Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230302e3132342e3234302e302f32302d3234203d3e203237373338.roa
File:                     3230302e3132342e3234302e302f32302d3234203d3e203237373338.roa (raw, json)
Hash identifier:          h3vZl/jsC/x0vpQ9kbbZsFZivPfuiiLOafDSrl22yis=
Subject key identifier:   F9:19:77:C6:EF:14:8E:7F:75:BF:08:6F:6A:94:4C:2D:FB:5C:84:E0
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       6C78B876A3A5B093F6C279A9339E847CD079D6AA
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230302e3132342e3234302e302f32302d3234203d3e203237373338.roa
Signing time:             Tue 05 Mar 2024 18:19:13 +0000
ROA not before:           Tue 05 Mar 2024 18:14:13 +0000
ROA not after:            Tue 04 Mar 2025 18:19:13 +0000
asID:                     27738
IP address blocks:        200.124.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:78:b8:76:a3:a5:b0:93:f6:c2:79:a9:33:9e:84:7c:d0:79:d6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Mar  5 18:14:13 2024 GMT
            Not After : Mar  4 18:19:13 2025 GMT
        Subject: CN=F91977C6EF148E7F75BF086F6A944C2DFB5C84E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:7f:fd:43:3e:af:96:a9:6a:84:a2:a9:00:
                    6b:02:68:d0:89:55:5f:fa:96:32:53:be:f8:72:ae:
                    d4:31:9a:5c:5f:c7:52:7a:a2:f1:8e:12:03:c1:aa:
                    04:f2:7f:d4:99:32:ef:52:63:a7:6d:36:75:0c:8f:
                    0c:66:56:1e:cc:a5:04:3d:a7:e5:93:3a:f2:c6:26:
                    2c:2f:26:87:63:be:99:f8:20:5c:a5:b4:5a:9c:16:
                    63:05:7a:a1:3d:37:53:cf:6a:8f:86:f9:d3:c4:51:
                    92:c3:06:c4:6b:16:15:bd:77:07:26:34:73:6a:8d:
                    41:e1:d6:0c:3d:08:d8:5a:d5:8a:d1:2e:46:15:f2:
                    da:d1:19:b2:7d:52:96:6c:6f:04:3b:3b:db:ac:11:
                    19:b5:a5:a0:75:1c:9d:d5:c9:8d:0a:03:ed:fa:c7:
                    bd:2c:57:a8:92:9b:2c:a0:74:e7:75:3b:c2:1e:ba:
                    8b:7d:38:71:4c:7d:0c:57:77:42:b8:e2:bc:3f:03:
                    57:91:fa:3b:02:87:f5:18:44:9f:1c:5a:4d:f5:b0:
                    cc:7e:8d:8d:fa:64:b8:20:5f:a3:cd:7b:de:62:65:
                    cc:d1:d0:86:3f:78:60:fa:5b:f3:0b:80:66:11:37:
                    52:2e:ae:40:20:e6:5f:71:83:d7:4a:bf:88:52:65:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:19:77:C6:EF:14:8E:7F:75:BF:08:6F:6A:94:4C:2D:FB:5C:84:E0
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230302e3132342e3234302e302f32302d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:5e:42:52:7e:fa:1f:c6:68:f3:a4:16:5a:09:9e:a8:8a:04:
         98:6d:ef:80:3f:99:f2:d8:bb:99:05:8d:73:55:40:2d:99:3d:
         50:7c:1b:67:ef:7e:4a:f1:aa:b3:88:d5:8a:13:94:8d:a1:9b:
         38:3c:18:d8:93:79:6d:5c:8c:46:77:9a:3b:2a:6d:b2:53:09:
         ab:e4:1f:a1:cb:4d:4d:2a:be:38:33:8d:9f:46:66:fb:f0:91:
         03:5b:6c:14:59:64:58:f3:80:f4:bc:89:d2:80:ec:49:1b:3a:
         f9:0e:6a:d3:09:d4:8d:ce:fa:cb:94:a7:ab:33:c1:3e:4d:d4:
         24:62:ca:9c:27:86:ec:f6:96:67:f2:39:0d:18:df:14:8c:5b:
         ca:16:9f:3d:60:a3:a5:cd:c1:c0:79:ae:46:d2:d9:07:94:d6:
         31:39:df:b1:be:8e:bc:bf:8a:1f:e6:b9:e8:d2:90:5e:f6:3d:
         ab:87:5e:29:20:f1:b4:54:52:73:82:20:13:e2:ff:81:bc:a6:
         47:8c:22:b3:e8:c8:90:e2:3b:cf:fb:e2:a4:4e:50:92:8b:60:
         d6:77:25:3c:89:1b:f6:16:47:5f:6f:0f:8a:4a:0a:fe:93:72:
         12:c5:95:0e:4d:bc:e6:b7:b6:03:6a:d3:96:c5:3c:f3:ab:92:
         79:ea:b9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org