Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3138372e302f32342d3234203d3e203238343033.roa
File:                     3230302e36382e3138372e302f32342d3234203d3e203238343033.roa (raw, json)
Hash identifier:          2CCUooHSLK+9wGmYt43GvbWD/jS7T9AlUBWkTATbziI=
Subject key identifier:   6D:63:9D:D5:CC:54:18:96:C9:B6:82:95:E6:78:C1:08:35:BF:58:CF
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       7EFE27A8890FBB8AF2FC1016FCF6FE108D92D7CC
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3138372e302f32342d3234203d3e203238343033.roa
Signing time:             Wed 11 Sep 2024 16:00:02 +0000
ROA not before:           Wed 11 Sep 2024 15:55:02 +0000
ROA not after:            Wed 10 Sep 2025 16:00:02 +0000
asID:                     28403
IP address blocks:        200.68.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fe:27:a8:89:0f:bb:8a:f2:fc:10:16:fc:f6:fe:10:8d:92:d7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: Sep 11 15:55:02 2024 GMT
            Not After : Sep 10 16:00:02 2025 GMT
        Subject: CN=6D639DD5CC541896C9B68295E678C10835BF58CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:7d:91:36:d5:a2:69:1c:b8:eb:16:a4:c7:
                    3b:ab:8c:0c:58:b5:99:79:2f:55:c8:5a:69:74:52:
                    55:ad:fb:d4:9b:a8:be:12:f8:da:ca:b7:69:30:06:
                    6f:d8:d1:38:3c:38:b9:31:4c:56:3b:c7:00:9d:f4:
                    45:62:46:23:7c:e7:3c:f5:6d:b2:dc:ad:ef:b0:b6:
                    52:b6:67:2a:e2:2f:c5:92:51:ff:11:30:22:18:f5:
                    62:75:64:66:d8:26:5f:89:c9:ab:f8:66:33:96:24:
                    49:49:12:5a:e5:bf:a8:7a:87:66:f8:00:77:11:f8:
                    fa:50:5a:d6:2b:94:b9:86:bb:8f:85:22:80:c5:3f:
                    e4:92:79:92:6b:4d:a5:0c:cd:dc:16:f9:15:e4:a2:
                    07:c0:cc:7c:84:9a:6b:cb:f8:f6:49:fc:52:e8:1e:
                    36:46:f1:74:c3:d5:c4:61:7e:70:71:e1:36:af:7b:
                    45:f9:f0:df:4f:94:2b:35:82:cf:a9:ff:95:ca:83:
                    5e:e4:ad:12:75:91:be:7b:5b:b0:a1:ca:bc:f2:b0:
                    b5:54:78:c8:c3:1c:df:97:f7:00:01:66:5a:24:1f:
                    60:f7:1a:c5:1b:00:31:98:92:51:4e:d1:94:bf:c7:
                    ae:d5:00:50:c5:18:a1:3c:41:40:4e:bd:08:1a:98:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:63:9D:D5:CC:54:18:96:C9:B6:82:95:E6:78:C1:08:35:BF:58:CF
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3138372e302f32342d3234203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:19:0b:66:9b:13:9e:92:f2:8a:79:8e:88:46:20:c9:d1:f3:
         69:f6:28:8c:f7:77:51:70:ef:12:be:61:09:be:65:e6:78:f5:
         95:64:d8:92:cc:7d:88:b5:38:07:ff:78:09:ba:e9:ec:49:11:
         67:70:88:45:1f:1f:5c:df:0c:8c:9f:6a:db:a5:07:05:8a:9f:
         79:f9:fe:f2:64:73:ef:a9:f5:14:7a:92:32:22:6a:86:ff:f3:
         2e:01:5d:65:24:59:87:d5:7d:cf:e3:29:e8:3d:a7:c6:a6:df:
         9d:ff:cb:4b:ca:8b:6b:0c:0b:af:da:66:0a:34:a0:13:c6:94:
         99:f1:d1:f4:f0:16:ef:e3:bb:34:c2:17:07:5a:34:f6:15:5a:
         cf:3e:1c:a1:5f:a2:2a:e6:70:09:d3:8d:dd:0f:50:ec:ef:f8:
         84:78:71:8c:b2:4f:ba:05:93:6d:3f:01:ed:13:f3:7c:f8:e8:
         38:3c:91:7a:e6:90:47:92:84:d0:e2:04:24:e6:a8:aa:b2:cd:
         f8:16:9e:fb:cf:68:d3:7c:84:59:b5:59:a1:c3:67:f3:1c:af:
         ae:16:44:f0:b9:55:1c:dd:99:53:ef:e7:29:2c:3d:73:a9:a9:
         7d:9e:c3:26:eb:4d:0e:89:4b:96:99:0a:60:e0:e8:4e:01:b0:
         89:1c:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org