Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa
File:                     3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          U899qbmI5/KXTRUlYlgPGRk7spsQHp3dVkdia5WkRBw=
Subject key identifier:   39:CC:77:1C:D7:DA:73:8F:32:E6:E1:1F:7B:11:4F:83:02:BC:7D:14
Certificate issuer:       /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial:       4FA2A2139C1A21098B0916BA6CF23B64102B29ED
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa
Signing time:             Tue 05 Mar 2024 17:42:35 +0000
ROA not before:           Tue 05 Mar 2024 17:37:35 +0000
ROA not after:            Tue 04 Mar 2025 17:42:35 +0000
asID:                     264780
IP address blocks:        200.126.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a2:a2:13:9c:1a:21:09:8b:09:16:ba:6c:f2:3b:64:10:2b:29:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
        Validity
            Not Before: Mar  5 17:37:35 2024 GMT
            Not After : Mar  4 17:42:35 2025 GMT
        Subject: CN=39CC771CD7DA738F32E6E11F7B114F8302BC7D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:49:3c:68:4c:d1:e1:d8:5b:32:48:42:16:
                    3c:79:8d:58:d0:54:a6:33:4c:74:fd:ea:d1:69:7a:
                    85:6e:34:b0:11:39:1b:57:ff:1a:20:32:3b:87:aa:
                    7d:f8:f5:76:a9:53:81:40:35:12:e8:f2:2f:24:36:
                    12:20:92:5d:63:23:71:ed:e9:41:8a:42:c4:b0:2a:
                    92:9e:d1:47:32:42:80:0d:14:7a:d0:06:a4:b4:cc:
                    1c:57:01:93:2e:89:5c:0a:2c:a7:b4:87:bf:8c:64:
                    1c:2d:5e:69:76:3d:54:7a:35:b3:d0:6f:c9:af:ed:
                    a1:70:08:b4:e9:df:10:b0:bb:49:c6:b1:b1:36:2f:
                    67:19:7c:cb:84:76:27:00:ac:d0:07:14:80:b3:0c:
                    52:35:18:8e:06:0a:17:f2:e0:2c:ae:1f:83:d1:a7:
                    cc:5f:9c:63:64:26:28:83:bb:53:74:f6:58:f0:f2:
                    cf:bc:2e:f2:e5:59:3f:ad:88:c9:60:ca:15:98:ee:
                    9d:68:eb:25:bc:c2:cb:b0:28:8c:24:50:8b:e7:4a:
                    30:aa:1b:fa:4a:a1:fc:b7:39:26:94:72:22:1b:5d:
                    32:a4:69:79:25:71:00:d4:21:5b:41:f6:e2:25:91:
                    5b:ad:f0:5c:f4:2a:43:dd:bc:ae:89:a6:26:e7:45:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CC:77:1C:D7:DA:73:8F:32:E6:E1:1F:7B:11:4F:83:02:BC:7D:14
            X509v3 Authority Key Identifier:
                keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:be:eb:7e:ca:d5:57:c9:21:5f:da:fb:e9:81:04:54:b6:4a:
         e4:ac:f8:cd:c3:de:ba:77:80:4e:a0:1b:4f:6a:22:b6:d4:38:
         f9:ee:b5:8d:45:99:9e:41:66:2d:b4:13:95:ba:de:fb:91:94:
         70:fd:39:3e:e2:a1:77:54:ce:3b:92:d9:f2:09:f0:2e:12:f9:
         c8:15:fe:71:f5:31:df:a9:c1:19:21:5f:9e:80:c6:57:bc:2a:
         8d:99:55:61:f7:64:5b:68:07:b0:3b:83:30:9e:51:66:69:26:
         05:1e:11:93:40:8a:d3:8b:08:b3:39:79:8e:7c:82:f6:bc:72:
         25:74:09:d6:fd:e0:2d:4d:27:e6:ae:ae:d1:63:88:7e:3e:eb:
         8e:a2:87:55:ab:67:6b:1b:f8:c8:5d:2e:2e:0d:76:5f:d1:b0:
         f1:d5:d2:6b:11:db:bc:ae:b5:8b:6d:0b:f4:aa:77:ae:d2:7c:
         c2:58:4c:2e:77:21:0d:95:37:3f:61:34:47:e3:1c:54:6d:df:
         e7:09:e6:0f:2d:46:71:85:b8:57:63:62:47:3c:71:c5:55:94:
         8a:d2:ed:34:5a:64:09:70:ff:d3:0d:ce:95:e4:33:d9:ed:68:
         18:08:e3:a0:17:c7:60:e3:11:d7:1e:ef:db:fc:2a:6c:fe:48:
         72:b2:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:55:19 2024 by rpki-client on console-ams.rpki-client.org