Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/3230302e3231352e3234382e302f32322d3234203d3e20323639393831.roa
File:                     3230302e3231352e3234382e302f32322d3234203d3e20323639393831.roa (raw, json)
Hash identifier:          zMGRrN3GTOrDQrvltvwVN6TiENh1w2oo0yRcoY1h+cQ=
Subject key identifier:   41:99:8D:06:DC:BB:BC:DB:52:1B:A7:BB:B9:D6:FB:CD:4E:F3:60:05
Certificate issuer:       /CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
Certificate serial:       74CB737FACF99B62F58B56C3B7CC00A028DE59C0
Authority key identifier: 9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/3230302e3231352e3234382e302f32322d3234203d3e20323639393831.roa
Signing time:             Tue 05 Mar 2024 18:20:34 +0000
ROA not before:           Tue 05 Mar 2024 18:15:34 +0000
ROA not after:            Tue 04 Mar 2025 18:20:34 +0000
asID:                     269981
IP address blocks:        200.215.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:cb:73:7f:ac:f9:9b:62:f5:8b:56:c3:b7:cc:00:a0:28:de:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
        Validity
            Not Before: Mar  5 18:15:34 2024 GMT
            Not After : Mar  4 18:20:34 2025 GMT
        Subject: CN=41998D06DCBBBCDB521BA7BBB9D6FBCD4EF36005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:06:ec:7f:48:28:8d:a0:76:f2:d6:2d:0f:d8:
                    a9:78:62:c6:de:7d:1d:d0:db:26:b3:a8:8b:62:57:
                    6a:67:58:ed:14:1d:a4:69:ca:5f:88:29:cc:1c:2c:
                    db:82:13:71:0f:10:5e:c8:d4:e8:96:ce:3d:e2:97:
                    d8:b1:8d:7b:53:10:10:b1:28:5e:80:74:80:d3:88:
                    45:75:61:e2:49:ab:5c:21:e3:29:78:31:ff:b4:8f:
                    c2:79:94:a9:3d:45:d5:5b:75:2e:84:b7:55:16:88:
                    db:9b:17:8c:27:c0:9b:5c:3e:42:4b:ac:fa:12:42:
                    57:ae:0f:94:27:4f:f4:fb:6b:97:78:08:87:f8:e8:
                    81:f3:eb:36:2c:dc:03:e9:87:c3:d1:d5:49:a3:6d:
                    4b:ea:1f:e7:a2:a0:c4:0b:a4:3f:1b:8e:ea:d4:7a:
                    7f:08:af:c0:a9:b7:c6:6b:c3:52:ca:23:05:65:50:
                    78:b6:12:6b:3a:19:29:6f:01:c7:67:b9:ec:52:07:
                    82:47:9c:3a:ef:57:b9:4d:6f:c0:be:8b:83:aa:54:
                    91:12:3b:4e:d3:b4:6a:97:9f:9b:9e:42:59:78:7c:
                    26:0e:bb:ff:56:e6:a6:50:ce:5d:11:02:03:44:ea:
                    b7:78:98:a5:9e:f6:6a:51:bc:17:0e:2e:0b:d4:68:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:8D:06:DC:BB:BC:DB:52:1B:A7:BB:B9:D6:FB:CD:4E:F3:60:05
            X509v3 Authority Key Identifier:
                keyid:9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/3230302e3231352e3234382e302f32322d3234203d3e20323639393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:76:00:46:f8:d0:98:84:e9:8e:a0:f7:42:eb:cc:3d:30:
         7d:e2:2b:01:4d:3a:dc:cc:6e:96:0b:aa:fa:22:8e:7f:20:a3:
         cd:e4:24:65:12:ad:56:53:75:c4:3d:4f:64:a6:13:9e:b7:70:
         32:49:2a:91:b2:7c:ce:e3:9e:02:86:04:2d:64:7b:a2:88:c5:
         45:6c:c5:d6:f0:06:b4:c6:c6:46:08:cb:88:c3:4c:99:26:8a:
         dc:50:f9:56:a1:14:ca:e3:2f:fd:1a:13:bd:90:ba:48:6c:7d:
         b2:91:f8:f1:f6:f3:23:83:c4:0a:bc:ee:3b:a0:bd:93:10:de:
         01:5c:eb:2b:57:ac:34:45:8f:3b:0f:a9:7d:19:5d:cc:41:52:
         97:10:d0:c9:38:34:53:01:23:01:e4:ab:c7:cb:66:a8:84:ee:
         d4:95:a4:83:01:46:1e:20:f6:ad:c4:a8:c9:f5:2c:95:6b:1e:
         26:cf:89:ee:79:b0:0e:0a:96:8d:25:11:41:49:7d:83:d8:c3:
         23:a9:f7:6f:ba:85:ef:41:b5:a1:25:e7:a7:26:86:34:88:d2:
         0c:b0:2d:7d:b4:61:2d:9c:22:cf:e2:2d:b0:24:c5:29:6a:96:
         ae:cb:fb:6a:c8:ab:19:c7:c1:22:91:ed:df:ce:1e:b8:8c:ee:
         da:74:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:08:08 2024 by rpki-client on console-ams.rpki-client.org