Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/3230302e31302e3136382e302f32322d3234203d3e203634313133.roa
File:                     3230302e31302e3136382e302f32322d3234203d3e203634313133.roa (raw, json)
Hash identifier:          Zpuvgz1b7bgmYKnvqTS0wwZSB6GCTei6xhzc3ffRr8c=
Subject key identifier:   B2:55:E4:18:F7:67:5F:91:50:57:01:23:82:8B:44:3D:46:0E:12:BC
Certificate issuer:       /CN=814B24C51A1460AE5A3315394180D6A03BB46BEC
Certificate serial:       5C9F9EDF7ED112F3695BDB49B60AE825B9345558
Authority key identifier: 81:4B:24:C5:1A:14:60:AE:5A:33:15:39:41:80:D6:A0:3B:B4:6B:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/3230302e31302e3136382e302f32322d3234203d3e203634313133.roa
Signing time:             Tue 05 Mar 2024 17:40:05 +0000
ROA not before:           Tue 05 Mar 2024 17:35:05 +0000
ROA not after:            Tue 04 Mar 2025 17:40:05 +0000
asID:                     64113
IP address blocks:        200.10.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9f:9e:df:7e:d1:12:f3:69:5b:db:49:b6:0a:e8:25:b9:34:55:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814B24C51A1460AE5A3315394180D6A03BB46BEC
        Validity
            Not Before: Mar  5 17:35:05 2024 GMT
            Not After : Mar  4 17:40:05 2025 GMT
        Subject: CN=B255E418F7675F9150570123828B443D460E12BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:0b:cd:8c:05:7a:8e:3b:a9:55:5a:11:44:
                    d1:8b:50:32:d3:77:b0:52:dc:2a:fc:d9:3a:f6:f0:
                    29:56:6f:17:a5:c6:96:bf:d6:c8:44:84:12:8b:9c:
                    eb:0e:d5:35:c3:76:72:53:05:b3:4d:20:dd:53:bd:
                    4e:0b:70:9d:a9:95:0b:03:39:59:63:79:13:d9:ff:
                    87:b7:b9:18:4b:a5:56:25:c5:cb:f3:11:80:e5:1b:
                    4e:7b:d3:b6:95:e9:cd:b4:fe:7c:e8:bc:02:91:8d:
                    0c:90:74:82:94:f6:12:e9:65:11:6d:ad:8f:61:aa:
                    9b:d7:5b:b4:02:24:bd:a2:9c:ff:16:50:fa:aa:ed:
                    9d:c2:12:87:86:ad:05:ed:c8:cd:4c:48:81:b2:73:
                    68:92:39:66:27:4a:b4:c3:a9:88:dc:bb:de:2f:3f:
                    bb:27:44:db:3f:70:83:2c:49:6c:c1:d6:4d:f2:85:
                    2c:d3:16:75:f4:80:53:b2:ed:b3:e5:f0:8e:f2:6c:
                    1d:96:87:2f:d8:6b:68:5c:a4:c2:d2:3a:3a:14:99:
                    a4:cb:f8:b1:1a:60:65:de:1d:e9:16:46:07:d7:c3:
                    9f:fb:b1:cf:3f:2d:02:55:8b:fb:a5:f7:ba:11:04:
                    f5:c1:98:75:02:e4:08:b1:ac:24:d6:24:9b:73:c7:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:E4:18:F7:67:5F:91:50:57:01:23:82:8B:44:3D:46:0E:12:BC
            X509v3 Authority Key Identifier:
                keyid:81:4B:24:C5:1A:14:60:AE:5A:33:15:39:41:80:D6:A0:3B:B4:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/814B24C51A1460AE5A3315394180D6A03BB46BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9755C5A76ECF8038C04B9D883E0A7936D02104FC2A456BC2B07E1EAF92AADE0C/0/3230302e31302e3136382e302f32322d3234203d3e203634313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:19:0c:5c:51:d1:ec:19:34:e8:69:28:a5:15:bd:82:f1:
         64:81:aa:cd:aa:cd:d9:08:67:38:d5:7b:37:5e:f9:d9:ad:0f:
         d9:50:1d:ad:56:12:c3:ed:ef:08:ce:d4:c8:d7:08:47:c6:a5:
         a2:16:1b:1c:d2:f3:fe:ee:dd:57:0f:18:7b:3d:b1:b0:1b:13:
         d8:92:55:b1:1f:6e:c6:13:4b:39:3f:3f:e6:b2:1e:76:93:1e:
         41:93:0e:f5:75:3a:08:69:52:6b:aa:67:0d:79:ec:35:6d:b4:
         39:da:39:10:c1:d3:05:6c:2e:5a:2e:7b:da:f9:38:ff:97:f7:
         2e:0e:62:c6:e7:06:a5:9c:24:0f:72:ad:94:a0:d2:80:67:8a:
         0d:be:ed:ba:7c:bb:ad:11:99:af:81:39:38:dd:8b:c3:19:18:
         4f:46:61:f4:6c:1d:23:35:ed:24:34:fe:22:c0:a8:ab:ff:e3:
         8d:6c:d6:a9:66:0d:be:80:2a:60:b1:fe:91:3d:23:26:b5:e8:
         1c:47:51:24:36:57:4e:da:30:90:5c:9f:05:d1:cb:19:95:ba:
         42:34:24:01:e0:ae:ca:69:13:90:0a:8a:61:ee:c1:9b:9a:c6:
         77:9d:79:6a:02:10:1f:56:11:7e:8c:be:2d:0c:73:e0:07:77:
         90:e7:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org