Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131332e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131332e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          5+LlxecZsylE0JzS6/LYvuAk3+HxCOtL3aMfswpW5hg=
Subject key identifier:   6C:64:5B:1B:37:86:18:8A:E8:3A:9D:AB:6C:3A:1B:F7:90:EF:34:29
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       5516ED2C35ADE56E052DDE209079DB3D9967B748
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131332e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 05 Mar 2024 17:52:29 +0000
ROA not before:           Tue 05 Mar 2024 17:47:29 +0000
ROA not after:            Tue 04 Mar 2025 17:52:29 +0000
asID:                     52283
IP address blocks:        200.108.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:16:ed:2c:35:ad:e5:6e:05:2d:de:20:90:79:db:3d:99:67:b7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Mar  5 17:47:29 2024 GMT
            Not After : Mar  4 17:52:29 2025 GMT
        Subject: CN=6C645B1B3786188AE83A9DAB6C3A1BF790EF3429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:45:c6:2e:e0:44:83:ba:19:3d:f2:4a:3a:
                    16:44:dd:fc:ee:5a:cb:10:da:d1:44:c4:7b:d1:69:
                    76:eb:4c:d2:4c:33:66:97:22:40:9c:5a:9a:be:77:
                    8d:2d:c7:72:93:4e:2e:06:5c:79:64:0f:ca:bc:36:
                    7b:c4:ab:00:e8:ea:2d:d9:54:98:08:49:09:ba:65:
                    55:0e:a5:82:c0:30:f0:cb:47:c7:d1:0e:30:15:bf:
                    37:d3:bd:99:af:6e:03:55:3f:9b:be:12:dd:2d:d7:
                    53:05:e2:a0:86:b9:f7:54:98:dd:92:38:2c:a0:71:
                    d5:91:8d:86:94:c2:d9:08:6d:0d:16:f5:79:1c:08:
                    e6:fe:e3:26:8b:22:82:bf:cc:4d:ba:9d:c4:d5:4d:
                    dd:17:2f:34:65:8f:d5:e1:2f:c4:de:30:72:fb:6a:
                    53:b5:1c:48:6b:c2:b9:c2:72:b9:f6:50:33:cd:23:
                    f8:21:dc:6c:36:1a:a7:0e:75:d0:40:4b:3c:5e:ef:
                    a1:0f:f0:af:ba:6d:f2:6f:4c:9f:38:3d:e5:71:b3:
                    55:8e:6e:d1:b8:4f:00:90:a2:49:30:c2:d3:ec:b2:
                    45:bd:c1:d4:42:d1:7d:eb:dd:06:70:46:43:69:ef:
                    b1:40:c6:79:9f:dc:40:cb:cf:ad:d2:79:b4:ee:fe:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:64:5B:1B:37:86:18:8A:E8:3A:9D:AB:6C:3A:1B:F7:90:EF:34:29
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131332e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:24:3e:b1:bb:29:d5:d1:1c:d9:e6:94:73:18:b8:3b:80:26:
         6c:09:d9:6c:7e:22:bc:20:6e:ce:c4:84:70:7c:b1:d6:a7:0d:
         3c:24:89:ee:64:05:c9:a3:90:c9:9c:c2:3f:a0:6c:84:b4:05:
         4d:43:d2:cb:bb:aa:ef:0b:c4:af:69:d2:26:6e:dd:02:59:ab:
         3d:48:eb:14:35:ee:0b:a1:7d:1d:14:51:fa:3d:1b:00:00:c2:
         3c:90:d9:e6:74:41:d2:b6:dd:b6:14:52:6f:43:50:23:cb:10:
         48:1b:6f:a0:31:fb:a6:3d:5c:b8:13:dd:a2:c6:27:44:e7:8b:
         7d:27:af:7c:e0:11:77:ff:88:67:f8:e1:98:68:29:7a:c6:23:
         e9:65:7b:2f:9a:f9:a1:39:3d:0d:f0:36:06:b4:f5:96:5f:62:
         80:b4:3e:f4:1e:8a:36:26:e5:7a:41:c7:d4:10:d5:e2:f2:81:
         2f:f3:3e:be:7f:28:e0:0c:ac:04:8f:94:44:e2:81:77:df:bc:
         1b:01:60:27:3b:90:31:33:dd:f5:d9:b6:2e:ab:a6:6f:38:83:
         ad:cd:7e:9b:f3:27:06:e6:45:09:d4:2d:41:67:5f:4a:dc:fa:
         5b:d2:ec:51:d3:94:aa:a3:ad:be:b9:4a:f2:1f:7b:f1:aa:a7:
         ac:04:e3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org