Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38372e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38372e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          3BpG7e7fh1mkmuI53JH8fxyXl7sOxeWJgQVQEHob0+E=
Subject key identifier:   AA:B2:CE:F2:21:90:94:75:56:41:CD:7F:35:9A:9F:E9:4C:FE:D5:E1
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       14C662D350965D7FA88845A39D667AD3ED01BF21
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38372e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 17 Sep 2024 00:40:00 +0000
ROA not before:           Tue 17 Sep 2024 00:35:00 +0000
ROA not after:            Tue 16 Sep 2025 00:40:00 +0000
asID:                     28065
IP address blocks:        200.114.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Oct 2024 18:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c6:62:d3:50:96:5d:7f:a8:88:45:a3:9d:66:7a:d3:ed:01:bf:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Sep 17 00:35:00 2024 GMT
            Not After : Sep 16 00:40:00 2025 GMT
        Subject: CN=AAB2CEF2219094755641CD7F359A9FE94CFED5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:c8:a6:61:f1:64:31:af:93:1b:c2:13:6e:
                    16:1b:dc:ef:92:6c:c4:e4:5a:58:31:66:9a:d4:8c:
                    b3:d1:2a:09:97:58:29:e0:d0:17:c8:0c:b3:ba:7c:
                    f0:1b:e3:52:44:a7:2b:84:4a:29:16:f1:03:bd:18:
                    45:cf:42:b6:3f:a0:62:2f:c7:04:cb:28:0f:bd:04:
                    5c:5a:a9:f2:e7:29:0b:da:d5:8b:88:c9:6e:c7:bb:
                    a4:d0:eb:c6:e9:cc:0e:3a:77:4d:0a:c9:d4:be:09:
                    74:47:8b:de:69:4c:22:0b:05:b8:36:a7:00:6e:59:
                    60:f4:37:9f:39:a7:b3:80:ca:0e:b8:2e:d5:4a:fc:
                    15:75:aa:7e:98:0a:f4:57:35:9a:4e:4f:43:a5:a4:
                    6b:b1:f8:96:9a:11:74:56:33:1d:c2:0e:64:a0:19:
                    37:ab:68:02:0a:0c:34:31:e6:70:cd:ba:e3:58:ea:
                    20:61:68:48:5a:69:94:df:39:86:6c:69:f6:09:d9:
                    c7:fa:fd:e9:94:d2:bd:24:d9:93:77:ae:de:2c:3a:
                    6c:1c:f3:e9:fe:82:18:4b:87:57:75:b4:fa:fe:eb:
                    0b:55:7f:a0:f7:5e:4e:6c:c5:56:77:4f:c0:06:58:
                    c3:32:dd:9f:4a:45:f4:3c:cd:db:8a:9d:2c:83:38:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B2:CE:F2:21:90:94:75:56:41:CD:7F:35:9A:9F:E9:4C:FE:D5:E1
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38372e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:b0:ef:4b:e4:b6:ce:18:c6:8c:1c:d6:d9:48:83:16:08:
         db:cc:78:f9:a1:b8:e7:e1:fc:7c:84:99:06:2e:c9:51:30:d9:
         f5:b2:1d:f4:8e:82:af:c9:0a:5c:24:1d:a3:94:50:ac:30:9a:
         bc:91:66:81:a5:cb:a5:0b:63:99:1c:5f:8b:62:b8:6c:2f:f1:
         12:1b:98:23:6f:91:ee:21:09:04:7e:08:9e:ed:94:81:0c:45:
         42:06:76:3a:5b:4f:d1:96:b3:4a:11:11:17:1a:50:cd:07:21:
         a6:ed:18:cc:0a:1f:fc:a8:00:65:25:43:d5:f3:73:7e:75:51:
         2b:5d:61:71:1e:b5:9e:35:52:8c:5b:a9:0a:eb:8d:3a:92:8e:
         30:a3:5f:a1:7f:17:66:4d:05:46:28:49:68:79:6e:3d:15:fc:
         f9:d8:92:ea:3b:bc:10:33:8c:d2:db:c1:84:cf:be:5d:70:31:
         54:ce:64:c7:b2:b4:95:0e:43:b8:eb:55:ab:30:ad:32:bf:33:
         6b:3e:3b:dc:23:66:ae:7f:5d:30:5f:a6:99:27:08:30:b9:5f:
         62:ac:fb:b5:87:c1:df:94:e5:b4:e4:ff:8d:7c:eb:ef:5c:ba:
         70:e4:9e:da:79:55:11:ff:6e:59:52:3a:95:d6:8b:ba:77:f6:
         ab:7b:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 05:53:16 2024 by rpki-client on console-ams.rpki-client.org