Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39322e302f32342d3234203d3e2037333033.roa
File:                     3230302e36332e39322e302f32342d3234203d3e2037333033.roa (raw, json)
Hash identifier:          KKnISqv6NTANfJdWjH/3CPer/dM1H2+6GqAh+R4Qs88=
Subject key identifier:   9C:08:31:49:0B:76:7F:8C:8D:96:9A:4D:E3:DC:C6:54:5A:34:60:51
Certificate issuer:       /CN=89FBB987F4762D9626E55719EF46050943DEE51C
Certificate serial:       10D4B30CEE5436C95E5355FCD0BF500D7AEB8500
Authority key identifier: 89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39322e302f32342d3234203d3e2037333033.roa
Signing time:             Tue 05 Mar 2024 18:07:49 +0000
ROA not before:           Tue 05 Mar 2024 18:02:49 +0000
ROA not after:            Tue 04 Mar 2025 18:07:49 +0000
asID:                     7303
IP address blocks:        200.63.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d4:b3:0c:ee:54:36:c9:5e:53:55:fc:d0:bf:50:0d:7a:eb:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FBB987F4762D9626E55719EF46050943DEE51C
        Validity
            Not Before: Mar  5 18:02:49 2024 GMT
            Not After : Mar  4 18:07:49 2025 GMT
        Subject: CN=9C0831490B767F8C8D969A4DE3DCC6545A346051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:33:bb:0a:2a:0e:03:03:d4:27:ad:88:1a:
                    29:ff:9e:3c:1f:37:27:e9:95:1d:13:2f:5b:8d:89:
                    1a:66:f4:19:0d:86:db:06:80:f8:79:f2:3a:4b:86:
                    f8:71:49:55:33:3f:b4:01:a4:ef:5c:0a:b5:1f:bb:
                    09:76:d6:ad:63:75:7c:5b:57:84:c3:58:80:bf:e4:
                    60:09:2b:52:37:b7:c1:a9:26:9f:9e:49:c0:74:87:
                    de:e2:7c:de:52:ec:fe:17:5c:b8:c5:06:42:1b:b8:
                    dc:10:f1:19:77:c6:4c:56:5f:6d:b5:78:d0:75:49:
                    06:6d:c9:95:93:ce:20:e2:5d:75:17:d4:8f:9d:87:
                    b9:bf:ee:e7:ad:87:85:6a:04:58:62:76:76:f8:97:
                    e1:81:74:f6:be:d4:79:13:20:f1:28:f5:af:53:b4:
                    6e:a8:d8:a0:3d:82:d0:b6:23:7d:dd:6b:8b:ba:7a:
                    91:03:7b:bb:8b:0f:a6:76:29:cb:67:af:9c:56:89:
                    21:66:b4:91:9e:07:02:72:bd:27:02:ce:75:95:70:
                    ea:f2:f2:a3:47:70:07:f0:cc:2e:c7:e1:03:3b:50:
                    31:ec:f3:1d:c1:59:4c:cc:c4:a5:c5:de:5f:e8:fd:
                    6d:61:88:b8:f6:6c:51:c1:46:9c:c1:ec:b0:c9:31:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:08:31:49:0B:76:7F:8C:8D:96:9A:4D:E3:DC:C6:54:5A:34:60:51
            X509v3 Authority Key Identifier:
                keyid:89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39322e302f32342d3234203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:73:97:4d:dc:6f:0c:77:40:a2:fb:62:82:2f:9b:a7:1c:
         5c:3f:4f:d6:8b:41:8b:40:ca:af:f3:1b:0c:ed:00:23:bd:9f:
         df:a3:59:ec:0f:7a:06:4b:a4:1e:28:f0:d7:4d:fa:d5:9e:6f:
         da:ec:d0:68:75:02:47:10:65:5c:99:4e:0f:a1:c2:b8:f8:b8:
         7a:09:41:94:21:60:81:c4:64:3b:36:6c:30:56:a5:98:79:02:
         ea:bc:c7:df:db:3a:7c:31:0e:1e:a6:f6:fa:2f:12:69:ed:39:
         9b:31:89:a1:59:44:5f:29:06:73:1d:20:43:8d:46:6b:c4:66:
         09:37:d3:41:4b:a3:c1:9b:0c:fa:2d:a9:67:b4:70:9a:5b:a1:
         b5:73:07:c7:f8:64:80:be:2a:cd:51:36:2e:fe:cc:ef:34:8f:
         12:8c:4c:dc:dd:86:79:04:34:d8:2b:b7:82:94:05:b4:59:58:
         1e:5f:9b:c1:db:50:58:ee:f6:7a:60:d9:6d:45:90:de:11:48:
         c8:54:ff:d6:20:72:ff:b6:db:a3:34:e0:d4:0b:9a:43:a2:6c:
         45:1a:62:40:9f:74:19:85:bf:96:ef:cd:4f:79:69:5a:7e:4e:
         dc:5c:cf:82:10:12:85:fe:6b:de:76:e0:d1:80:76:2a:f1:90:
         d8:4c:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:15 2024 by rpki-client on console-ams.rpki-client.org