Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/3230302e302e37342e302f32342d3234203d3e203233303331.roa
File:                     3230302e302e37342e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          h5qLHlOOAWGPmiUFGernpOh9J19W4NcLQ+AJe3eOkDk=
Subject key identifier:   94:B2:31:15:7B:BB:CA:97:0D:AE:FC:2A:F3:12:3B:EA:EB:DD:3E:42
Certificate issuer:       /CN=0D958177A72933A92171E747F897947268B18B32
Certificate serial:       150D49432B59DA8206DE6AD5F2C1927B3AF0E4F3
Authority key identifier: 0D:95:81:77:A7:29:33:A9:21:71:E7:47:F8:97:94:72:68:B1:8B:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D958177A72933A92171E747F897947268B18B32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/3230302e302e37342e302f32342d3234203d3e203233303331.roa
Signing time:             Tue 05 Mar 2024 18:23:48 +0000
ROA not before:           Tue 05 Mar 2024 18:18:48 +0000
ROA not after:            Tue 04 Mar 2025 18:23:48 +0000
asID:                     23031
IP address blocks:        200.0.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D958177A72933A92171E747F897947268B18B32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0d:49:43:2b:59:da:82:06:de:6a:d5:f2:c1:92:7b:3a:f0:e4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D958177A72933A92171E747F897947268B18B32
        Validity
            Not Before: Mar  5 18:18:48 2024 GMT
            Not After : Mar  4 18:23:48 2025 GMT
        Subject: CN=94B231157BBBCA970DAEFC2AF3123BEAEBDD3E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:bc:d9:3f:e0:10:76:38:e2:54:88:9c:1c:
                    62:f2:7a:93:9b:f9:5d:b4:67:65:98:fd:8d:da:53:
                    90:77:da:56:1a:19:50:65:9a:a6:24:5e:5f:7e:94:
                    22:f3:6e:b9:54:0a:35:82:84:1b:50:44:77:e3:f4:
                    c3:40:84:be:11:67:a8:6e:46:16:24:c4:a5:ac:4b:
                    27:37:be:d6:aa:7b:b5:de:38:6c:fe:05:42:7f:57:
                    f6:af:ff:61:70:0a:4e:bc:6a:61:a2:8f:bb:05:30:
                    97:c4:b6:b3:56:06:e6:42:e2:54:30:d2:49:ef:d7:
                    07:1b:92:40:2b:f4:d5:ee:aa:9c:1d:6d:b3:29:2d:
                    16:89:0e:08:d6:5a:eb:9b:45:3f:4c:a5:1f:e2:af:
                    a0:f0:e9:56:40:a8:98:c7:b8:b4:ec:01:a3:75:f9:
                    9d:25:81:69:ab:e6:81:d2:5c:08:3e:29:43:5a:31:
                    79:ab:f8:70:1a:c2:05:c2:24:0b:12:5b:2e:a3:2e:
                    cf:ea:da:38:b2:cb:bc:c6:1b:41:50:27:cd:b7:7a:
                    05:50:9d:12:15:5e:65:f4:0b:5b:04:17:7b:17:41:
                    9c:89:d8:35:e2:93:33:2e:37:8b:e5:4f:eb:0e:58:
                    0c:37:04:9e:ee:39:b6:45:55:ec:f4:12:71:ac:58:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B2:31:15:7B:BB:CA:97:0D:AE:FC:2A:F3:12:3B:EA:EB:DD:3E:42
            X509v3 Authority Key Identifier:
                keyid:0D:95:81:77:A7:29:33:A9:21:71:E7:47:F8:97:94:72:68:B1:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D958177A72933A92171E747F897947268B18B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/3230302e302e37342e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:03:04:b7:79:bf:b7:73:ae:12:0b:66:e4:83:8e:ae:77:13:
         74:48:53:05:38:dc:f2:cb:14:8c:9d:fe:6e:b8:a4:39:1a:c7:
         e1:a2:b6:5f:96:d3:96:97:90:2e:b0:11:c2:4e:3d:9c:87:c2:
         1f:8a:20:15:d1:a0:38:7e:eb:04:af:e6:af:01:ca:a4:0e:7b:
         1b:ab:e5:17:9d:52:e1:25:d6:7e:43:fe:cc:ab:c0:13:12:80:
         2f:cd:e8:40:37:24:58:48:2b:e5:34:cb:c5:b8:9d:53:85:af:
         54:53:ac:44:92:af:8b:90:27:7d:31:4f:8f:61:9e:53:a2:20:
         1e:ed:ee:f2:37:0d:92:e2:e5:07:ac:fe:36:2b:0c:85:a9:d6:
         91:1d:5e:cc:79:a3:88:70:6e:59:f3:da:86:68:50:43:c1:24:
         8f:26:1d:f0:36:ed:84:05:87:89:49:91:ce:de:b8:29:2e:d3:
         6e:7b:e1:1d:92:79:e9:b9:0c:14:d7:a8:13:30:bc:f0:85:e7:
         8d:c6:cd:6a:70:82:8b:b8:a0:c4:50:78:d4:7d:2e:4d:9b:8a:
         e5:77:c5:b3:ce:97:a5:ec:26:80:e0:58:34:e0:e3:1a:99:10:
         00:03:7d:f7:9f:eb:ac:02:0d:8a:01:03:4b:41:d9:b3:c5:40:
         db:9f:55:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org