Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137312e302f32342d3234203d3e203237393536.roa
File:                     3230302e3131352e3137312e302f32342d3234203d3e203237393536.roa (raw, json)
Hash identifier:          TTZxjbyLJFEvUmGVf3mxpy6WgT76+eumfqsDF+dm4qM=
Subject key identifier:   6B:10:10:2E:D4:72:5D:5A:6C:7F:A4:06:1F:A0:8A:7C:8B:30:63:CC
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       23EF66AFE112DA7F776D4189FA7A7551F754A1AC
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137312e302f32342d3234203d3e203237393536.roa
Signing time:             Wed 11 Sep 2024 14:35:02 +0000
ROA not before:           Wed 11 Sep 2024 14:30:02 +0000
ROA not after:            Wed 10 Sep 2025 14:35:02 +0000
asID:                     27956
IP address blocks:        200.115.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ef:66:af:e1:12:da:7f:77:6d:41:89:fa:7a:75:51:f7:54:a1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Sep 11 14:30:02 2024 GMT
            Not After : Sep 10 14:35:02 2025 GMT
        Subject: CN=6B10102ED4725D5A6C7FA4061FA08A7C8B3063CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:af:7c:f1:08:ea:51:2b:d4:fd:4b:9d:4c:
                    5a:e5:81:60:5d:df:82:77:7f:7d:53:63:cf:88:d6:
                    8c:31:6b:74:05:40:51:b3:f7:c9:cc:99:72:fe:e0:
                    27:34:34:42:26:ad:93:2a:f4:01:ce:0a:50:3b:f4:
                    05:5b:27:4b:11:58:5c:78:09:e0:b4:35:36:6b:62:
                    8a:73:7b:f3:f6:fb:ce:2a:7e:6a:0b:cf:43:81:26:
                    4d:8c:87:df:cd:33:f0:64:47:e7:dc:92:83:c6:8f:
                    ae:ca:a1:2a:d6:51:86:79:fd:4c:da:0e:64:fc:66:
                    ff:96:a9:63:24:0b:15:b9:4e:c7:61:40:b4:1b:d3:
                    c5:1d:8a:90:51:32:ae:53:c8:ae:d2:64:5f:c4:6e:
                    72:4f:86:a9:b5:17:b9:01:09:63:a3:a4:90:f5:49:
                    e7:86:ae:e5:22:20:57:d1:d3:96:75:af:d9:9a:cd:
                    28:b4:7d:93:bb:84:15:bc:bb:bd:4d:69:c8:25:07:
                    3e:ed:2a:7d:14:6b:64:be:f7:79:26:2a:c3:c9:e9:
                    eb:6c:8e:6a:d5:e8:82:89:9d:8f:8a:ba:3a:6c:22:
                    ca:d2:e9:7f:e8:65:a1:71:60:8e:54:22:cf:c3:fa:
                    da:08:88:1e:17:da:66:f1:75:3b:6b:f8:41:3f:a9:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:10:10:2E:D4:72:5D:5A:6C:7F:A4:06:1F:A0:8A:7C:8B:30:63:CC
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137312e302f32342d3234203d3e203237393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:08:40:4f:a0:42:34:ec:4c:bb:9a:f9:61:ef:4e:53:f5:
         bb:1f:21:1e:de:26:75:46:8b:96:41:d9:bf:99:d4:a4:6c:64:
         dd:bd:c9:d7:ad:cd:fb:78:2a:ee:a6:9b:d8:f3:bf:5b:c1:00:
         f4:4f:40:6b:6f:91:ce:a3:f1:16:53:25:34:71:a8:43:c1:40:
         62:ca:62:50:2c:23:a4:3f:28:95:15:e1:88:e5:7c:94:66:5f:
         6a:32:81:8f:99:4f:36:47:c4:ec:15:b0:cd:bb:58:c8:54:03:
         38:45:74:8e:77:67:b7:79:ec:01:4b:b8:35:47:53:4f:9d:0e:
         f8:0a:8f:d9:21:21:ab:85:1a:d1:15:2b:0d:0a:8b:fd:8f:1c:
         ed:28:d4:8c:19:21:40:37:ce:aa:4a:da:f8:28:f9:42:fb:54:
         f6:36:23:24:9e:d5:95:30:f1:f2:a3:08:16:8f:7a:ff:a9:a5:
         e0:14:9a:24:53:df:4b:6a:8d:4c:b8:44:67:74:14:c8:2b:2a:
         9c:72:43:8f:fb:a5:42:c1:5a:3f:ab:2d:21:de:e6:e7:9c:e3:
         1e:af:ea:ba:67:20:b8:81:74:4b:80:f3:5e:7f:79:b9:37:4c:
         10:1d:14:35:e3:d3:6c:88:ee:fd:b3:a0:8a:e6:19:b8:9e:cc:
         93:52:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org