Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/3230302e392e342e302f32322d3232203d3e203233323031.roa
File:                     3230302e392e342e302f32322d3232203d3e203233323031.roa (raw, json)
Hash identifier:          /r5R6+ymDR1CZxrQKfl0s6syM+XKVxtgV6obwvSWG6w=
Subject key identifier:   11:A2:A5:42:52:88:05:44:14:8C:B4:C7:C1:6B:F4:AB:68:35:F1:39
Certificate issuer:       /CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9
Certificate serial:       61E5841DEBF5FAB52BF5B80A9580100BDAF19D64
Authority key identifier: 41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/3230302e392e342e302f32322d3232203d3e203233323031.roa
Signing time:             Tue 05 Mar 2024 18:22:44 +0000
ROA not before:           Tue 05 Mar 2024 18:17:44 +0000
ROA not after:            Tue 04 Mar 2025 18:22:44 +0000
asID:                     23201
IP address blocks:        200.9.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e5:84:1d:eb:f5:fa:b5:2b:f5:b8:0a:95:80:10:0b:da:f1:9d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9
        Validity
            Not Before: Mar  5 18:17:44 2024 GMT
            Not After : Mar  4 18:22:44 2025 GMT
        Subject: CN=11A2A54252880544148CB4C7C16BF4AB6835F139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:8d:29:d4:30:55:66:87:ef:4f:c4:bc:e5:
                    3f:31:f1:75:bc:76:11:df:4e:76:55:5e:7c:d2:fd:
                    7d:6f:e5:62:e9:68:5b:20:e6:8b:66:99:c6:b6:4f:
                    ad:27:96:8a:62:e4:c6:da:17:3a:61:20:51:cd:96:
                    2d:30:a0:0b:60:e5:05:1a:c4:53:b3:2c:16:9e:1d:
                    3c:73:8c:cf:8b:0c:16:4f:15:9d:42:48:90:ed:95:
                    6e:27:a2:95:88:d0:17:7e:f5:c8:bf:ea:0d:a3:a8:
                    f6:0e:9b:48:08:5e:f9:94:c6:e7:b6:e0:68:17:ea:
                    e1:8e:90:65:9b:39:df:1d:f4:b6:b9:26:2c:8a:fe:
                    cc:a5:33:b7:23:d8:69:97:37:b0:9b:34:5e:fa:91:
                    f0:7e:c1:27:75:10:51:d2:d5:10:39:1e:5c:33:e9:
                    85:6f:ab:5e:97:17:f8:f5:b8:e8:5b:b7:d0:d4:8c:
                    71:0c:2a:86:01:9b:44:71:61:1e:06:97:18:46:36:
                    81:ba:30:32:fe:75:05:e1:a1:01:85:5b:9c:ed:9b:
                    a1:43:e1:fb:93:27:7b:1e:e6:65:f2:77:fb:40:0c:
                    b0:1d:e1:3b:e7:cd:70:3f:1e:e5:85:0b:7a:22:48:
                    34:91:aa:19:71:b7:5e:a5:e9:33:25:05:e8:fa:ac:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A2:A5:42:52:88:05:44:14:8C:B4:C7:C1:6B:F4:AB:68:35:F1:39
            X509v3 Authority Key Identifier:
                keyid:41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/3230302e392e342e302f32322d3232203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:c3:65:66:ed:44:27:c7:b2:a3:0f:11:98:d4:c5:1a:77:2c:
         68:99:7d:4d:ad:4c:67:40:6e:c6:25:c3:06:60:7b:6c:1a:64:
         c5:8b:c6:de:bf:69:55:74:ab:9b:3f:e6:0c:b9:76:57:de:5e:
         54:04:95:62:8e:46:64:2c:26:a9:2b:02:2a:fb:4f:06:2c:cd:
         23:ad:d1:7f:4f:4d:63:26:e2:90:94:85:2f:75:96:c0:ab:64:
         fc:f1:61:2f:45:e3:d9:87:dd:b2:85:4b:e4:22:dc:fa:b1:01:
         47:4a:c1:07:4d:66:f5:ae:8a:8d:f5:30:46:03:52:4f:be:68:
         3d:30:5f:63:b0:9e:14:63:3c:e8:63:64:5e:ab:89:86:62:eb:
         10:38:b9:7f:c6:09:03:39:58:e7:a7:12:26:24:83:b3:3d:77:
         ab:73:eb:a4:55:18:3a:82:2a:01:31:c5:95:3e:16:29:f2:90:
         b0:82:91:54:b6:4a:ed:e5:8b:72:c8:d2:a6:f3:19:e6:e9:82:
         37:cb:1d:56:7d:b9:e2:db:0f:bd:36:ed:49:50:64:33:db:93:
         46:a7:ec:e7:b5:a3:a3:30:5d:1d:40:53:ac:7a:42:8f:e9:de:
         03:df:c9:86:a3:09:4c:93:eb:83:09:19:04:be:7c:ec:c8:e8:
         67:32:d7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:12 2024 by rpki-client on console-ams.rpki-client.org