Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138382e302f32342d3234203d3e203233333833.roa
File:                     3230302e31332e3138382e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          JvQ7KAdqctmFhwprVAH7u9upBA4svGSO3xj+ktfiWAs=
Subject key identifier:   66:53:3D:44:CC:0D:07:EB:48:B4:5D:7D:47:6A:44:29:2A:67:4F:F9
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       6CFA86C930BBD925F980F5AF3BAE36AB0670C893
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138382e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:10:36 +0000
ROA not before:           Tue 05 Mar 2024 18:05:36 +0000
ROA not after:            Tue 04 Mar 2025 18:10:36 +0000
asID:                     23383
IP address blocks:        200.13.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fa:86:c9:30:bb:d9:25:f9:80:f5:af:3b:ae:36:ab:06:70:c8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:36 2024 GMT
            Not After : Mar  4 18:10:36 2025 GMT
        Subject: CN=66533D44CC0D07EB48B45D7D476A44292A674FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:42:82:7c:80:9b:94:03:20:c5:7f:a7:c4:
                    db:ed:b9:9c:3c:8c:df:c4:c8:50:ff:6b:b0:d6:af:
                    8a:68:cc:f1:30:8a:22:d2:48:81:e0:3c:92:69:c5:
                    e0:d9:3f:4f:24:c5:fa:cb:b9:94:03:39:5e:ba:d0:
                    64:ba:19:bc:1f:74:1d:ed:d8:cd:c2:17:cb:70:c0:
                    40:88:66:a2:9f:b7:08:f3:51:ce:b0:37:4f:ad:e7:
                    79:48:45:45:48:b1:af:c6:2d:8c:f1:6d:ef:92:35:
                    7f:19:ec:e6:22:0d:41:76:17:51:58:5b:bb:1f:fa:
                    a4:c5:5b:d7:f9:16:85:06:6f:0b:62:9f:d5:5a:b4:
                    71:71:01:c7:ed:5c:35:ec:9a:e1:44:f5:c2:bb:ae:
                    17:ec:05:c5:a8:81:ab:25:c8:c8:36:44:55:99:3f:
                    1e:37:d4:40:1d:a7:e8:f9:57:78:c2:54:d0:7e:9e:
                    ac:4d:61:81:88:17:72:1f:a6:2b:49:b2:70:bc:07:
                    b3:fe:b6:9b:ca:90:e5:d3:e3:36:d6:0a:1d:a1:89:
                    8c:37:83:5c:ec:4d:59:91:58:31:ff:55:dd:df:f0:
                    21:3b:b0:cc:8f:8e:91:36:ab:5b:94:a9:36:62:5a:
                    d4:62:bf:03:f2:71:72:e2:3e:6c:5e:95:41:f2:52:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:53:3D:44:CC:0D:07:EB:48:B4:5D:7D:47:6A:44:29:2A:67:4F:F9
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138382e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:52:6d:1f:1f:43:26:b4:6e:ad:a0:a9:15:ad:e8:61:ec:6b:
         ac:aa:04:4a:ec:ac:dc:26:90:1a:ab:7a:73:45:9e:cb:c7:42:
         47:6c:0c:9f:6e:56:1f:f5:16:70:6b:47:59:af:26:97:ff:54:
         4b:d5:d7:16:d6:f6:53:ee:16:32:d6:29:3a:88:74:c5:45:e1:
         23:da:0d:bb:92:80:3e:a3:30:26:92:3a:62:0d:5e:87:8a:0a:
         ad:57:89:44:ed:2e:34:09:e1:4d:8c:df:22:6e:0d:e7:38:92:
         cc:63:25:26:11:fd:44:40:35:b0:51:1b:6a:01:54:6d:a7:ea:
         f1:59:f4:9b:cf:dd:43:c0:23:34:d3:7d:6e:6c:af:36:77:70:
         4d:64:77:c1:0a:90:43:53:f2:7e:15:18:4e:93:f2:1b:53:78:
         77:62:25:ae:47:9b:4c:20:60:cf:c9:2d:6c:9b:0d:e5:19:eb:
         cc:54:04:39:58:91:7c:37:c4:92:0c:c6:f6:5d:15:2a:b1:ad:
         da:48:b7:77:25:78:7d:73:85:dd:3e:ae:87:22:b3:d0:59:c7:
         76:93:a8:f6:de:c7:37:39:77:ca:3b:8e:ac:fb:96:d5:16:18:
         32:d8:c3:a3:d6:e7:57:cc:e9:96:06:66:76:4f:06:be:9e:7b:
         35:3a:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org