Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/3230302e31342e33342e302f32342d3234203d3e2036313430.roa
File:                     3230302e31342e33342e302f32342d3234203d3e2036313430.roa (raw, json)
Hash identifier:          jyuwi4sTTXgZvyTCSe9BcM8rSzZ4DeaCfvMVTZpPB28=
Subject key identifier:   F7:9B:30:78:5C:41:49:99:FC:37:78:32:3C:8D:83:83:1D:F3:81:C7
Certificate issuer:       /CN=9239EE97C6B39C11732B535303D9279F94576DA0
Certificate serial:       1166045DE4E6987A3AF04AA67491D739B3ECB4CC
Authority key identifier: 92:39:EE:97:C6:B3:9C:11:73:2B:53:53:03:D9:27:9F:94:57:6D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/3230302e31342e33342e302f32342d3234203d3e2036313430.roa
Signing time:             Tue 05 Mar 2024 17:49:16 +0000
ROA not before:           Tue 05 Mar 2024 17:44:16 +0000
ROA not after:            Tue 04 Mar 2025 17:49:16 +0000
asID:                     6140
IP address blocks:        200.14.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:66:04:5d:e4:e6:98:7a:3a:f0:4a:a6:74:91:d7:39:b3:ec:b4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9239EE97C6B39C11732B535303D9279F94576DA0
        Validity
            Not Before: Mar  5 17:44:16 2024 GMT
            Not After : Mar  4 17:49:16 2025 GMT
        Subject: CN=F79B30785C414999FC3778323C8D83831DF381C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:dc:8c:63:0f:2b:06:78:12:c8:94:00:7a:
                    47:f9:e4:42:11:77:b0:d0:7a:0e:4c:c3:b0:ec:39:
                    c3:49:aa:c0:09:60:99:db:50:fc:50:e6:f2:23:76:
                    56:2a:38:3e:59:cf:67:6c:44:79:c5:c0:b6:b8:71:
                    07:4f:df:e9:f2:49:9d:db:4f:c4:95:b3:95:2e:07:
                    35:14:3d:34:41:aa:dd:c6:c6:62:0d:1c:6a:e9:7c:
                    84:06:f4:8b:ad:71:e5:39:f6:f4:02:e5:58:7d:99:
                    62:4d:10:a5:ff:4c:dc:42:0d:14:28:63:6e:84:92:
                    30:5e:ad:21:e1:88:93:d9:a6:11:e3:77:39:f2:ba:
                    f3:92:4b:c4:05:05:77:35:a9:7e:43:e7:f3:6f:66:
                    45:bc:f1:b9:1c:67:a9:ef:bd:a9:37:dd:53:78:7b:
                    8b:04:a5:6b:92:2d:db:56:45:32:f0:94:97:63:4a:
                    78:aa:e9:26:d4:54:61:18:82:d8:cc:9d:b2:3b:5b:
                    f7:9c:f5:30:5e:5b:9c:a8:4a:17:cd:12:4e:bd:e4:
                    5a:6f:64:36:82:43:6c:24:37:96:43:db:a6:3d:29:
                    95:1e:77:3d:64:05:2b:54:52:30:7a:c1:56:d1:f9:
                    db:07:f2:02:1e:56:59:b9:1a:11:e2:4f:99:a4:aa:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9B:30:78:5C:41:49:99:FC:37:78:32:3C:8D:83:83:1D:F3:81:C7
            X509v3 Authority Key Identifier:
                keyid:92:39:EE:97:C6:B3:9C:11:73:2B:53:53:03:D9:27:9F:94:57:6D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/3230302e31342e33342e302f32342d3234203d3e2036313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:06:19:d3:47:9f:5e:c8:d3:76:ad:ed:64:79:cb:77:9a:cd:
         ef:e7:ae:3f:be:0a:0c:d0:88:68:f1:c4:90:57:a0:5f:da:4c:
         33:32:e0:57:1b:82:01:fe:8a:cd:38:5a:94:f0:5a:87:71:1a:
         0d:21:58:2e:4a:8d:c3:32:61:fd:a1:cd:aa:32:06:5e:e2:83:
         be:9a:c9:a0:46:10:f6:20:66:80:da:b9:35:3d:16:4a:8e:8b:
         1f:de:94:4a:87:d5:37:9f:6b:02:da:85:4b:c2:c7:e1:f4:04:
         c8:1d:e8:a5:75:80:37:bd:c5:be:08:60:18:96:25:61:94:01:
         81:87:83:33:c8:19:bc:9a:b9:b8:39:7b:db:1f:c2:c4:a0:1d:
         81:ed:64:b1:b8:08:25:24:8f:3e:01:17:48:36:14:a0:25:19:
         5c:6c:70:0d:8b:1b:82:05:4b:eb:0a:01:0f:c0:a5:3c:11:6a:
         31:fd:9e:7d:ac:b5:c1:7c:61:7e:11:fd:ba:df:3c:d4:be:8c:
         5a:83:90:d7:67:a6:96:e1:76:0a:e7:26:82:81:bc:16:42:c5:
         dc:ca:93:6f:71:62:25:c4:50:ba:b3:56:4e:97:d4:e2:96:a4:
         4e:83:65:2a:78:c1:04:0b:cb:06:41:fa:0e:0c:b0:12:9b:9e:
         fe:6b:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org