Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233322e302f32332d3234203d3e203237373733.roa
File:                     3230302e3130362e3233322e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          RBuTlCKKFyvpfrjX+NWsZhOBaZLp5EYz7haXQilKo20=
Subject key identifier:   1B:3C:6F:04:EA:CF:BE:C2:8A:C6:57:A1:7C:73:7E:03:E4:16:D2:BE
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       1C1CF8F22C39FAC2E60CE2DCACB54FB5A0D9CB62
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233322e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:43 +0000
ROA not before:           Tue 05 Mar 2024 18:05:43 +0000
ROA not after:            Tue 04 Mar 2025 18:10:43 +0000
asID:                     27773
IP address blocks:        200.106.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1c:f8:f2:2c:39:fa:c2:e6:0c:e2:dc:ac:b5:4f:b5:a0:d9:cb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:43 2024 GMT
            Not After : Mar  4 18:10:43 2025 GMT
        Subject: CN=1B3C6F04EACFBEC28AC657A17C737E03E416D2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:76:28:c9:9d:a0:52:77:d7:43:85:b1:7b:2e:
                    3c:59:62:54:b8:53:1d:59:29:78:1c:7a:fd:ec:31:
                    67:ce:b0:cc:05:98:94:25:6b:33:99:e7:60:c2:27:
                    5a:90:91:7c:24:98:52:89:c6:47:12:01:f2:58:a7:
                    ca:e8:c1:9c:ba:cf:71:41:32:fa:b4:8f:0a:1d:b6:
                    96:7d:19:ab:0d:84:99:0a:0d:d0:37:34:7a:16:d6:
                    42:cf:e4:f7:af:08:a1:50:c3:f1:50:b4:a0:8f:46:
                    fe:56:32:5f:23:9c:48:bb:a1:07:6d:b7:81:a0:91:
                    b5:e0:ce:25:01:c5:d7:58:4d:f7:06:b1:d6:c1:a6:
                    e1:d7:f6:73:f8:ac:af:30:cd:37:62:a0:1d:de:59:
                    55:6f:0b:7c:a9:11:c5:c1:30:b9:7e:75:61:fa:42:
                    78:99:8b:74:63:68:bc:b2:94:99:3a:62:19:20:d2:
                    21:a4:c8:2b:86:51:57:8f:aa:09:02:13:74:15:a0:
                    a0:fc:92:2d:38:98:13:b6:66:a4:54:24:dc:af:31:
                    11:70:20:bb:e2:24:e4:f3:b4:6d:78:e4:bd:c6:b1:
                    c1:8c:82:f1:b4:42:f3:35:f6:05:f5:7d:65:08:4f:
                    46:61:ef:11:b9:25:77:5f:d1:16:53:79:23:c8:5d:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3C:6F:04:EA:CF:BE:C2:8A:C6:57:A1:7C:73:7E:03:E4:16:D2:BE
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233322e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:8e:12:d3:a5:eb:f2:be:ee:71:e2:13:f8:2a:ec:99:62:
         e6:75:d7:b6:86:59:3b:91:20:4f:c9:b5:b7:dc:95:6d:37:c6:
         6d:b3:9d:ff:25:97:d5:46:31:ac:c6:8e:f2:39:35:fc:af:73:
         46:8f:c3:bd:4c:bc:85:b9:3d:60:4a:6d:4a:d3:dc:96:fb:7a:
         6b:a8:e8:a1:35:ad:d9:8b:5a:d7:0a:22:86:22:45:25:9c:f0:
         a8:0d:f5:c7:41:be:b7:f2:cc:0e:f4:74:54:98:82:d8:ed:7a:
         dd:19:1f:9b:fb:63:61:07:62:50:eb:cf:0d:bd:3e:27:18:e8:
         3b:a0:1e:a5:b8:fc:0b:a3:4d:4a:1c:9a:b0:a4:32:cb:40:5f:
         39:f8:21:bf:49:75:f9:4e:57:29:3f:ca:eb:1b:ec:f6:b2:ef:
         b7:89:ae:40:84:6c:29:bf:df:34:57:3f:76:3f:f8:a7:f4:b6:
         ce:e0:65:05:c7:8b:15:bd:3f:e0:51:0e:5e:db:9e:68:26:77:
         ec:b1:89:2d:30:7f:dc:ea:b0:9a:7f:cf:81:53:5a:e0:61:5c:
         37:e9:6d:92:3d:5c:f8:bf:c1:86:07:fc:69:6a:02:57:b3:64:
         8b:b0:ef:7d:0f:35:3c:b7:82:b7:88:e5:a3:5a:c3:05:04:02:
         87:19:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:44:38 2024 by rpki-client on console-fra.rpki-client.org