Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233352e302f32342d3234203d3e203233333833.roa
File:                     3230302e3130362e3233352e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          QVXL63I1Lf40wqzeGgjBjgQi9PhwYDrElqjc+0iO2QM=
Subject key identifier:   3F:B2:49:3B:C7:7D:24:63:E2:27:3B:18:C1:64:44:B7:57:97:14:84
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       3E4898472952EAE25ABA217CB89DAA9962D4FB08
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233352e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:10:39 +0000
ROA not before:           Tue 05 Mar 2024 18:05:39 +0000
ROA not after:            Tue 04 Mar 2025 18:10:39 +0000
asID:                     23383
IP address blocks:        200.106.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:48:98:47:29:52:ea:e2:5a:ba:21:7c:b8:9d:aa:99:62:d4:fb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:39 2024 GMT
            Not After : Mar  4 18:10:39 2025 GMT
        Subject: CN=3FB2493BC77D2463E2273B18C16444B757971484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:d0:7f:c6:66:9c:eb:16:e9:08:db:5f:c6:
                    05:00:32:b3:ec:e9:5e:c3:09:cd:f9:30:97:33:79:
                    a1:45:0c:ba:2a:17:45:df:aa:7b:92:a8:44:6e:9c:
                    5a:b3:7e:88:3d:64:e2:b6:03:63:be:6b:cf:2c:40:
                    d7:2d:84:b9:f9:9e:c0:57:1f:86:ae:36:b0:94:5f:
                    85:c7:4f:c7:7f:3d:69:4c:9d:6c:c3:d3:3f:a8:4b:
                    13:3b:8c:76:1a:5d:95:84:3a:67:d5:aa:ad:15:08:
                    11:82:c7:62:de:4c:b8:aa:79:a0:5e:8b:a7:76:5b:
                    9c:5c:54:1f:aa:c3:96:80:f2:c7:be:bc:bf:8a:9b:
                    ce:46:fd:77:ac:4c:ba:55:94:33:bb:b3:68:91:3e:
                    3c:fd:67:ed:35:65:69:2d:f8:2d:a1:66:5f:59:f8:
                    66:aa:a3:96:8e:76:ef:e5:ee:13:35:25:5f:a8:d3:
                    b0:9e:44:2b:62:d2:b6:61:94:b2:38:3c:87:9c:bc:
                    47:4d:08:03:da:ec:06:e7:f3:c6:40:9c:e5:54:86:
                    95:68:e5:3a:65:5d:51:ad:a9:8f:62:63:07:9a:d3:
                    7a:a0:3a:17:4e:1a:27:5d:75:ca:05:31:6e:52:d9:
                    49:6d:9c:c7:1e:f5:4f:51:6b:6c:9b:eb:fc:ec:fe:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B2:49:3B:C7:7D:24:63:E2:27:3B:18:C1:64:44:B7:57:97:14:84
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233352e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:32:6c:54:05:c9:d6:8f:aa:39:b3:ea:8b:20:fd:40:01:ab:
         23:4d:b7:61:2c:d1:ab:24:dc:98:d0:12:8a:c4:f3:e6:64:f6:
         26:e7:52:1d:79:58:ef:51:f7:63:fe:5a:b4:53:c6:24:24:5d:
         ec:74:31:86:b4:b5:6b:26:21:ff:82:4e:9e:bb:b7:af:2e:3a:
         a6:6a:8d:ae:32:7a:d8:b8:98:12:85:df:c0:65:70:d4:5b:c6:
         14:24:86:6b:b5:23:89:a5:cc:c7:73:d0:51:62:8a:f9:cd:99:
         89:99:76:36:cc:54:3f:8b:59:99:23:68:02:d5:1e:54:eb:d5:
         17:65:8d:c8:f7:d3:b4:42:8d:28:99:fa:5a:0d:80:fa:98:6d:
         25:09:71:f1:91:9a:19:9a:70:a7:fd:41:ad:d2:d1:39:60:91:
         ec:85:7d:b2:94:3e:7e:c0:de:d7:f4:46:ca:3a:6f:ec:d1:05:
         5d:bf:8b:c3:db:fc:90:08:ef:0f:71:14:4e:cd:ad:fe:ad:d7:
         7b:67:d7:56:3f:d3:3b:eb:94:c3:22:7f:03:0a:1b:62:2b:e3:
         cf:c7:7f:2b:6a:82:f9:de:05:5a:a5:b8:2d:c9:64:70:77:c4:
         5c:14:8e:76:7f:d4:3d:eb:f7:82:65:c6:94:82:40:22:b9:7d:
         37:44:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org