Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3230203d3e203237393332.roa
File:                     3230302e35322e3134342e302f32302d3230203d3e203237393332.roa (raw, json)
Hash identifier:          jetj5PZxjupTyxlsGtOsaV+vUbfu6FdUsagv6ooyV7c=
Subject key identifier:   36:C5:A8:63:D0:29:F4:23:B2:D9:43:74:DD:C5:21:C7:26:5B:8E:CD
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       0F2CE943651817546386E1E7658B1E69F142C180
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3230203d3e203237393332.roa
Signing time:             Tue 05 Mar 2024 17:54:28 +0000
ROA not before:           Tue 05 Mar 2024 17:49:28 +0000
ROA not after:            Tue 04 Mar 2025 17:54:28 +0000
asID:                     27932
IP address blocks:        200.52.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 02:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2c:e9:43:65:18:17:54:63:86:e1:e7:65:8b:1e:69:f1:42:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Mar  5 17:49:28 2024 GMT
            Not After : Mar  4 17:54:28 2025 GMT
        Subject: CN=36C5A863D029F423B2D94374DDC521C7265B8ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:00:5b:52:df:a6:85:0b:39:4e:61:c8:b7:
                    3a:1b:4d:a4:ba:e8:f7:b7:8a:55:23:bb:a9:49:69:
                    28:e5:24:4b:f6:0e:ce:20:9d:7a:56:df:a6:1f:d4:
                    17:22:93:ad:4d:71:29:88:67:72:25:ec:47:07:be:
                    d2:9c:6f:6d:86:6b:ad:2d:ef:e0:c4:42:0f:28:05:
                    d8:84:34:4c:bf:39:f0:78:b0:55:8d:4d:80:f9:36:
                    3d:31:5e:3f:45:a8:77:25:49:26:7f:68:d1:6a:8d:
                    87:f6:9c:a9:c5:66:ea:25:1c:eb:f0:8b:05:3d:8d:
                    fb:30:dd:f9:2a:55:8a:b7:75:9f:91:ba:68:1a:2e:
                    12:14:d1:f7:d8:ba:80:c8:af:2f:5d:68:c2:01:4e:
                    6b:9e:43:e5:68:74:73:af:99:c5:7a:ef:25:9d:8d:
                    cc:ac:ac:b3:cd:a9:45:44:f5:7c:a0:1a:a8:47:07:
                    79:e7:69:82:10:20:f7:78:0a:71:c0:b8:08:08:ea:
                    4d:37:71:0f:b2:d5:71:ee:14:c9:93:4f:7e:eb:6b:
                    de:b2:e8:e3:f0:a5:c7:31:9e:88:b1:0f:12:fb:48:
                    02:aa:05:b6:8a:41:13:7b:ec:a9:51:83:66:51:d7:
                    92:e2:73:79:b2:e6:a2:8a:0a:12:de:4f:95:22:1e:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C5:A8:63:D0:29:F4:23:B2:D9:43:74:DD:C5:21:C7:26:5B:8E:CD
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3230203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:6e:9d:dd:11:d8:33:09:19:fc:d7:f6:a8:c2:de:66:03:24:
         90:42:7b:28:b3:4d:f8:09:08:79:04:91:a7:91:1b:71:6c:a1:
         48:21:3a:2c:1b:72:91:b6:ae:61:42:8f:ae:20:ef:e2:d1:0a:
         10:8c:50:c0:f4:f1:1d:00:a1:91:e3:69:ff:23:23:d8:dc:3a:
         2d:e4:4b:b1:62:80:1c:be:a2:f5:d0:af:cf:e1:0c:83:1c:0e:
         3c:96:cc:74:43:49:90:36:7d:26:eb:d4:59:3f:73:59:cf:0f:
         4e:27:c7:85:76:94:0e:6b:28:0b:af:14:64:bd:4b:e3:7d:21:
         ef:68:8f:5b:1f:a1:67:2a:04:cb:fc:27:68:5c:c6:54:c7:2a:
         68:d9:4d:2f:71:9c:0a:da:8c:fd:b0:1f:39:06:8d:a3:87:fa:
         f1:f9:ae:02:c0:5a:4e:51:12:05:f2:80:bf:2d:7c:f4:f7:99:
         7c:78:ce:69:3e:68:c2:1b:37:5a:ef:f6:6f:de:48:ec:e9:49:
         2a:43:f2:27:9b:89:c8:24:94:c1:73:bb:fa:ae:8f:d4:7e:9a:
         45:b6:10:bb:f2:fa:75:56:0f:b5:5b:55:74:da:37:df:05:9b:
         16:7d:1a:ae:18:89:7b:ea:ef:7b:53:e5:1e:72:b3:2b:f0:ea:
         8f:75:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:48:16 2024 by rpki-client on console-ams.rpki-client.org