Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138362e302f32342d3234203d3e203237373733.roa
File:                     3230302e31332e3138362e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          yN+XP+HOD8kedblNVX0Xm+UXy3Z3P3sah4ouWs9f2Ps=
Subject key identifier:   9D:6B:70:88:2F:B3:51:36:08:AF:E4:EE:2F:FA:BA:CD:6B:1D:3C:D2
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       5E7B5021F41C71D5888EE3D2C5185EA3F77132D6
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138362e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:35 +0000
ROA not before:           Tue 05 Mar 2024 18:05:35 +0000
ROA not after:            Tue 04 Mar 2025 18:10:35 +0000
asID:                     27773
IP address blocks:        200.13.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7b:50:21:f4:1c:71:d5:88:8e:e3:d2:c5:18:5e:a3:f7:71:32:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:35 2024 GMT
            Not After : Mar  4 18:10:35 2025 GMT
        Subject: CN=9D6B70882FB3513608AFE4EE2FFABACD6B1D3CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:f2:c4:8f:3c:2c:06:04:ed:47:1e:5c:69:
                    3f:2e:be:4d:87:18:a1:fb:13:cd:38:dd:f9:d7:31:
                    11:cc:a0:30:85:ef:b7:d8:ad:da:3d:3f:3d:9d:e5:
                    b7:04:12:77:38:c6:5b:d8:9a:93:3d:02:c1:98:0e:
                    9a:7b:e3:2f:b7:4d:8f:b3:1b:2d:7d:96:ae:19:5c:
                    8a:82:c9:4f:57:d1:ba:82:b1:0b:7f:36:22:3c:66:
                    8a:aa:49:4d:69:c3:6d:da:58:43:33:af:93:32:f1:
                    ff:a7:8d:e3:1d:64:d5:08:f9:e3:69:c2:7a:a1:f4:
                    9a:81:a7:5e:89:09:0a:9d:05:af:9b:61:68:0c:6e:
                    3c:9b:98:ff:35:0c:a0:d5:fe:d0:98:3f:f8:48:a4:
                    2d:cd:1d:0f:fc:cd:82:95:9d:21:58:8e:4f:83:a0:
                    64:90:00:6d:a4:11:4c:ad:7f:20:c7:54:f8:99:c1:
                    a5:09:d1:64:03:73:05:d1:bb:0c:f8:a9:9e:ca:43:
                    a2:75:3c:b6:b5:a1:e4:89:7b:8a:02:8d:cc:3e:00:
                    61:0f:f7:dc:0e:7d:55:94:8e:0f:e8:7b:11:93:cb:
                    5b:82:72:86:8e:6e:75:ef:d2:35:a6:20:96:c5:7f:
                    ba:87:60:5e:29:1b:7f:37:d3:62:6a:f8:d7:0e:6a:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6B:70:88:2F:B3:51:36:08:AF:E4:EE:2F:FA:BA:CD:6B:1D:3C:D2
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138362e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:17:68:ed:40:68:b5:60:48:e8:3b:75:b6:19:55:39:a6:d2:
         ad:4e:d7:fc:c6:78:77:47:1f:77:98:c8:f8:24:4e:be:3b:91:
         02:f0:22:84:74:d7:21:ea:e5:0e:26:15:c7:3a:76:a1:30:93:
         da:2e:1f:1f:eb:3c:16:ba:c4:10:bc:9d:65:20:a5:46:d6:62:
         8d:29:b8:37:55:f2:97:6e:b2:60:64:74:9f:03:f2:98:97:c0:
         a8:9b:a4:4a:a3:ed:4e:e3:25:c5:97:bc:2f:c8:36:be:85:55:
         23:38:a4:bd:2e:df:b6:ff:52:fe:3b:e1:81:e1:f1:ec:97:72:
         23:9e:01:e0:f8:da:24:bd:ec:bc:b5:46:83:c2:c0:6e:4a:a8:
         ca:38:5f:c4:ab:7e:18:5b:82:13:6a:52:1a:01:f7:08:1a:5f:
         67:c5:30:63:2a:2c:18:f1:33:dd:d9:c9:ba:48:2a:d2:fa:31:
         41:63:ef:b3:09:ee:14:0d:93:87:5b:58:7d:8c:b7:28:be:1f:
         39:b0:bb:95:9a:c0:bb:f4:99:33:54:ab:82:97:ee:a7:75:f3:
         00:d4:d0:a2:6c:71:fe:90:36:06:50:0d:1c:57:90:94:05:f1:
         d3:df:53:d5:1d:08:95:09:36:ec:06:9a:e4:d6:9f:09:fc:9a:
         00:66:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org