Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/3230302e31302e3232382e302f32322d3234203d3e203237373333.roa
File:                     3230302e31302e3232382e302f32322d3234203d3e203237373333.roa (raw, json)
Hash identifier:          6VabKOjw6i/3E4Nu/5B8yQG+xilYds4T+Wo3A6E2uOA=
Subject key identifier:   D2:DC:A7:65:CF:6F:A2:06:52:DD:A8:61:1D:FE:9F:27:4F:17:A1:64
Certificate issuer:       /CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
Certificate serial:       25A734EFF16B6DF74EB11AE306B0127DBCD89991
Authority key identifier: C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/3230302e31302e3232382e302f32322d3234203d3e203237373333.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     27733
IP address blocks:        200.10.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a7:34:ef:f1:6b:6d:f7:4e:b1:1a:e3:06:b0:12:7d:bc:d8:99:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3E7368D35E3633A3376945DE03867D2B31CDD87
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=D2DCA765CF6FA20652DDA8611DFE9F274F17A164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:97:24:d7:02:14:8d:f8:79:10:6d:60:90:
                    3e:8c:df:40:80:09:63:4e:da:d0:e4:be:97:02:fc:
                    ef:0f:19:d1:2c:ff:c9:1a:09:9c:74:bf:8c:22:ea:
                    6f:8d:6c:da:97:7a:19:be:c0:15:ea:00:6e:87:e1:
                    df:3e:31:44:5f:4f:3f:9b:b1:6f:24:5d:8f:6c:fe:
                    e8:a0:57:3e:58:90:0f:11:86:c9:64:2d:3e:38:35:
                    32:81:23:13:da:1d:7a:a6:b9:a4:95:7f:1d:59:14:
                    72:6f:16:77:24:cf:f1:7d:04:eb:6e:fd:c3:90:87:
                    e7:98:97:bb:6b:f6:29:15:15:d4:6d:67:86:8c:f2:
                    b1:d1:14:a2:b1:ed:3f:cf:0e:6c:c2:a0:27:15:fb:
                    27:31:e5:7e:a3:82:d6:ec:5c:a1:ad:e4:ca:86:57:
                    03:7c:ca:1d:73:9b:fa:54:8e:79:29:f7:14:14:7d:
                    5b:a3:59:d4:91:09:3c:68:de:fb:ef:a3:2b:f0:55:
                    e1:59:83:20:ea:61:d3:a4:85:af:54:f5:a3:b4:f9:
                    84:0b:62:d3:3c:02:95:17:08:fd:18:27:a1:7c:68:
                    a6:35:ba:5e:5a:cf:bc:6c:13:53:5b:d3:37:3f:c4:
                    8c:b0:df:06:c6:74:9b:6e:8d:c4:29:14:22:85:bb:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:A7:65:CF:6F:A2:06:52:DD:A8:61:1D:FE:9F:27:4F:17:A1:64
            X509v3 Authority Key Identifier:
                keyid:C3:E7:36:8D:35:E3:63:3A:33:76:94:5D:E0:38:67:D2:B3:1C:DD:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3E7368D35E3633A3376945DE03867D2B31CDD87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D89DA551E7331B53B688228186D14DDBA498FE379B7D3EF3781E6A30E3ADF50/0/3230302e31302e3232382e302f32322d3234203d3e203237373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:f9:f1:ec:c0:e3:7f:f5:d6:3c:14:27:b7:3a:d5:44:55:
         77:a6:91:82:82:b0:00:60:bc:92:ec:ba:d2:17:7f:37:5e:0f:
         4c:95:e3:f8:79:d8:0b:bd:db:01:5c:ff:54:cf:2e:b9:85:ee:
         36:af:13:37:e6:76:a3:02:2f:32:82:31:d5:33:7c:d6:77:ef:
         4c:75:03:db:65:17:f5:00:73:0b:96:cc:fb:43:dc:0c:32:33:
         aa:2e:b9:08:34:e2:6e:e8:aa:d7:50:c2:6b:93:ba:68:2a:8d:
         74:18:66:31:be:61:34:0d:19:65:8c:57:ed:14:ef:2b:19:05:
         94:03:58:16:50:62:4f:8e:68:c2:01:e2:56:92:29:25:ed:87:
         92:b6:e5:38:39:4a:75:b6:eb:5e:fa:52:64:4f:12:17:28:e8:
         d8:c4:b0:a2:0e:30:1a:59:12:0f:5e:2c:22:07:7d:b3:87:cb:
         73:58:b4:6c:bd:13:16:b1:99:90:15:84:1a:70:69:ee:3e:a1:
         56:2c:04:87:a8:97:58:f8:52:40:99:92:0a:32:01:0b:f4:65:
         9e:d0:c1:ff:12:cd:59:f9:ae:b1:ae:8a:2f:50:51:1b:42:2a:
         62:c4:04:41:c2:31:d9:20:42:82:b5:11:6e:55:d6:85:ae:24:
         81:8d:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org