Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e37362e38302e302f32302d3234203d3e2037343338.roa
File:                     3230302e37362e38302e302f32302d3234203d3e2037343338.roa (raw, json)
Hash identifier:          NC1Nn65mTTuK48iMSlqezaEZSQTyG6HF7ithgd76ycE=
Subject key identifier:   E2:40:71:00:E3:BD:4C:66:FB:F6:0C:33:12:98:04:0E:39:B9:83:23
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       012CA7331196C223E0A409BA06EABCB5964CDA88
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e37362e38302e302f32302d3234203d3e2037343338.roa
Signing time:             Tue 05 Mar 2024 18:16:24 +0000
ROA not before:           Tue 05 Mar 2024 18:11:24 +0000
ROA not after:            Tue 04 Mar 2025 18:16:24 +0000
asID:                     7438
IP address blocks:        200.76.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2c:a7:33:11:96:c2:23:e0:a4:09:ba:06:ea:bc:b5:96:4c:da:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Mar  5 18:11:24 2024 GMT
            Not After : Mar  4 18:16:24 2025 GMT
        Subject: CN=E2407100E3BD4C66FBF60C331298040E39B98323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:05:d9:36:5d:26:43:64:dd:6c:76:45:24:
                    93:90:27:0d:f8:68:d3:55:a0:f7:81:8e:4f:26:ce:
                    9c:e0:f5:e4:9b:10:ec:3e:57:35:76:b1:08:c1:1f:
                    fd:82:81:2f:c8:4d:2f:0d:a8:ad:08:af:df:ea:cc:
                    18:75:e7:9a:28:6a:f3:1d:67:54:21:08:b7:bf:96:
                    f3:ae:36:98:5e:2c:b2:b3:4a:55:93:0e:d6:d2:29:
                    df:07:7b:51:b3:99:90:78:5e:18:26:94:d4:cc:33:
                    a7:c5:84:4a:e1:0c:a4:fc:fd:35:57:f9:fc:ef:b4:
                    28:24:b2:20:3c:60:33:7d:b6:7c:7f:77:ec:39:b5:
                    be:32:a1:86:69:8b:5c:c6:35:09:89:46:ea:00:92:
                    51:69:bf:bb:57:04:b7:c2:1b:e0:8d:54:ae:53:b5:
                    3a:fd:53:5f:34:fb:9a:ad:cf:44:cf:5c:82:d1:d7:
                    58:cd:5f:6d:32:27:c5:53:8d:58:20:ed:27:2d:9a:
                    0c:d5:23:b0:ef:da:ee:7a:da:de:a3:8f:82:5b:ee:
                    07:fc:94:8f:7b:71:9e:61:99:ae:8d:bc:84:a3:27:
                    b2:4b:a4:83:58:80:51:36:a1:6f:c0:87:c3:8e:d1:
                    88:10:c3:fe:26:6c:a8:44:bc:d1:3f:07:3a:e3:70:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:40:71:00:E3:BD:4C:66:FB:F6:0C:33:12:98:04:0E:39:B9:83:23
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e37362e38302e302f32302d3234203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:68:1f:3a:0c:4c:a5:9a:c8:03:19:91:df:0b:0f:32:59:28:
         42:c1:21:2d:3d:d7:fc:b3:d2:2f:56:79:97:d7:1f:d8:f6:10:
         ba:cb:18:50:79:54:0f:ce:2a:ad:18:1b:3a:aa:50:a0:ac:22:
         0f:17:da:cb:2e:d4:84:ad:6c:63:24:7e:bd:91:21:cd:57:ae:
         ce:fc:32:04:9a:95:81:71:96:56:42:8f:2e:6f:0d:89:54:14:
         b5:6f:29:ca:37:9d:c1:a1:f1:0f:7b:b2:10:92:dd:53:0a:14:
         06:ac:ca:e3:05:bd:ab:ab:59:ab:b0:e8:51:a9:2c:1a:85:d7:
         0e:99:fc:37:92:55:42:8e:93:d8:41:4b:2c:94:98:82:4f:02:
         a7:c0:80:d7:cd:b5:8a:2a:46:55:2c:38:2d:e2:ab:3f:7e:98:
         b8:f2:25:99:46:21:dd:a2:6a:00:d0:5e:cc:66:e5:ca:48:f1:
         c8:01:36:34:a7:f5:f9:89:a9:4d:16:42:cc:c6:65:64:71:c3:
         02:c8:96:6d:84:42:50:f3:7f:8c:83:b2:a1:7c:d3:d4:d1:39:
         91:12:92:a6:ee:7b:f3:56:78:25:ca:95:8f:d6:b1:fd:48:14:
         f0:a1:e7:2f:94:a0:00:46:03:5b:43:ac:60:ca:bf:05:b7:5e:
         ef:50:79:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org