Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/3230302e3131342e38382e302f32312d3234203d3e20323635373033.roa
File:                     3230302e3131342e38382e302f32312d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          1EKvnXw9uXXJOl5T0gxQuhqoaSrEoe1UNlHF0eFL1YM=
Subject key identifier:   DF:C9:A5:12:F5:DC:CE:02:20:9E:89:FF:55:44:B9:3B:AE:10:05:49
Certificate issuer:       /CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Certificate serial:       0FC66155A4B30C99A594D267F3C86BF62038BBCF
Authority key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/3230302e3131342e38382e302f32312d3234203d3e20323635373033.roa
Signing time:             Tue 05 Mar 2024 18:10:36 +0000
ROA not before:           Tue 05 Mar 2024 18:05:36 +0000
ROA not after:            Tue 04 Mar 2025 18:10:36 +0000
asID:                     265703
IP address blocks:        200.114.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c6:61:55:a4:b3:0c:99:a5:94:d2:67:f3:c8:6b:f6:20:38:bb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
        Validity
            Not Before: Mar  5 18:05:36 2024 GMT
            Not After : Mar  4 18:10:36 2025 GMT
        Subject: CN=DFC9A512F5DCCE02209E89FF5544B93BAE100549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d9:d9:ef:cf:62:12:32:7f:e2:6d:2b:7a:b1:
                    54:e9:11:2e:79:06:fd:66:89:9b:cb:b4:e9:a8:3f:
                    3e:88:75:fd:5c:c2:60:83:53:10:8f:71:e2:bf:1d:
                    f8:d9:96:cf:9f:45:37:ce:ec:a4:f8:5a:69:37:83:
                    62:ac:39:3c:4d:b8:76:9d:83:62:4e:c7:a8:a3:78:
                    0a:7f:b6:e6:eb:b0:37:8b:9d:db:b9:76:68:a5:3e:
                    af:d0:23:d9:db:c9:ba:eb:be:27:ab:dd:7f:2b:aa:
                    74:d0:98:03:41:fe:3c:24:48:36:1d:f5:ea:36:b1:
                    9a:43:0e:a5:2a:02:94:42:03:e5:20:b3:88:3e:90:
                    6e:00:6d:29:2d:78:40:56:63:7c:7a:20:41:62:77:
                    30:28:b4:88:69:c3:1a:e8:b3:f1:a7:aa:62:aa:d7:
                    5d:51:ab:e1:1b:be:5d:c7:0e:0d:18:49:a2:c0:67:
                    c1:63:7a:5e:3a:b9:d0:23:59:2e:6b:ae:b3:d8:b4:
                    bf:ac:58:00:bc:c0:1a:56:6f:5e:85:14:59:36:a7:
                    1b:62:70:db:2b:4b:ba:eb:ed:7a:93:92:aa:95:b4:
                    29:85:5e:7b:cc:9e:b7:49:85:f5:b5:33:f8:f4:8d:
                    59:bf:2e:42:b5:91:b0:c5:ee:a1:4c:76:73:eb:c4:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C9:A5:12:F5:DC:CE:02:20:9E:89:FF:55:44:B9:3B:AE:10:05:49
            X509v3 Authority Key Identifier:
                keyid:FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/3230302e3131342e38382e302f32312d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:e7:0c:c7:f7:97:7c:0e:7d:2b:2b:95:18:9f:35:cf:ce:
         a4:33:d9:1b:22:50:34:2e:e8:82:e7:9c:cc:f8:1e:ee:88:5a:
         c7:af:17:d2:3e:79:ee:b6:ee:73:ca:7e:0b:25:f6:cd:af:4b:
         0c:fc:2a:c3:d0:af:90:06:0c:a3:ac:21:a4:2e:9f:5d:54:1d:
         e3:74:90:2c:88:7b:c6:5c:aa:92:50:a1:64:b5:df:d0:2e:a4:
         e0:a0:01:96:7c:c2:0d:94:7a:f3:92:48:91:ba:cd:96:74:77:
         87:27:9b:64:4c:4d:67:a1:60:56:b4:a4:1d:54:72:14:de:ee:
         d7:5a:e4:ee:ae:9d:e3:f6:95:5f:fe:f6:1b:b7:fa:31:53:03:
         d7:14:3a:58:70:8e:de:cf:ac:11:f9:dd:40:c1:9d:df:0f:b0:
         eb:7f:fe:0c:7e:8f:6c:c6:ae:c8:b5:1e:48:3a:4e:84:cb:88:
         8a:a6:ec:f5:64:6f:ef:80:8c:5e:d7:3f:d2:bd:2b:3f:92:0c:
         82:b1:db:e4:b0:50:35:a8:93:0c:76:3d:29:c5:37:d5:11:c6:
         29:12:82:18:5c:6d:dc:28:c7:db:c5:c3:6b:ba:fc:61:35:da:
         58:92:f5:96:d3:fe:a5:d7:00:98:ac:d7:45:68:0d:0b:b2:60:
         e6:79:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org