Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e3130382e3132302e302f32312d3234203d3e203136393231.roa
File:                     3230302e3130382e3132302e302f32312d3234203d3e203136393231.roa (raw, json)
Hash identifier:          leIccI6Cmn6SToM1593sqf4CwdMTMiAiX6XoYu/6Kwk=
Subject key identifier:   AC:34:CB:D0:FE:77:A9:2B:FF:75:D3:E8:0A:57:88:D6:D7:31:3E:68
Certificate issuer:       /CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
Certificate serial:       1DADE8A763B314E6824B8228BA34FCD17748725B
Authority key identifier: 30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e3130382e3132302e302f32312d3234203d3e203136393231.roa
Signing time:             Tue 05 Mar 2024 17:47:59 +0000
ROA not before:           Tue 05 Mar 2024 17:42:59 +0000
ROA not after:            Tue 04 Mar 2025 17:47:59 +0000
asID:                     16921
IP address blocks:        200.108.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ad:e8:a7:63:b3:14:e6:82:4b:82:28:ba:34:fc:d1:77:48:72:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
        Validity
            Not Before: Mar  5 17:42:59 2024 GMT
            Not After : Mar  4 17:47:59 2025 GMT
        Subject: CN=AC34CBD0FE77A92BFF75D3E80A5788D6D7313E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:e9:27:48:2c:6b:f2:44:35:e7:ff:ba:50:
                    28:f4:50:9d:46:14:c9:b8:7c:c1:f6:60:cb:89:76:
                    6e:5c:1e:6f:d1:07:46:fa:77:0e:b1:cb:d4:4e:f7:
                    4d:32:c9:b6:04:d4:cf:c3:dc:f6:3f:8d:9d:78:c8:
                    bb:8d:98:d5:67:b1:42:cd:fc:04:d5:21:81:dd:69:
                    15:63:a5:3c:55:27:28:4d:78:7f:c6:ea:1c:6d:bf:
                    8b:2d:23:10:23:71:9b:67:2a:fc:e2:26:ec:ab:22:
                    d9:21:8b:81:e4:2a:28:d1:72:92:3f:a5:70:89:d7:
                    5d:37:29:ed:8b:5d:f2:f4:0d:49:1a:b5:c1:52:3b:
                    4f:ba:6d:e8:a8:c5:40:45:cb:8a:ae:53:9d:c2:9c:
                    f6:9a:14:17:1c:90:c4:2c:3c:c5:92:ec:b5:99:ef:
                    44:99:6c:d2:c2:8f:33:d2:f8:11:72:27:d8:59:54:
                    0e:f3:58:76:55:3c:5a:d0:80:f6:bc:36:07:2b:8e:
                    7b:68:ec:52:66:77:bc:ca:a4:d1:b8:8f:63:be:e5:
                    6c:1b:ac:6e:7c:4a:7e:38:17:b6:60:67:77:ac:37:
                    63:22:c0:c2:88:87:4b:b1:71:f7:e6:9a:e1:a7:88:
                    a5:49:2d:a2:7a:9b:e5:ba:27:7f:0d:f7:e5:ef:d5:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:34:CB:D0:FE:77:A9:2B:FF:75:D3:E8:0A:57:88:D6:D7:31:3E:68
            X509v3 Authority Key Identifier:
                keyid:30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e3130382e3132302e302f32312d3234203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:22:72:0c:a0:9c:45:e4:eb:4b:46:bb:b9:8c:58:ed:d8:18:
         8b:66:33:94:d5:48:72:47:0c:dc:cb:75:ea:4e:d7:82:1a:a4:
         e5:e8:fd:75:ae:a8:4a:23:6f:4b:90:3a:32:fd:32:53:4b:bb:
         67:55:b6:f4:7b:d0:50:90:28:22:36:d6:17:12:66:4a:b6:36:
         b1:7c:f3:25:2a:2e:11:b5:a4:91:80:a2:63:2a:92:3f:85:fc:
         f8:29:10:bb:c1:d2:a3:14:a8:a4:c1:85:0c:8f:7c:93:f4:5b:
         46:27:79:ed:24:b2:a2:b6:6d:a9:9c:63:0a:4c:b1:43:b0:47:
         27:a8:39:71:f9:1f:5a:f1:ad:db:08:51:73:e5:3f:03:cb:12:
         00:dd:28:a1:e6:b9:a1:72:fb:e8:8d:9d:98:a7:b6:a1:b3:78:
         1b:ed:73:3b:a0:5b:a0:d2:04:ba:4e:a0:9d:7f:84:33:f4:1d:
         ec:9e:7e:bb:b9:2c:cf:67:45:d2:0f:ff:b9:3c:94:82:2c:da:
         48:33:92:ce:75:29:00:bc:c8:7d:52:3c:07:1c:39:55:b1:2e:
         cc:4e:6b:1d:c9:36:bf:84:82:f0:aa:ff:26:de:1b:8c:34:56:
         75:7c:07:cf:81:fa:14:aa:9c:d0:0c:2d:20:61:a4:d7:44:30:
         a7:01:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org