Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/3230302e392e3138312e302f32342d3234203d3e20323634363233.roa
File:                     3230302e392e3138312e302f32342d3234203d3e20323634363233.roa (raw, json)
Hash identifier:          a+dz1ixilLU5ZI/PYwQk5JRHkF2o03nyJ/EB9ecPiss=
Subject key identifier:   5B:47:71:2C:49:5E:CD:22:FB:E9:86:8E:E4:0C:F4:BA:91:69:87:F0
Certificate issuer:       /CN=FBE54D0AE44D53393B0E5370CA6211CB067D2481
Certificate serial:       150AA934281BB6FC4ACAD3AC7D88132F11862A99
Authority key identifier: FB:E5:4D:0A:E4:4D:53:39:3B:0E:53:70:CA:62:11:CB:06:7D:24:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/3230302e392e3138312e302f32342d3234203d3e20323634363233.roa
Signing time:             Tue 05 Mar 2024 17:53:41 +0000
ROA not before:           Tue 05 Mar 2024 17:48:41 +0000
ROA not after:            Tue 04 Mar 2025 17:53:41 +0000
asID:                     264623
IP address blocks:        200.9.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.crl
                          rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0a:a9:34:28:1b:b6:fc:4a:ca:d3:ac:7d:88:13:2f:11:86:2a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBE54D0AE44D53393B0E5370CA6211CB067D2481
        Validity
            Not Before: Mar  5 17:48:41 2024 GMT
            Not After : Mar  4 17:53:41 2025 GMT
        Subject: CN=5B47712C495ECD22FBE9868EE40CF4BA916987F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:5e:ab:9f:76:9b:fc:46:b9:5c:4b:28:f1:
                    5e:4e:4d:84:ba:b9:45:1e:68:51:2a:22:af:ca:f1:
                    7d:e1:32:1c:de:80:6a:9c:4d:24:d5:f9:57:62:8a:
                    1d:d1:23:13:01:f5:8b:f6:be:2d:5e:f2:32:f2:34:
                    20:40:e9:f8:b9:10:2b:a1:1d:33:13:9f:ae:c5:8f:
                    65:4d:55:ad:59:db:10:88:cd:03:f5:be:a1:33:94:
                    6e:64:13:0c:63:8b:68:2d:1e:2a:50:fe:81:cf:39:
                    11:0c:3a:05:f7:c3:aa:b8:7e:89:e5:10:bb:34:17:
                    93:94:02:6f:f2:2c:95:e3:07:6d:aa:87:d2:b2:4c:
                    04:07:00:19:7b:8e:e9:5f:13:a9:da:d8:97:4b:be:
                    ac:bc:d9:9e:e0:c2:4f:21:22:ce:bc:42:38:27:a2:
                    f4:50:3d:01:b8:77:b5:9f:61:5d:4b:96:c1:e7:0f:
                    00:74:3d:19:8f:d1:c3:0d:52:8b:3d:a5:0e:14:7a:
                    60:e8:4d:6c:0d:cd:61:3e:3f:b1:86:a2:5e:01:58:
                    c3:d2:84:96:76:f3:5c:34:d5:c0:50:06:17:42:da:
                    c1:cf:49:45:b9:49:c8:a5:ab:21:10:e0:49:c0:4a:
                    3b:76:73:b6:9b:1e:b3:14:dc:73:76:76:e0:35:70:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:47:71:2C:49:5E:CD:22:FB:E9:86:8E:E4:0C:F4:BA:91:69:87:F0
            X509v3 Authority Key Identifier:
                keyid:FB:E5:4D:0A:E4:4D:53:39:3B:0E:53:70:CA:62:11:CB:06:7D:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/3230302e392e3138312e302f32342d3234203d3e20323634363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:06:b9:97:2c:88:fe:7a:bf:05:21:35:11:3a:e7:59:b9:ed:
         99:28:c3:5c:22:5d:da:a9:8b:5e:c7:5c:9c:ad:3d:a1:e5:c1:
         d8:c1:88:fa:1e:ce:2c:c9:60:0a:7a:32:b1:87:83:33:5b:bb:
         66:72:9d:08:05:66:b8:d2:e1:b4:f9:a5:32:fd:8d:28:07:4b:
         90:65:14:a5:fa:42:a7:c2:a1:4f:6b:b4:7d:b1:28:5a:4a:e3:
         87:2f:c4:a1:99:02:21:6f:7d:ff:39:0d:d6:79:98:2d:0f:d8:
         ca:fc:5c:c2:86:64:39:e7:52:4c:22:76:f5:e3:20:8a:f1:c7:
         7c:eb:cf:02:f4:11:13:fb:8d:88:b6:71:9c:80:3c:49:5b:65:
         f8:68:a0:b5:0c:50:8c:e1:25:ab:cf:fb:89:18:a6:64:bf:26:
         a2:14:1c:26:da:6b:fb:80:46:50:9b:3b:b6:d7:09:0b:f7:c8:
         d9:64:c8:05:a8:a9:80:1d:1c:eb:88:77:4a:b5:74:c0:8a:7c:
         2e:d7:90:19:de:54:61:2f:c5:86:5d:e4:10:d2:b9:03:2c:34:
         2f:2f:05:f3:d2:dc:b2:d8:92:71:6d:7a:9f:cc:88:f2:17:dd:
         a7:f5:fd:b4:e0:fc:5c:23:de:a9:20:6e:c8:b2:39:dd:e9:8d:
         fd:62:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:42:05 2024 by rpki-client on console-fra.rpki-client.org