Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32332d3233203d3e203238303635.roa
File:                     3230302e3131342e38322e302f32332d3233203d3e203238303635.roa (raw, json)
Hash identifier:          WN54h92tJrWuTFcCGS0qfyLOq2D7kXWG3+SsVq62Gcs=
Subject key identifier:   9C:73:CA:85:2A:F2:88:EE:F6:78:41:55:E3:01:3A:85:97:05:B7:E9
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       0CE2D760EF072BCD73960C6FF832AD075B53A291
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32332d3233203d3e203238303635.roa
Signing time:             Mon 16 Sep 2024 21:05:00 +0000
ROA not before:           Mon 16 Sep 2024 21:00:00 +0000
ROA not after:            Mon 15 Sep 2025 21:05:00 +0000
asID:                     28065
IP address blocks:        200.114.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e2:d7:60:ef:07:2b:cd:73:96:0c:6f:f8:32:ad:07:5b:53:a2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Sep 16 21:00:00 2024 GMT
            Not After : Sep 15 21:05:00 2025 GMT
        Subject: CN=9C73CA852AF288EEF6784155E3013A859705B7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:aa:da:96:59:6c:4f:8d:99:e2:6a:72:76:
                    d8:63:4a:b3:cf:1f:20:b5:b4:73:89:33:7c:b6:4a:
                    8d:bc:62:79:c9:a8:f2:0b:3d:4d:87:58:8f:e8:44:
                    d9:bc:2f:43:9d:78:c7:4b:57:f7:1e:ca:66:ef:df:
                    5a:e6:bd:30:a5:71:45:3c:0d:ae:24:7c:09:66:e0:
                    47:aa:67:85:b3:62:0f:6d:b9:d7:f6:6e:c5:8a:bb:
                    ef:b5:00:d4:ea:f0:ba:07:5f:a9:4f:f9:42:c9:80:
                    22:08:c4:e5:17:da:4d:a3:5b:ba:3f:e9:2b:56:6b:
                    a1:4e:f8:0f:0c:b4:c5:69:c2:ae:b9:a1:60:22:f7:
                    94:d1:00:78:80:9e:f0:3f:a2:7d:58:10:b9:cf:1d:
                    f1:20:39:6e:b9:27:e0:6e:69:bc:bd:c2:4a:04:bc:
                    6f:60:8d:28:cd:82:d3:8b:12:e6:a8:ff:b7:97:87:
                    02:e8:0f:c5:1f:e1:4e:90:9c:3a:bb:02:54:ad:78:
                    30:0e:6e:58:be:86:9e:86:2e:38:d8:f6:58:17:50:
                    19:df:f6:8f:ee:7a:15:ba:58:5e:58:fd:1f:d3:5e:
                    ec:22:4a:93:cd:c6:fa:46:32:6e:65:11:fa:27:3d:
                    c5:3d:62:df:41:79:6a:96:80:14:ec:38:5f:e9:92:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:73:CA:85:2A:F2:88:EE:F6:78:41:55:E3:01:3A:85:97:05:B7:E9
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32332d3233203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:11:ff:d7:6d:dc:5e:0a:96:a3:50:51:f4:1a:36:c3:b9:d4:
         d1:ae:eb:4e:db:a6:c7:63:e7:27:59:4f:c4:45:65:5d:bf:08:
         1a:27:b8:1d:bb:fd:bf:be:b5:ec:10:4e:0e:3a:19:4e:ce:f9:
         4d:9e:21:fc:ae:61:07:b8:4b:9b:28:b7:54:f9:e6:0a:5d:87:
         56:33:bc:29:01:eb:52:3c:9a:1c:ea:2f:59:45:d3:d2:e3:6e:
         6b:6e:67:4f:40:96:fd:3e:18:16:0a:79:90:e4:d7:3d:01:31:
         a2:49:cd:f5:74:2e:37:be:4e:9d:fd:09:be:8d:69:70:be:d8:
         48:0d:38:3e:75:23:aa:f4:d0:fc:12:5e:53:fc:9f:99:77:63:
         06:7b:c2:d7:54:92:18:7d:de:be:22:3c:3a:40:66:04:78:33:
         7b:91:de:8b:6a:7b:f7:5f:3a:c0:e2:75:0d:15:d4:be:b2:e4:
         49:d9:1d:3c:56:34:1d:bf:6b:32:54:da:5e:8f:d8:ce:80:4f:
         19:99:d5:12:10:7c:3c:b2:e1:51:cf:cd:37:af:9d:5c:15:40:
         7c:05:51:65:8e:c0:d9:29:d4:8d:6b:fb:07:15:62:1c:6c:93:
         d8:5d:8e:dc:f8:15:bc:2c:b9:b2:47:a8:03:cc:ed:23:00:06:
         0d:14:64:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org