Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa
File:                     3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa (raw, json)
Hash identifier:          FWxboNbmJ3sXc/oRAQU92tbi8nHBn4E1TId0tonVUsM=
Subject key identifier:   CD:E1:29:70:E7:D2:F5:82:B3:49:7C:50:0F:D0:22:C9:73:90:5D:AB
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       1CFAC7388D90B28955C79B17336EA11ABDF158C2
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa
Signing time:             Tue 05 Mar 2024 18:16:33 +0000
ROA not before:           Tue 05 Mar 2024 18:11:33 +0000
ROA not after:            Tue 04 Mar 2025 18:16:33 +0000
asID:                     22724
IP address blocks:        200.105.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fa:c7:38:8d:90:b2:89:55:c7:9b:17:33:6e:a1:1a:bd:f1:58:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Mar  5 18:11:33 2024 GMT
            Not After : Mar  4 18:16:33 2025 GMT
        Subject: CN=CDE12970E7D2F582B3497C500FD022C973905DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:70:36:73:e0:c2:df:22:81:84:9a:8d:71:
                    85:ac:e8:8b:38:4f:7a:04:c4:ba:8e:d4:22:3e:1d:
                    ea:18:b5:10:48:7e:9e:05:ae:33:ff:c9:f0:c5:d5:
                    a6:c0:28:f5:3e:ed:96:a2:30:dd:78:ad:45:d2:fc:
                    fd:38:68:56:13:ee:f1:b5:93:56:41:9c:ff:c5:1a:
                    ab:ca:90:92:d2:07:68:bf:ab:7c:7b:46:73:1e:3b:
                    70:55:be:30:d1:dc:81:8b:db:64:1f:b8:1c:56:d6:
                    45:2f:f1:e3:d0:67:e8:c7:e1:64:73:84:82:e4:3e:
                    ab:b3:0a:c7:36:67:ac:c1:9c:64:d1:5a:7c:7a:92:
                    16:f2:f8:c9:5a:0b:c3:18:3a:e5:f0:38:a5:d4:e7:
                    2f:06:bf:7b:cc:cf:e7:ae:42:c3:85:a6:1c:88:64:
                    ff:4c:59:2a:f6:6c:85:32:fc:c9:53:19:a3:02:d3:
                    f4:ae:9d:f7:c3:b1:21:f3:ee:d7:4b:62:36:65:6f:
                    4b:84:04:5f:76:a1:cc:7c:d8:8f:99:bf:8a:f0:30:
                    b5:c0:7d:b0:4b:8a:d5:fa:dc:02:87:9e:9b:f7:0a:
                    a9:0a:b1:f5:40:8b:54:9a:ce:fe:5c:0b:1c:4f:05:
                    90:6b:af:0f:8a:f8:d7:52:52:84:17:6f:61:37:c3:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E1:29:70:E7:D2:F5:82:B3:49:7C:50:0F:D0:22:C9:73:90:5D:AB
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.105.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cc:38:4f:e7:79:53:12:81:58:35:32:43:af:68:b2:10:92:31:
         fd:27:99:f2:a5:eb:64:7f:12:df:fd:76:d8:19:22:80:0d:e3:
         24:ea:29:b7:00:c5:4a:2e:59:65:a1:33:44:5c:07:d7:8c:86:
         3a:a8:16:fe:73:c5:25:d5:a2:d0:32:62:ff:d2:cf:ba:11:23:
         15:ca:d2:ab:08:d7:67:2c:0c:ff:24:ea:0c:ad:6b:58:4a:2b:
         ff:fc:0e:d6:36:63:2d:21:42:15:ac:2a:1d:33:f6:54:4d:26:
         04:d6:f4:14:9c:8b:be:82:f2:90:42:41:b4:7f:bb:30:6f:4f:
         45:61:3e:07:6e:25:33:97:c4:d3:b8:27:02:a8:1f:8f:b1:4a:
         54:ac:ee:fc:f7:8a:15:2a:13:bd:ea:fb:a3:3e:74:be:66:47:
         ee:cd:eb:c1:0c:e0:e7:07:3b:69:64:30:65:b1:f3:71:3b:c6:
         7d:70:38:1c:bc:85:32:7c:dc:c2:ca:b1:ab:7f:60:81:8c:1b:
         f4:5a:ba:cb:63:2c:c9:d6:be:c2:c7:a9:82:72:62:63:9a:58:
         df:1a:68:0c:88:38:7e:ad:f7:12:85:7a:1a:62:64:ff:4f:ec:
         49:80:bd:db:56:87:7a:bc:dc:cf:64:55:76:42:59:bf:65:c5:
         e9:00:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org