Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203238303237.roa
File:                     3230302e392e3137362e302f32342d3234203d3e203238303237.roa (raw, json)
Hash identifier:          yUrw2MjTFdM7KEX/EoGf+J4st03VPrC7whgmNgIWuQA=
Subject key identifier:   D9:75:AA:7F:50:41:5D:45:3C:D5:A4:CA:0A:35:38:56:F3:DE:FC:77
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       4BCCA95C6B2873F894A923AC78CDC241C4971B72
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203238303237.roa
Signing time:             Tue 05 Mar 2024 17:51:38 +0000
ROA not before:           Tue 05 Mar 2024 17:46:38 +0000
ROA not after:            Tue 04 Mar 2025 17:51:38 +0000
asID:                     28027
IP address blocks:        200.9.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cc:a9:5c:6b:28:73:f8:94:a9:23:ac:78:cd:c2:41:c4:97:1b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Mar  5 17:46:38 2024 GMT
            Not After : Mar  4 17:51:38 2025 GMT
        Subject: CN=D975AA7F50415D453CD5A4CA0A353856F3DEFC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:7d:35:7b:05:88:07:f7:1b:fd:92:d1:e5:
                    3f:70:40:71:b9:54:fc:b2:71:f3:e4:a9:14:af:39:
                    a4:7b:94:6f:1e:56:b6:98:3d:95:39:d7:0f:4e:6a:
                    72:cf:19:47:5a:4a:af:52:bc:ca:43:ec:01:98:fb:
                    db:fd:7f:55:10:8b:c8:d8:15:c4:dd:01:a9:8a:69:
                    0f:56:94:a6:19:96:11:d2:c9:45:db:f3:4f:db:2d:
                    8d:ea:bf:86:e8:a9:db:1f:e0:63:07:88:ea:0f:f8:
                    74:71:21:d7:29:83:8b:b4:0a:78:d1:5d:ec:a1:3b:
                    d8:29:3d:ef:d7:d5:ea:d8:1f:e0:d5:2f:a3:8b:a6:
                    bf:a1:be:f6:c6:ff:f1:7e:87:1c:c2:15:e7:68:b6:
                    dd:d2:5d:81:c0:7e:54:48:d9:75:74:77:0b:85:84:
                    a2:8a:64:19:e4:07:f5:41:8e:d3:54:e1:33:9a:81:
                    51:aa:c9:bc:e3:49:1c:3d:91:bd:b4:85:bc:c6:c5:
                    9c:c6:ae:e1:41:53:53:57:06:a0:7e:46:7b:a0:59:
                    ae:90:06:b9:09:e5:bc:28:b2:81:88:cc:be:ee:17:
                    33:6f:0d:8f:5e:90:d1:1f:13:ea:29:25:d9:9c:89:
                    90:c7:a9:c9:3d:8e:1e:c4:1d:80:a0:87:54:da:50:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:75:AA:7F:50:41:5D:45:3C:D5:A4:CA:0A:35:38:56:F3:DE:FC:77
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203238303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:35:22:61:9d:01:7f:5d:83:d3:07:3f:e5:e0:37:70:87:f5:
         ec:1f:83:5a:a1:e0:62:19:1c:af:c2:1b:93:87:9e:41:19:2f:
         3c:6f:ba:cf:6f:84:86:c7:46:34:ac:7c:17:e9:19:b4:bb:9d:
         2c:3c:5c:1e:71:33:6d:a3:ba:31:c4:8e:13:d5:70:99:2b:4c:
         f5:93:9d:d6:6e:d6:bb:0d:1a:ee:dd:b7:9d:25:ab:af:de:ea:
         7d:60:e6:44:2f:c6:a3:56:46:6c:7b:7c:6b:ce:52:8f:74:b7:
         f8:0b:7b:89:c3:5f:5b:eb:23:08:bb:6a:fb:59:72:7a:bb:d7:
         5f:a2:a1:bf:1b:b7:f2:07:83:88:7c:23:4d:89:55:00:cb:76:
         2d:cc:83:95:24:f7:f8:b5:8d:e3:8b:f5:58:64:b9:1f:d4:b5:
         2c:4b:8c:ec:f1:43:f7:42:c8:b1:40:93:fd:a3:1f:fc:07:f2:
         ef:8b:fb:e2:c9:16:be:17:37:65:15:5a:a2:b5:67:67:9a:58:
         09:08:88:e3:53:79:18:c8:92:92:f3:ab:aa:be:89:95:1c:34:
         ce:a7:60:25:9e:81:99:90:32:43:8a:bf:f2:71:67:82:40:5f:
         f9:71:5d:c7:30:fd:e0:01:aa:97:a7:dd:02:1b:6d:3e:ce:74:
         f6:f5:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org