Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/3230302e31302e3135342e302f32342d3234203d3e20323633373130.roa
File:                     3230302e31302e3135342e302f32342d3234203d3e20323633373130.roa (raw, json)
Hash identifier:          xGoaISdtrEi2+YyPn+gmvzUhwn/ea/mJlvUBGJ01CF8=
Subject key identifier:   52:4B:10:20:B8:69:BE:9F:42:3E:0E:2C:43:FA:1A:13:84:66:6F:81
Certificate issuer:       /CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1
Certificate serial:       6FC5BC0B817B886D9B769312817BF593C34EE0C1
Authority key identifier: 18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/3230302e31302e3135342e302f32342d3234203d3e20323633373130.roa
Signing time:             Tue 05 Mar 2024 18:23:36 +0000
ROA not before:           Tue 05 Mar 2024 18:18:36 +0000
ROA not after:            Tue 04 Mar 2025 18:23:36 +0000
asID:                     263710
IP address blocks:        200.10.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c5:bc:0b:81:7b:88:6d:9b:76:93:12:81:7b:f5:93:c3:4e:e0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1
        Validity
            Not Before: Mar  5 18:18:36 2024 GMT
            Not After : Mar  4 18:23:36 2025 GMT
        Subject: CN=524B1020B869BE9F423E0E2C43FA1A1384666F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:5f:27:46:00:02:51:17:73:1b:e3:c8:1a:
                    b3:30:3d:45:01:9d:d6:4d:3b:9e:3e:eb:6d:ef:02:
                    a9:50:81:58:dd:d4:dd:0a:55:56:97:85:92:ec:5f:
                    f1:15:26:2f:64:e1:ca:3f:69:f6:0b:b5:43:2c:a5:
                    10:49:15:ea:03:86:43:cd:10:8f:b9:66:da:37:ee:
                    ac:cb:3e:50:5e:84:91:2c:cc:ea:6d:0a:6b:bf:ac:
                    1e:c7:6f:21:9c:80:cc:70:cf:4a:66:44:29:02:81:
                    9e:31:9c:b1:4f:30:9b:7c:95:3b:f5:a9:3c:e9:80:
                    9b:47:ea:b9:53:59:a9:11:d3:c4:25:92:01:ee:66:
                    3b:60:31:32:f4:18:c6:5e:3a:c2:fe:77:16:d6:8b:
                    1b:73:9a:6a:16:31:9e:4c:71:e2:ed:1d:88:9b:c7:
                    e6:f0:69:50:e0:63:11:01:fa:69:17:c4:b6:16:91:
                    a5:11:f3:bf:75:f9:43:f9:df:22:4f:a9:e1:e2:8b:
                    26:95:5f:00:6a:68:6f:15:2a:1c:e5:89:63:da:a4:
                    2d:24:38:a3:9e:ee:41:94:64:04:12:c1:5f:e3:b3:
                    65:7c:a4:cc:e2:5f:b4:e0:49:73:b4:18:9a:8b:8d:
                    b8:09:54:a6:01:e1:d7:77:d1:02:2a:52:e9:cd:a2:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4B:10:20:B8:69:BE:9F:42:3E:0E:2C:43:FA:1A:13:84:66:6F:81
            X509v3 Authority Key Identifier:
                keyid:18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/3230302e31302e3135342e302f32342d3234203d3e20323633373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:a9:74:a8:31:66:03:ed:a0:68:87:6f:9d:f2:aa:6b:a0:
         fe:ad:c0:78:c3:95:ee:77:67:d4:f5:81:d2:81:62:71:62:29:
         4d:1e:7f:f9:24:21:b4:4f:02:61:d9:45:99:b0:79:a9:f9:03:
         3a:31:57:6b:c4:d8:3e:61:04:25:59:47:77:9c:89:7f:00:de:
         16:e7:74:de:e5:fa:3a:04:00:b7:bf:73:48:25:ad:f8:2b:d4:
         bb:a0:f0:01:00:40:6d:b3:39:f6:ac:fc:40:a6:fd:ae:0a:f1:
         eb:2b:56:a1:32:48:ae:d1:7b:8c:8f:99:d5:61:a6:81:98:66:
         99:04:af:df:5e:d3:79:dd:d2:70:fd:e0:70:90:34:61:4c:97:
         eb:8c:3e:37:e8:f7:bf:bb:5e:a5:65:90:c0:3b:c9:2d:1d:24:
         98:ca:6c:f5:4b:55:10:d1:01:a7:a8:4d:8b:32:af:5c:ba:46:
         a1:35:49:02:e2:27:e8:c0:58:ab:ea:64:7e:d4:0d:9e:e4:26:
         d8:0d:e6:29:2d:1a:d4:29:d0:94:fc:9b:cc:ef:8a:7a:3b:40:
         f5:04:a4:1f:fb:b0:05:d0:3c:f8:7b:5b:ae:39:bb:30:c8:11:
         80:1e:e5:1d:ad:27:dd:17:0c:08:5c:64:4e:57:96:1d:92:e0:
         35:69:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:15 2024 by rpki-client on console-ams.rpki-client.org