Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32382e302f32322d3232203d3e203139313830.roa
File:                     3230302e3131302e32382e302f32322d3232203d3e203139313830.roa (raw, json)
Hash identifier:          q2V9ucuADDQb9eUQCINkgY01BBd8AgAoWs053zNoXQo=
Subject key identifier:   D2:14:CB:E4:BA:77:F3:72:0C:F8:E3:B7:61:EB:03:D9:93:9F:7D:4F
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       081748BB4B17905E1F6ABDE815FE1513F18B5703
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32382e302f32322d3232203d3e203139313830.roa
Signing time:             Tue 05 Mar 2024 17:56:49 +0000
ROA not before:           Tue 05 Mar 2024 17:51:49 +0000
ROA not after:            Tue 04 Mar 2025 17:56:49 +0000
asID:                     19180
IP address blocks:        200.110.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 20:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:17:48:bb:4b:17:90:5e:1f:6a:bd:e8:15:fe:15:13:f1:8b:57:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:49 2024 GMT
            Not After : Mar  4 17:56:49 2025 GMT
        Subject: CN=D214CBE4BA77F3720CF8E3B761EB03D9939F7D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:8d:ee:c6:2a:ca:1d:6d:b9:34:be:0c:c1:
                    76:7d:78:b6:64:bf:bf:e5:b6:f4:44:39:dd:0b:69:
                    55:04:bb:fe:96:25:e1:28:d7:48:f1:57:42:9f:51:
                    46:5a:b0:3d:92:57:cc:d8:ea:2c:c2:9f:54:43:a3:
                    b2:82:f0:33:68:6e:0c:be:2d:ed:79:ee:57:6b:c1:
                    f3:f1:ec:f3:b8:1a:50:fa:d7:7a:de:a4:18:e4:ef:
                    36:0c:27:c8:b4:31:2c:18:c3:64:4b:c3:c1:2c:1e:
                    30:53:7d:d7:ea:f2:65:28:cc:98:3f:c8:c1:0a:cc:
                    d1:40:c7:c3:c1:4e:1b:df:8c:be:17:b2:fa:cf:ba:
                    8b:75:11:db:73:59:a4:5f:b6:e2:a7:24:c7:6e:3c:
                    c8:64:cf:41:c1:5b:54:27:33:5c:dd:e2:d6:31:22:
                    b0:f2:9a:2d:01:2a:b9:12:3a:79:dd:71:b0:95:e0:
                    f0:9b:84:7e:70:8e:79:a6:4d:6a:22:0d:08:71:c9:
                    9e:a7:3e:39:99:e3:7d:d9:68:3d:c7:fd:61:f8:5e:
                    2d:58:c8:20:74:dc:b9:5b:73:9f:d6:6c:f2:84:c4:
                    09:8f:ab:3c:04:9a:ba:4f:e1:82:42:fb:ab:c8:c6:
                    b6:7f:ab:3c:25:10:6e:f9:b6:36:62:74:fd:a8:74:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:14:CB:E4:BA:77:F3:72:0C:F8:E3:B7:61:EB:03:D9:93:9F:7D:4F
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32382e302f32322d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:7e:80:dd:8b:75:c0:1f:f4:20:be:ca:72:6f:73:a5:a2:05:
         05:d8:3b:d6:53:60:2d:19:7f:70:12:10:71:d4:d6:65:2b:bb:
         0a:21:ed:d8:b6:54:87:62:43:91:81:30:02:99:de:6d:b8:49:
         d0:3f:e3:c8:af:17:57:32:a1:de:d5:d9:37:cf:69:93:9c:0f:
         7d:8d:d2:0c:30:63:3e:ad:87:37:a8:b8:4c:32:a7:ab:65:84:
         54:93:7e:6d:73:6f:2d:0a:06:22:c5:77:b4:fa:23:98:61:94:
         13:73:6e:38:bb:32:f4:be:87:db:49:a8:8f:ec:fe:67:a4:98:
         5f:4d:0b:9e:49:f0:0a:45:c4:ba:78:ff:e2:9d:fc:5f:02:7d:
         95:76:f0:42:40:81:a7:d4:3b:2f:d3:68:6d:c2:a5:74:5c:0b:
         22:52:3d:70:8c:93:5a:5c:7e:7f:f0:bb:ac:0b:06:f8:16:38:
         7f:58:8b:a0:c3:6d:d6:f0:60:88:7c:f8:4b:69:e0:6d:ff:22:
         da:2d:13:2a:45:e4:da:1f:4d:0c:49:70:c2:b2:e8:b9:01:88:
         30:0b:b1:f3:6b:8b:68:39:8d:eb:98:d8:d1:b6:8e:a8:5d:f6:
         d3:f3:a0:d3:2f:30:17:ee:13:0f:52:e0:21:cb:1e:e2:b1:46:
         17:b5:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 01:30:59 2024 by rpki-client on console-ams.rpki-client.org