b3:9d:07:33:d6:87:e2:d8:de:73:80:d5:
         e3:7f:99:8e:d0:db:75:9f:65:be:8c:01:78:1d:15:ae:a7:48:
         4a:a1:a2:f8:45:36:1c:6b:60:a8:f4:dc:1c:88:4d:44:5c:bd:
         d5:5f:9d:3c:5e:d0:6c:be:b7:b7:46:7a:98:1d:cd:73:71:33:
         c1:7d:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org