Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203631343638.roa
File:                     3230302e392e39362e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          qD8P0KB0rlPnbl+l1K+hNS2M2VNAcPyTa5P4zHuA1aQ=
Subject key identifier:   AF:33:6E:2A:7F:5C:FE:87:4E:68:1C:16:20:95:D4:EF:0C:79:77:15
Certificate issuer:       /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial:       0E8C9AF6A77C99856CA461F3FA3F6CAC0D351A80
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:08:35 +0000
ROA not before:           Tue 05 Mar 2024 18:03:35 +0000
ROA not after:            Tue 04 Mar 2025 18:08:35 +0000
asID:                     61468
IP address blocks:        200.9.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8c:9a:f6:a7:7c:99:85:6c:a4:61:f3:fa:3f:6c:ac:0d:35:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
        Validity
            Not Before: Mar  5 18:03:35 2024 GMT
            Not After : Mar  4 18:08:35 2025 GMT
        Subject: CN=AF336E2A7F5CFE874E681C162095D4EF0C797715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:d5:aa:d9:ee:e7:06:ad:66:5c:2d:e7:e9:
                    28:7d:cd:80:73:12:e9:01:4f:58:5d:a7:18:46:ab:
                    16:d6:92:cd:25:91:4f:8f:0c:2a:63:f0:99:0e:7e:
                    c1:4f:5a:95:fa:83:f9:0a:02:3d:db:e2:b6:20:2c:
                    a3:02:b8:f3:ab:53:d0:87:dc:9c:5a:7e:01:87:a8:
                    a4:22:1c:9e:cd:7e:fc:21:55:8d:87:44:23:89:36:
                    5e:49:bc:cd:e9:68:0f:fd:4b:1f:c7:eb:1d:18:30:
                    c5:dc:79:d6:f4:da:d2:bf:70:d0:c2:3d:9c:a6:b3:
                    b6:d3:81:4f:17:12:35:d8:27:4f:9d:0b:1c:35:69:
                    c4:d5:57:3a:2a:a4:3c:c6:b6:16:75:ed:df:78:2f:
                    22:20:1e:01:77:0d:15:1b:53:a6:4e:8b:c6:c8:1e:
                    95:57:3c:12:91:b8:ba:cf:2e:ea:31:df:c6:39:ae:
                    e4:2c:96:80:40:6f:aa:b2:ac:5e:70:08:fb:02:3b:
                    98:dc:3c:66:e3:b5:95:02:07:a1:65:d5:06:53:43:
                    4d:44:89:af:2c:4d:b0:cc:ee:ef:c4:7a:d9:c2:4c:
                    d8:c4:03:fa:6a:65:da:85:0f:60:a2:84:39:9d:ba:
                    7c:7d:5e:b4:d6:16:e3:a0:8c:0f:68:1c:02:24:c1:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:33:6E:2A:7F:5C:FE:87:4E:68:1C:16:20:95:D4:EF:0C:79:77:15
            X509v3 Authority Key Identifier:
                keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:30:f8:27:96:4a:39:e7:94:ff:c6:6f:33:24:dc:79:e9:
         08:06:98:f5:16:a0:8a:d8:30:ce:66:91:5e:4d:61:06:78:03:
         5d:83:29:62:c3:a1:c1:ad:7c:8f:c0:e4:aa:de:06:be:ee:9c:
         df:a7:ed:2c:d4:bb:2b:c6:c1:b4:cf:7e:4a:27:0a:34:5c:1e:
         d6:51:9f:e4:25:ba:bd:bb:d5:3e:88:3f:a4:8d:7c:c2:d2:3c:
         80:6b:63:4b:9e:51:65:0d:86:16:61:be:a3:b8:cb:d1:2e:24:
         7f:41:13:fb:68:61:d7:d7:cd:4f:5c:97:2c:c1:8a:f3:da:56:
         db:36:8b:a0:3c:1d:c0:39:3c:38:b4:43:de:56:e6:64:39:60:
         92:a8:57:66:0a:30:9d:89:09:98:d5:e6:7d:6f:5e:b9:66:1d:
         67:3b:cc:90:27:9e:f8:b9:91:37:9d:ef:0c:65:4b:53:94:f0:
         ed:3f:f3:af:8f:37:a9:a6:84:d2:01:a8:1b:05:fb:a4:9f:80:
         9d:10:4f:35:c0:cb:20:ed:19:ee:3d:7e:d8:07:4e:4a:8e:ad:
         10:6e:9c:82:a8:da:72:79:5a:21:73:6e:3c:cc:a2:33:47:68:
         3d:b7:2f:d9:08:76:dd:05:1a:fa:a0:ca:ea:99:47:74:28:34:
         2b:d5:2d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org