Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/926D99ED77451CE921E5875C8D641D23BEEEAE765B4372FA2297C3BD9FC0409F/0/3230302e33332e3230362e302f32342d3234203d3e20323639393538.roa
File:                     3230302e33332e3230362e302f32342d3234203d3e20323639393538.roa (raw, json)
Hash identifier:          kClUsilzr0EfgOwA6wm/Y13T9lxgZT6G4YvNm13VWkY=
Subject key identifier:   15:45:A5:DF:6F:33:49:53:74:0C:87:A1:FD:B0:25:B7:89:6D:BD:EB
Certificate issuer:       /CN=5DFC552B66399656D80BE2D03E053164A7990701
Certificate serial:       787B8E4C175281982584CB7E6BED4C0A2E46368E
Authority key identifier: 5D:FC:55:2B:66:39:96:56:D8:0B:E2:D0:3E:05:31:64:A7:99:07:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DFC552B66399656D80BE2D03E053164A7990701.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/926D99ED77451CE921E5875C8D641D23BEEEAE765B4372FA2297C3BD9FC0409F/0/3230302e33332e3230362e302f32342d3234203d3e20323639393538.roa
Signing time:             Tue 05 Mar 2024 18:21:57 +0000
ROA not before:           Tue 05 Mar 2024 18:16:57 +0000
ROA not after:            Tue 04 Mar 2025 18:21:57 +0000
asID:                     269958
IP address blocks:        200.33.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/926D99ED77451CE921E5875C8D641D23BEEEAE765B4372FA2297C3BD9FC0409F/0/5DFC552B66399656D80BE2D03E053164A7990701.crl
                          rsync://repository.lacnic.net/rpki/lacnic/926D99ED77451CE921E5875C8D641D23BEEEAE765B4372FA2297C3BD9FC0409F/0/5DFC552B66399656D80BE2D03E053164A7990701.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DFC552B66399656D80BE2D03E053164A7990701.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7b:8e:4c:17:52:81:98:25:84:cb:7e:6b:ed:4c:0a:2e:46:36:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DFC552B66399656D80BE2D03E053164A7990701
        Validity
            Not Before: Mar  5 18:16:57 2024 GMT
            Not After : Mar  4 18:21:57 2025 GMT
        Subject: CN=1545A5DF6F334953740C87A1FDB025B7896DBDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:ad:bc:36:db:e7:cb:33:95:51:40:0e:61:
                    7f:e7:54:b0:6a:09:49:cc:cc:bd:59:bb:8d:28:d9:
                    48:45:1a:6d:ab:87:fd:7a:da:db:f2:68:02:35:f0:
                    b1:9a:f7:b2:0e:07:64:9c:2b:24:2b:92:9b:d2:12:
                    c1:2c:61:3f:d8:9a:6f:b6:d8:1b:1b:1d:60:66:bb:
                    80:4b:cf:31:bd:a7:6f:bb:45:3a:9d:18:5f:ce:52:
                    ff:c2:27:f8:6b:d8:d7:aa:39:52:47:6c:66:cd:fb:
                    33:57:c9:13:b3:df:51:52:27:95:1d:56:90:44:51:
                    c7:16:c4:da:a3:00:a1:d2:40:8e:68:1a:d1:ff:85:
                    50:9c:11:01:a8:0d:f1:b1:ab:02:66:e9:63:35:84:
                    fc:b0:e3:f0:e0:b1:18:25:9c:f2:7b:dd:80:ae:d6:
                    17:80:e3:a9:51:86:f1:3c:e8:8d:8a:cf:c5:4a:44:
                    7b:85:d8:ec:f5:1f:04:b4:db:f8:6c:ed:f7:6e:6e:
                    07:f0:aa:70:67:a6:74:00:77:c6:b0:3f:ee:64:95:
                    84:67:da:61:8d:02:96:21:e4:64:ba:ab:be:f8:8c:
                    4b:43:f1:bf:36:79:d8:6c:70:e5:51:43:cf:b1:c3:
                    44:5d:10:db:91:e7:f2:e4:af:20:83:1b:89:de:c2:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:A5:DF:6F:33:49:53:74:0C:87:A1:FD:B0:25:B7:89:6D:BD:EB
            X509v3 Authority Key Identifier:
                keyid:5D:FC:55:2B:66:39:96:56:D8:0B:E2:D0:3E:05:31:64:A7:99:07:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/926D99ED77451CE921E5875C8D641D23BEEEAE765B4372FA2297C3BD9FC0409F/0/5DFC552B66399656D80BE2D03E053164A7990701.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DFC552B66399656D80BE2D03E053164A7990701.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/926D99ED77451CE921E5875C8D641D23BEEEAE765B4372FA2297C3BD9FC0409F/0/3230302e33332e3230362e302f32342d3234203d3e20323639393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:cc:8a:62:b3:e3:ab:78:5b:5f:01:3c:f0:b2:b8:87:5e:5e:
         7b:b7:33:1c:0c:32:bb:17:b4:3b:45:d1:d9:1d:25:0e:ac:b0:
         e5:32:31:c2:77:d5:ca:db:39:d0:f7:e4:6f:fa:1a:53:f8:9e:
         2b:57:ad:79:5f:ef:de:d4:c4:da:89:b7:f4:ed:54:24:df:3f:
         59:ef:8a:39:dd:44:42:9c:53:cb:6f:35:a2:ad:6d:ec:7a:6e:
         22:36:ed:75:cf:e8:aa:a8:ab:e6:f5:d1:c6:db:68:94:ac:1c:
         bc:89:96:c2:00:c0:e6:c4:8f:46:c5:0e:a9:11:f7:06:89:44:
         31:b8:ce:1b:00:ea:51:b9:73:d2:2b:39:94:7b:77:fa:07:fc:
         b0:80:48:a9:70:02:e8:0a:6a:5a:9a:86:2f:21:1d:d9:8f:6d:
         e6:82:76:e5:85:f9:cf:88:ea:70:55:0b:db:c5:d6:80:5b:9d:
         9e:af:ec:7f:a0:fa:f5:75:8f:a2:86:be:2f:3d:4a:99:0b:a7:
         eb:d0:4d:b1:c7:6f:0d:5d:7a:23:ce:31:b1:03:d2:25:2c:3b:
         35:b8:78:0d:d7:16:f9:1d:cb:35:d4:6f:06:9a:3e:9e:7a:e4:
         d6:8c:a1:9c:5b:11:8c:1b:f2:d1:c7:96:d3:56:01:f7:20:ba:
         07:dd:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:42:36 2024 by rpki-client on console-fra.rpki-client.org