Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39332e302f32342d3234203d3e20323637383139.roa
File:                     3230302e36332e39332e302f32342d3234203d3e20323637383139.roa (raw, json)
Hash identifier:          W53Bb8iAng+nGrz2BAEs/gl4OWHfjkEkJjOZECyqd04=
Subject key identifier:   A8:98:F7:6E:AF:18:93:4D:95:42:CB:92:1D:A9:C8:C5:0D:01:48:B7
Certificate issuer:       /CN=89FBB987F4762D9626E55719EF46050943DEE51C
Certificate serial:       14649DCEA359EAD96AAD6AF983A63589DF71E77D
Authority key identifier: 89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39332e302f32342d3234203d3e20323637383139.roa
Signing time:             Tue 05 Mar 2024 18:07:51 +0000
ROA not before:           Tue 05 Mar 2024 18:02:51 +0000
ROA not after:            Tue 04 Mar 2025 18:07:51 +0000
asID:                     267819
IP address blocks:        200.63.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:64:9d:ce:a3:59:ea:d9:6a:ad:6a:f9:83:a6:35:89:df:71:e7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FBB987F4762D9626E55719EF46050943DEE51C
        Validity
            Not Before: Mar  5 18:02:51 2024 GMT
            Not After : Mar  4 18:07:51 2025 GMT
        Subject: CN=A898F76EAF18934D9542CB921DA9C8C50D0148B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:60:ad:ca:7b:11:2d:9d:2c:45:84:0b:93:
                    14:a3:3f:d0:7f:e8:a7:69:1a:97:d2:7b:3b:7b:85:
                    9b:1b:a3:2e:2c:53:06:ca:a0:b2:d6:7f:7b:29:bc:
                    5a:49:d3:a9:e6:6b:01:3a:7c:06:79:d6:f5:97:0d:
                    05:b8:67:e5:3e:02:9b:a6:5e:79:87:af:53:66:52:
                    ca:48:23:e9:d7:bc:ba:ba:f1:4d:2d:d0:1f:08:f4:
                    b3:b6:e9:a1:af:69:53:89:2d:ae:08:94:d4:21:0c:
                    d4:c6:e2:76:6d:b0:22:70:ba:ed:c9:b7:d9:0e:7d:
                    9b:38:9c:a9:9d:9a:29:eb:74:e1:c8:5c:26:33:d0:
                    14:ac:b3:ef:41:80:77:e8:12:10:cf:af:8e:41:24:
                    c4:2c:9f:cc:3d:bd:dc:71:6b:f9:68:04:19:1c:49:
                    15:b3:d9:d2:6a:dd:61:6d:07:96:80:55:56:fc:d8:
                    57:72:ee:af:b6:5b:1b:2e:97:51:bc:a7:29:e7:59:
                    92:d4:d6:e7:c5:c5:22:c5:7a:c8:12:b0:68:39:17:
                    d2:be:29:be:2f:8c:5c:fc:67:b1:0c:4f:5f:cd:b4:
                    54:1e:37:18:d0:1a:d4:c9:a4:13:27:a9:07:74:29:
                    3b:7d:5e:02:f4:b7:00:d6:29:c1:1a:ea:54:4e:2a:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:98:F7:6E:AF:18:93:4D:95:42:CB:92:1D:A9:C8:C5:0D:01:48:B7
            X509v3 Authority Key Identifier:
                keyid:89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39332e302f32342d3234203d3e20323637383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:39:75:64:19:f9:9b:1c:5c:ca:8c:c9:ef:db:86:f7:e3:99:
         9e:39:c2:3a:31:f2:ff:b9:c7:8e:80:ec:02:58:16:b8:48:c7:
         c1:17:45:11:e7:76:87:7e:d0:f1:2b:1e:4f:a1:67:97:9f:42:
         08:db:98:a5:28:20:26:8b:f7:f5:85:c4:72:ab:ce:2f:f8:1a:
         07:1f:8a:fb:48:c0:31:5e:e4:ff:d7:3c:08:8d:b2:48:36:38:
         80:7b:75:0b:51:ad:fc:25:ac:c4:9f:65:76:f4:db:3d:48:83:
         e4:a6:77:ea:27:3b:9d:5e:2d:30:74:17:54:2d:a3:90:ad:85:
         49:f4:77:9f:65:9a:c1:90:7c:f1:9d:80:d6:bb:5c:01:31:85:
         46:98:92:e6:4e:eb:42:14:d4:aa:f4:be:34:55:16:fe:d7:bd:
         ae:d6:cf:bf:54:7d:a0:48:b2:30:18:c1:71:04:22:a5:5d:9c:
         55:e7:13:e1:48:5f:a3:39:f1:cb:d9:95:da:28:c3:f6:d3:0d:
         a3:24:32:98:8e:21:02:cc:e6:df:26:8d:c7:ae:47:46:28:97:
         3e:04:cf:6b:2a:ec:2b:73:c6:3c:78:24:c9:06:60:a5:28:b9:
         66:b4:7e:39:39:a2:f3:2e:a5:75:c5:12:ed:ad:19:35:12:7a:
         da:24:f5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:15 2024 by rpki-client on console-ams.rpki-client.org