Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233362e302f32342d3234203d3e203233333833.roa
File:                     3230302e3130362e3233362e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          Gpc7uZjD4cktAIat4VOVGbhRkHB0PFFyqM4BXW0o9TI=
Subject key identifier:   D1:F8:47:32:70:AF:30:F3:FB:86:36:7F:8A:0C:32:B0:A5:5B:35:54
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       7D3B6F33808CC93F2974F2426F859AB82B95B90A
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233362e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:10:29 +0000
ROA not before:           Tue 05 Mar 2024 18:05:29 +0000
ROA not after:            Tue 04 Mar 2025 18:10:29 +0000
asID:                     23383
IP address blocks:        200.106.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3b:6f:33:80:8c:c9:3f:29:74:f2:42:6f:85:9a:b8:2b:95:b9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:29 2024 GMT
            Not After : Mar  4 18:10:29 2025 GMT
        Subject: CN=D1F8473270AF30F3FB86367F8A0C32B0A55B3554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:94:cf:0c:42:ee:25:31:3b:fd:13:52:e7:
                    5f:e3:fe:80:bb:a4:6f:5b:15:80:61:dc:5b:f8:f4:
                    4c:f1:60:24:6f:8c:1e:1e:41:9c:31:9e:8b:88:d0:
                    d4:9b:b4:e9:96:5d:c5:1f:5d:dc:b4:b8:4b:12:56:
                    e1:a2:ad:c0:df:ad:b4:0f:da:75:b7:9b:a1:f1:78:
                    3d:7d:70:b2:39:90:25:38:5d:11:7c:3b:ba:6b:0c:
                    c1:df:53:81:a3:12:d5:d0:b6:fc:8c:3e:7c:01:8e:
                    db:2f:68:76:2d:3b:03:e6:7b:12:7a:d6:bc:7e:d8:
                    55:50:5f:9f:51:43:d0:f9:66:95:80:a5:a2:f6:ac:
                    57:35:91:20:b2:9f:07:6c:e3:a5:01:70:d9:5f:1e:
                    30:4b:99:3b:0c:86:b5:fe:40:e0:35:86:5c:16:0e:
                    81:cb:43:18:44:6f:e3:60:cb:37:47:8c:2d:af:e7:
                    b2:1f:5b:23:cb:74:6a:8e:33:37:90:5f:8c:78:36:
                    d8:5d:93:5f:57:2d:c3:08:1e:51:ee:2c:57:fb:db:
                    df:65:76:95:0f:00:6e:0d:a0:0b:9d:0f:a4:57:86:
                    b0:25:5c:1a:83:3f:b8:03:79:63:f0:0b:f1:9f:74:
                    ad:ce:90:a6:e7:73:0c:c5:c9:07:09:b1:f8:bb:c9:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F8:47:32:70:AF:30:F3:FB:86:36:7F:8A:0C:32:B0:A5:5B:35:54
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233362e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:11:f0:8b:e6:1c:44:0a:c7:bc:8f:71:7e:2a:80:5d:f1:
         30:b0:75:c0:a8:6f:d1:0f:af:77:00:ee:bf:aa:b8:b7:00:29:
         a7:15:d0:c5:93:43:52:fd:48:23:04:4d:73:04:5e:c3:bd:9e:
         29:98:c3:9a:04:e4:4e:3e:89:e1:6c:d2:08:af:49:2b:37:40:
         28:25:ff:24:1c:48:cc:85:ab:8e:7b:c3:19:b4:0d:a7:90:39:
         7b:c9:f5:a5:52:bc:c6:a1:22:50:4e:c0:de:ae:a4:63:42:ee:
         0e:c9:03:b6:e5:15:b1:5b:69:1b:64:aa:a9:d6:ff:d3:58:0f:
         bb:cd:8b:4f:67:4c:cc:dc:8b:e6:d8:c2:2a:3e:81:27:44:9c:
         67:6c:50:50:e9:8a:aa:dc:ba:3d:84:8c:77:16:60:11:12:c4:
         87:0a:e2:85:ea:16:6a:68:28:f3:e7:78:11:d8:4b:e7:7f:83:
         9f:97:ba:39:92:09:b0:00:e2:74:dc:87:da:32:9f:ba:6c:af:
         52:41:4a:89:da:5b:2c:d6:33:fa:94:c1:f3:d6:ca:1e:43:c6:
         fd:73:d3:4c:79:41:43:53:1f:02:59:40:54:e4:10:47:56:ea:
         66:9b:82:eb:f4:ef:0d:fb:ca:26:a3:b8:f5:fb:c3:f2:07:81:
         b6:8e:c8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:22:40 2024 by rpki-client on console-fra.rpki-client.org