Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa
File:                     3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa (raw, json)
Hash identifier:          PVIBK7QKngem5buq91oH/QQSSTjL/mncYg6iE6UNVeY=
Subject key identifier:   76:81:DA:DF:5E:88:B3:62:74:60:CF:02:53:84:DD:52:E6:17:00:47
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       0BEBA9164409A1A508BFA700A47FDDF4139DC915
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa
Signing time:             Wed 20 Nov 2024 18:20:00 +0000
ROA not before:           Wed 20 Nov 2024 18:15:00 +0000
ROA not after:            Wed 19 Nov 2025 18:20:00 +0000
asID:                     273942
IP address blocks:        200.107.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:eb:a9:16:44:09:a1:a5:08:bf:a7:00:a4:7f:dd:f4:13:9d:c9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: Nov 20 18:15:00 2024 GMT
            Not After : Nov 19 18:20:00 2025 GMT
        Subject: CN=7681DADF5E88B3627460CF025384DD52E6170047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:fc:24:02:82:82:a6:c4:02:3b:06:dc:cd:
                    43:6f:ff:86:8e:5e:b6:77:7b:a1:c2:aa:3a:3f:d4:
                    d3:bc:a6:b5:87:4c:9a:f9:8d:9f:58:e5:0d:9f:90:
                    ed:d5:d0:d8:4c:5a:6e:f8:e4:96:dd:62:56:b3:b7:
                    3f:d9:52:c0:b0:b9:a1:1a:a8:8e:12:08:df:a5:6b:
                    cc:c9:36:75:bd:bb:de:ad:91:4c:28:69:a5:69:80:
                    14:5e:d2:02:d9:01:64:1d:79:4e:17:14:3d:2e:76:
                    15:e8:64:00:b7:df:68:9a:a2:47:d3:73:66:62:ab:
                    18:24:d0:c4:b8:92:5f:8e:75:f3:47:86:f6:2a:b7:
                    7b:1a:9d:87:cb:25:89:51:93:e4:99:2c:82:6c:f5:
                    1c:af:d3:62:48:44:2b:07:9b:06:bb:57:11:9e:e9:
                    62:3f:b6:fd:d3:bc:f8:12:5e:96:58:33:5a:24:41:
                    e0:ef:41:90:61:97:b8:6f:13:6f:5a:86:4e:6a:b7:
                    17:74:32:c5:4f:96:3a:58:a5:d9:04:72:9a:50:c6:
                    9a:d3:b5:b7:68:d3:d7:f8:35:22:57:9a:a1:d8:9b:
                    6b:65:1b:4e:9d:fe:fd:1e:ab:36:c7:4c:3b:da:e3:
                    76:8c:bb:07:f3:48:53:fb:57:1c:54:7e:2d:bd:04:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:DA:DF:5E:88:B3:62:74:60:CF:02:53:84:DD:52:E6:17:00:47
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:c2:21:f1:e2:69:22:a7:8e:13:99:5c:5e:72:25:7d:8a:7d:
         02:43:b0:d6:16:e0:d4:d2:10:b9:40:49:78:2d:6b:ff:96:55:
         b1:75:c3:0d:89:5f:db:b6:7d:da:e8:20:13:48:e7:59:eb:ba:
         b8:6e:e2:dd:f3:31:67:e5:01:d3:a2:a2:ad:94:ab:dc:79:5f:
         35:fd:35:21:29:a4:8f:34:6c:2a:a3:1c:99:c5:02:ad:ce:f1:
         53:e0:9a:0d:2d:92:3a:02:d0:94:f4:40:c3:1f:d0:f0:a5:df:
         da:ca:78:9b:d6:5e:a0:46:2f:0c:22:c0:3b:26:f0:77:08:a7:
         09:86:f7:8c:dd:ee:2c:64:78:1d:14:2c:27:78:57:60:12:fd:
         61:a4:26:e2:2f:bd:a3:47:d9:cc:5c:71:bb:9b:52:62:02:0c:
         27:a0:55:f1:4f:e4:b8:e9:a3:9c:d7:d0:2b:3e:47:74:fc:97:
         85:e7:5d:3d:c9:2a:05:83:95:5a:aa:55:fc:7f:12:b5:73:0a:
         ee:67:ad:d1:4b:19:0e:a0:46:9a:f1:60:da:6d:bf:5c:b2:e2:
         c3:aa:e8:c5:ab:4e:ef:a4:bf:5c:f0:d1:8d:45:6f:75:1c:16:
         21:cb:51:eb:f5:72:09:b5:85:2a:01:46:c6:8a:aa:f4:ce:6c:
         90:17:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org