Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e39332e302e302f31372d3234203d3e2038303438.roa
File:                     3230302e39332e302e302f31372d3234203d3e2038303438.roa (raw, json)
Hash identifier:          M4rJ8QKxBdvz+oGvQxS3Kdcbmt1vrK7oNDmDKfloYYM=
Subject key identifier:   9A:6A:45:32:54:CC:6E:53:0C:30:2D:A8:C0:30:83:DE:4F:F0:66:DA
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       50D1A877EDE846D6359BBDC6031BE9F5FF82F950
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e39332e302e302f31372d3234203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:15:06 +0000
ROA not before:           Tue 05 Mar 2024 18:10:06 +0000
ROA not after:            Tue 04 Mar 2025 18:15:06 +0000
asID:                     8048
IP address blocks:        200.93.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d1:a8:77:ed:e8:46:d6:35:9b:bd:c6:03:1b:e9:f5:ff:82:f9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Mar  5 18:10:06 2024 GMT
            Not After : Mar  4 18:15:06 2025 GMT
        Subject: CN=9A6A453254CC6E530C302DA8C03083DE4FF066DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:ef:0f:aa:c3:bb:d4:bb:f1:2d:57:bf:4c:
                    19:39:9a:99:e4:56:b5:87:4a:0e:ae:0a:4a:5a:17:
                    d6:29:b5:a2:b4:64:15:9f:1d:81:78:55:1c:ef:6e:
                    2c:30:86:63:bb:9a:c8:ea:f2:bf:7d:7a:72:0a:4e:
                    0b:e6:83:53:cd:77:05:e1:a5:1f:1e:ce:18:e4:b5:
                    06:56:6a:b7:3a:20:4c:b5:59:3d:c2:14:46:49:0f:
                    40:10:a2:91:91:1e:63:34:6b:0e:01:bf:e1:14:29:
                    4d:9a:72:3b:e4:87:37:cd:c6:9f:43:df:9c:29:87:
                    4f:eb:d8:c7:19:57:1a:e8:fd:9d:af:d7:b9:3d:63:
                    60:51:87:96:16:17:6d:4e:46:12:e4:70:fa:5f:b3:
                    c4:d4:06:84:62:cc:99:d9:e2:49:ca:fa:be:fe:4f:
                    f9:01:2a:2f:f6:a1:1a:34:21:f1:35:ff:9c:23:14:
                    2b:01:ee:55:75:74:0a:ff:b1:2d:36:58:49:ed:2d:
                    b5:2e:8a:e8:e0:04:6e:f2:a5:d8:a9:cb:bc:f2:ec:
                    bc:78:cf:c5:38:ba:f8:4c:fb:b1:8c:c5:75:e9:94:
                    bf:0e:06:d7:e2:80:50:4b:8b:97:a5:9b:fb:86:f2:
                    88:bc:93:24:3a:15:e8:71:5c:ab:aa:f8:45:a9:6f:
                    50:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6A:45:32:54:CC:6E:53:0C:30:2D:A8:C0:30:83:DE:4F:F0:66:DA
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e39332e302e302f31372d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6b:dc:6b:ae:4b:45:b3:e6:25:45:d3:89:5e:e0:bf:83:a8:ae:
         3d:be:35:dc:d0:1b:4d:79:ee:4f:9b:4f:0f:a4:9c:44:b6:5e:
         98:57:8c:30:8a:a0:fd:0a:c0:78:f1:00:fc:a8:d3:95:90:00:
         eb:5a:e2:95:e3:0d:40:6d:1e:6d:bf:1b:fb:66:5f:98:20:00:
         4e:cd:8c:2f:04:4c:58:0f:2c:23:14:6a:15:c6:01:0a:bd:f2:
         eb:b2:58:4f:15:bb:aa:bb:c0:5e:2d:7d:8d:e8:e3:11:36:a2:
         55:6f:6c:6b:3e:a1:9a:24:e2:67:e7:1a:d9:bc:69:f0:b9:30:
         cf:4e:7e:a1:6e:d5:e0:a1:ea:7d:7b:f8:29:96:27:3a:ce:fd:
         c4:50:97:e0:b8:fa:0d:1f:22:74:ff:f8:96:27:3e:df:6a:0e:
         c2:f9:8b:ee:68:04:5c:5d:dc:fc:6d:6c:86:e7:be:2c:17:64:
         5f:dc:90:a3:cc:31:83:bd:ff:ba:fc:d1:a6:7e:18:b7:df:ba:
         e4:f2:27:55:79:c4:fb:60:9b:42:03:aa:eb:65:9a:e1:9f:d1:
         ba:11:54:53:35:a2:a6:63:bc:fe:26:96:f0:18:6a:63:09:e5:
         1f:fd:67:2b:a3:a3:ff:4a:07:a4:d7:c0:46:1f:b6:23:c1:2a:
         ee:c7:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org