Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3137352e302f32342d3234203d3e203233333833.roa
File:                     3230302e31332e3137352e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          UPWPoUUIIKiYU1oU+q/OKh0fBG2L7brp133M6ZgO3JM=
Subject key identifier:   5D:54:30:88:B3:29:BA:AD:E0:E7:B4:91:96:E2:F6:CE:15:BD:FE:C0
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       37C70228F20A96E78230EACE9663E8057926C46E
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3137352e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:10:38 +0000
ROA not before:           Tue 05 Mar 2024 18:05:38 +0000
ROA not after:            Tue 04 Mar 2025 18:10:38 +0000
asID:                     23383
IP address blocks:        200.13.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c7:02:28:f2:0a:96:e7:82:30:ea:ce:96:63:e8:05:79:26:c4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:38 2024 GMT
            Not After : Mar  4 18:10:38 2025 GMT
        Subject: CN=5D543088B329BAADE0E7B49196E2F6CE15BDFEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:82:7c:5d:49:33:34:51:76:e8:d4:f1:6a:
                    7e:f5:ef:b8:b8:74:49:0c:43:4e:c1:80:c7:d0:56:
                    95:81:8c:95:d4:ab:08:85:22:f3:72:87:42:3f:f7:
                    38:af:2b:93:ac:6f:4c:80:d2:bc:13:39:72:f7:01:
                    cf:7f:be:86:c4:9e:80:35:c9:4a:91:b5:a1:25:b2:
                    29:a7:8c:3d:bd:a5:3c:80:05:bf:e0:01:fa:d4:12:
                    32:d8:fa:10:76:cf:94:6f:90:9b:4b:2e:bf:a6:79:
                    80:4e:58:87:81:dc:51:db:36:5f:82:18:4c:b5:36:
                    48:51:9a:6d:0d:57:92:77:4e:d3:0f:27:55:9e:92:
                    bc:9e:9f:99:94:55:be:a9:ea:ec:5f:ad:7a:71:bb:
                    67:07:53:a0:95:43:22:e7:f8:21:fe:d6:3e:ee:37:
                    4c:35:69:33:3a:63:45:c5:fd:cd:11:9e:e6:2e:4a:
                    c0:16:d3:96:e1:d5:26:82:dc:0c:3c:2f:4e:9f:a1:
                    d1:47:77:cf:ff:d1:95:d3:9c:04:0f:4c:9e:4d:f6:
                    f7:8b:18:0c:b7:b3:35:f2:b7:96:fb:de:79:57:a4:
                    86:72:b0:48:af:05:d9:71:da:27:0a:7a:11:ed:82:
                    56:24:94:62:5d:92:86:93:09:bd:6d:5b:bd:06:93:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:54:30:88:B3:29:BA:AD:E0:E7:B4:91:96:E2:F6:CE:15:BD:FE:C0
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3137352e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:46:31:d6:bd:81:28:8b:af:42:21:09:5e:5c:b8:b3:9a:
         9e:e9:48:d3:2d:fe:0a:08:76:06:fa:6a:55:86:b9:02:cf:2d:
         d6:5d:54:87:c5:81:7b:ef:0c:9e:8e:ec:ee:ae:05:96:b9:6a:
         da:16:36:80:23:a5:ab:06:44:96:f9:44:b5:5f:c3:83:54:86:
         8e:de:4e:3c:28:53:43:61:8e:1b:9c:24:48:3b:48:84:4f:7f:
         d9:4a:58:9a:6f:d3:b6:94:a6:1b:b6:9f:35:78:27:9d:02:05:
         8a:90:43:86:cb:11:b9:52:3a:b5:7b:04:b5:12:87:1a:ca:f3:
         a9:f6:1e:c0:d8:c7:c8:b3:46:85:bf:29:e1:ad:ae:8d:31:8d:
         d7:04:ef:b5:7e:38:32:53:3c:68:b1:66:24:a6:dc:04:45:05:
         76:3b:3f:e2:5c:0d:c0:8a:9f:14:63:4f:e2:9e:ea:05:1e:99:
         af:3d:75:22:7e:80:56:29:d4:a2:33:b6:f5:d5:9f:f4:f6:a4:
         8e:33:a8:80:5c:ff:1c:af:a6:d9:5c:d7:67:9a:75:cf:5c:2d:
         19:18:23:4e:e0:3f:0e:3a:af:25:04:35:db:fa:c9:d9:33:ae:
         66:f4:0a:d7:21:56:b9:7e:6d:44:f3:9c:a7:3b:5c:ac:75:7a:
         be:f6:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org