Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa
File:                     3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa (raw, json)
Hash identifier:          YJOOBjTH0hY08zJKJByMwm97i+rXWmWEE2hfJKFGfag=
Subject key identifier:   6A:DE:AF:09:8D:0E:56:5D:21:82:1F:38:D7:EE:14:8B:C4:69:B7:2D
Certificate issuer:       /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
Certificate serial:       5CC12AE759358E632DC71B147BC41C9FA087CF27
Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa
Signing time:             Tue 05 Mar 2024 18:22:02 +0000
ROA not before:           Tue 05 Mar 2024 18:17:02 +0000
ROA not after:            Tue 04 Mar 2025 18:22:02 +0000
asID:                     269928
IP address blocks:        200.108.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:2a:e7:59:35:8e:63:2d:c7:1b:14:7b:c4:1c:9f:a0:87:cf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
        Validity
            Not Before: Mar  5 18:17:02 2024 GMT
            Not After : Mar  4 18:22:02 2025 GMT
        Subject: CN=6ADEAF098D0E565D21821F38D7EE148BC469B72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:cc:29:cc:eb:8c:76:d4:fe:c8:3e:0f:93:
                    89:68:0a:dc:cd:51:25:dd:92:aa:90:91:3a:45:21:
                    ae:ef:58:6d:7a:68:d9:a9:95:c5:7e:7c:ce:cb:1f:
                    96:98:17:b1:ba:4f:3d:f2:3b:06:d2:68:e9:72:21:
                    6d:65:61:bd:f7:cb:d8:df:1f:3b:97:55:c6:cd:f6:
                    44:19:41:b8:1f:29:cb:39:de:73:7d:80:fc:5d:e3:
                    c8:6c:e6:21:c2:e9:8a:d4:20:ae:91:74:21:d3:9d:
                    fe:29:d6:df:5f:86:35:d4:e3:21:5e:88:b1:7c:89:
                    e0:95:b7:3c:01:8a:14:87:6e:91:9d:df:f3:37:4f:
                    4f:ce:77:f1:ae:ec:0c:11:c7:27:c1:5b:c5:46:4d:
                    16:e4:cb:41:ed:60:f0:71:a0:ec:ae:73:1a:c1:6f:
                    44:39:d1:0e:c6:88:72:da:8d:2e:83:11:58:51:08:
                    42:49:4c:93:dc:cd:36:dd:19:af:d9:3d:46:de:c7:
                    46:ab:ae:c7:ea:d8:16:f9:d9:f7:af:fa:f3:7b:16:
                    73:2a:7b:dd:ee:c5:05:b3:31:38:ba:a5:ce:49:37:
                    cf:bc:cb:0b:b9:63:6c:cd:20:7e:be:f9:9d:f4:f6:
                    34:f3:61:71:e5:8d:a6:27:a6:7c:f5:81:9a:a1:4b:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DE:AF:09:8D:0E:56:5D:21:82:1F:38:D7:EE:14:8B:C4:69:B7:2D
            X509v3 Authority Key Identifier:
                keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:e0:15:ed:58:8b:7a:f2:f7:df:0c:1d:9e:6f:b5:63:2f:e5:
         94:06:45:9b:34:a7:bd:35:bf:03:d2:f3:0c:75:46:50:26:ec:
         6f:08:5e:76:04:59:3c:90:83:fc:4e:e8:76:8a:13:fd:1c:7a:
         fa:f3:7a:89:8d:42:70:fa:71:90:8e:7d:e1:f5:12:3a:fc:e1:
         71:e4:65:fe:38:a2:be:34:49:ff:a5:61:95:4e:5d:26:ee:25:
         28:c4:db:4d:93:57:7e:a0:e5:3b:c4:9e:5b:68:41:45:e5:57:
         95:c0:e2:3a:e9:06:eb:22:c6:75:e4:8a:8f:8b:41:1f:53:b1:
         c5:92:20:ee:a6:e2:0b:df:3b:58:01:6b:03:19:dc:bf:51:dc:
         de:a6:91:7c:79:8a:ff:d9:bd:0e:39:74:c5:aa:94:18:a1:b0:
         b9:6e:99:99:11:43:85:1f:0f:f5:ae:6d:fa:25:99:b4:5e:e5:
         14:7a:4d:6c:06:c6:fc:8b:d0:23:4a:25:a6:a4:55:8b:bc:e0:
         fd:b3:4c:4c:92:3b:2f:08:9c:c3:03:52:d3:e2:28:cb:63:8e:
         e1:04:95:7f:95:2a:8e:6f:9d:0a:1e:50:a0:d5:33:81:47:77:
         db:3d:7b:b7:b8:29:17:b4:35:ae:31:27:b5:56:15:c9:f6:41:
         0f:4a:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:51:21 2024 by rpki-client on console-fra.rpki-client.org