Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3234342e302f32342d3234203d3e203237373534.roa
File:                     3230302e38302e3234342e302f32342d3234203d3e203237373534.roa (raw, json)
Hash identifier:          cNkboSn8EfV9XT6zOKsDuwHWJ6V5QFJXbu9gH/Z0iWA=
Subject key identifier:   81:6D:EC:B9:0A:98:4C:77:3C:64:39:AD:13:91:8E:CD:9B:A4:8F:0E
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       134DA5C594DE78B31817F5EA441F9130CAA2F880
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3234342e302f32342d3234203d3e203237373534.roa
Signing time:             Tue 05 Mar 2024 17:49:52 +0000
ROA not before:           Tue 05 Mar 2024 17:44:52 +0000
ROA not after:            Tue 04 Mar 2025 17:49:52 +0000
asID:                     27754
IP address blocks:        200.80.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4d:a5:c5:94:de:78:b3:18:17:f5:ea:44:1f:91:30:ca:a2:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Mar  5 17:44:52 2024 GMT
            Not After : Mar  4 17:49:52 2025 GMT
        Subject: CN=816DECB90A984C773C6439AD13918ECD9BA48F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:6f:f8:6b:94:f2:6e:96:42:43:9d:21:9f:
                    fd:12:8f:68:ef:37:07:65:7f:98:c9:81:d2:42:fb:
                    0f:ed:4d:f9:97:76:d9:29:8d:ed:7b:06:31:22:82:
                    4f:14:4f:c1:37:40:3d:05:34:c5:96:9c:31:a7:3e:
                    62:0a:cd:e9:6a:9f:da:c3:ac:a4:c7:b0:1b:2d:fc:
                    a0:6a:ea:f7:dd:9e:94:19:26:35:23:aa:33:ef:96:
                    2c:2e:47:ff:3c:07:7f:86:63:fe:71:b0:b4:97:39:
                    a1:4d:77:fb:de:3b:0f:03:e6:81:96:e0:f2:c6:4a:
                    90:ad:df:5c:18:54:65:51:b9:c6:50:b5:fb:db:a5:
                    a4:d4:af:b8:eb:6a:bb:ad:f5:1c:a7:b7:ff:1a:14:
                    07:a8:b4:4c:62:55:0f:fc:2e:72:b5:fa:3f:39:29:
                    82:1e:cc:c1:70:17:12:fd:d1:86:bf:0d:fa:80:59:
                    df:b3:46:54:be:8d:85:43:1b:9f:4e:11:90:51:b3:
                    30:6b:3d:83:2c:11:96:b6:8c:22:3a:8c:9d:0a:bb:
                    02:f1:1b:10:91:a6:ab:cd:7f:1b:c0:63:50:76:b2:
                    49:46:43:33:c9:f8:37:63:ae:3b:e4:61:a1:62:7b:
                    06:67:ec:c0:cd:7f:9d:bf:b0:21:33:be:d8:5d:2f:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6D:EC:B9:0A:98:4C:77:3C:64:39:AD:13:91:8E:CD:9B:A4:8F:0E
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3234342e302f32342d3234203d3e203237373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:24:2a:e8:97:8d:33:3c:b3:9c:82:d2:a1:b3:1f:a1:82:01:
         d0:8a:ec:35:ad:11:f4:82:6e:43:5a:03:0e:8a:e3:5e:bc:e1:
         01:c8:3a:63:b2:ec:a7:c4:39:9c:7d:e0:0e:71:73:de:a4:2c:
         9f:34:66:0c:15:a2:9c:f5:e5:1f:4d:78:cb:1e:31:42:22:e0:
         e0:3f:8d:0e:14:36:c0:ac:95:16:2e:0b:c4:ef:f1:34:07:a2:
         4c:aa:cc:f2:4d:ca:38:f3:75:b5:7a:d4:0c:42:09:bd:0c:04:
         11:bc:c6:aa:cb:b0:a3:14:d6:c9:d7:d5:34:3d:5e:35:14:8b:
         5f:36:39:03:fc:01:ed:84:87:a1:12:c4:56:a0:46:df:8b:ae:
         44:d9:7d:e4:69:c7:2c:42:5c:06:3f:18:bc:f7:04:2a:d6:b8:
         1f:af:64:42:58:3e:8a:80:53:d8:d8:0a:15:12:cc:a8:2d:44:
         0a:dc:55:c8:e4:45:b2:a4:43:bd:50:65:f0:f5:3f:ee:97:42:
         4b:04:f9:a1:e3:71:d1:77:83:51:64:19:21:50:75:48:66:68:
         7d:ab:de:3d:0d:24:37:b7:4f:d6:31:bb:6e:97:6f:0e:7e:75:
         dd:b5:cf:1d:7c:e6:70:af:24:31:f0:57:b7:22:d3:d3:0b:dd:
         8e:81:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org