Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38332e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38332e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          ggC0R5MAEdrNvDNrSXVLdB6/nOoAhVhR+OVH97jg2KA=
Subject key identifier:   EF:FA:02:3B:1F:1A:CE:89:74:D0:93:7C:80:56:E4:04:98:39:1C:9E
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       59D7B4933669C9A781571351D82EE7399F84871A
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38332e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 17 Sep 2024 00:40:00 +0000
ROA not before:           Tue 17 Sep 2024 00:35:00 +0000
ROA not after:            Tue 16 Sep 2025 00:40:00 +0000
asID:                     28065
IP address blocks:        200.114.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d7:b4:93:36:69:c9:a7:81:57:13:51:d8:2e:e7:39:9f:84:87:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Sep 17 00:35:00 2024 GMT
            Not After : Sep 16 00:40:00 2025 GMT
        Subject: CN=EFFA023B1F1ACE8974D0937C8056E40498391C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:f1:c9:9c:33:01:99:39:dc:8d:96:fd:ea:
                    a8:9e:aa:c0:d5:80:8b:ec:b3:18:ea:41:2b:51:14:
                    f3:d4:32:45:b5:56:59:74:a8:5d:c9:07:0a:b7:26:
                    98:7f:52:9d:8f:0f:64:9a:d0:4f:55:74:50:43:34:
                    69:1a:b0:43:35:98:2f:ce:80:0d:4f:cf:b2:3e:a2:
                    db:e8:22:88:16:12:f7:d3:6e:ce:3b:c9:14:b1:b7:
                    73:6f:19:b4:c9:e9:10:38:2d:f4:40:89:87:09:d3:
                    93:41:72:3e:cc:8e:c3:05:89:95:27:20:93:43:58:
                    6a:47:47:6d:b0:ec:3a:38:07:81:96:43:f2:fe:06:
                    e8:fd:b2:1a:18:b5:d8:29:99:60:98:3d:17:08:99:
                    15:5a:43:85:dc:73:ac:1a:80:35:bf:1e:aa:74:45:
                    be:c7:c2:98:8a:b4:7b:de:8d:e1:81:88:34:6a:50:
                    3d:51:70:aa:73:42:a2:9f:fe:16:62:e1:a4:46:07:
                    59:9c:3d:a1:b6:70:87:c8:fe:21:94:33:9f:74:96:
                    92:25:0f:fa:0e:b5:d9:bf:1d:69:c9:29:e7:25:51:
                    86:6b:1d:c7:00:ab:fb:5e:f4:a6:87:22:0f:da:73:
                    0d:57:77:b4:04:ad:e9:53:4f:38:28:de:ee:25:c7:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FA:02:3B:1F:1A:CE:89:74:D0:93:7C:80:56:E4:04:98:39:1C:9E
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38332e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:9f:9d:dd:be:d8:e6:90:e9:98:3d:49:81:04:0e:08:36:01:
         94:d9:65:d0:3b:c2:f7:93:7c:c1:fc:af:5b:f9:c1:aa:6b:d2:
         00:28:b4:70:a6:12:c8:79:59:8f:ec:97:41:46:59:b5:86:31:
         eb:16:72:1a:0c:ba:69:bf:ef:e2:fc:ce:9b:dd:a3:8d:b6:c7:
         dd:3c:5b:bc:0b:0b:65:8d:a4:b7:e4:59:4f:78:0f:46:aa:e7:
         c8:cc:1f:90:cc:9f:39:bc:ae:aa:68:db:76:a8:ae:40:69:45:
         20:e4:da:cc:b4:45:52:52:00:5b:9a:90:45:b4:49:1c:fc:22:
         64:29:97:f0:85:da:d8:7e:4d:e7:13:5b:14:8e:c8:76:d6:a5:
         fb:21:cf:be:41:d4:7c:4c:51:7c:4c:6b:e4:b3:78:19:2d:5c:
         d1:9c:83:12:71:6e:c9:5f:9e:79:82:dd:60:06:06:7b:f5:bc:
         6c:42:6f:7b:6d:63:13:6e:d4:d7:19:16:bf:97:45:00:9c:27:
         65:e9:56:02:77:97:43:1b:be:24:48:24:c8:b5:03:a3:ec:38:
         bf:fe:62:cc:03:16:a3:56:4a:4b:8f:f9:7f:c4:7a:11:0a:f1:
         aa:34:24:94:57:71:99:4c:64:ef:93:7a:56:49:fc:4a:d7:05:
         01:97:df:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org