Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131342e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131342e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          eO7Rbw68Dqo/2zctf7j7G4FlEy7wVEjH6qDJ61IPLEQ=
Subject key identifier:   FB:F2:4D:B3:4E:96:3D:0C:A7:DA:78:40:12:47:E8:E8:69:0A:22:7E
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       0FF73910D48679FB32EE098CCE5123FDFE8F7544
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131342e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 05 Mar 2024 17:52:28 +0000
ROA not before:           Tue 05 Mar 2024 17:47:28 +0000
ROA not after:            Tue 04 Mar 2025 17:52:28 +0000
asID:                     52283
IP address blocks:        200.108.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f7:39:10:d4:86:79:fb:32:ee:09:8c:ce:51:23:fd:fe:8f:75:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Mar  5 17:47:28 2024 GMT
            Not After : Mar  4 17:52:28 2025 GMT
        Subject: CN=FBF24DB34E963D0CA7DA78401247E8E8690A227E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:d0:06:5f:02:ac:fc:cb:d1:02:cc:13:ba:
                    43:32:aa:19:22:b6:de:e9:d1:b6:52:0b:4d:e8:91:
                    96:97:e2:da:fe:4a:1e:a9:58:bf:dc:ce:d8:6f:27:
                    30:80:b1:77:a9:40:5e:33:f4:a4:62:4b:7e:20:35:
                    94:17:c4:3f:8c:ab:32:1a:2a:20:cc:81:23:b7:ba:
                    45:fb:ea:87:9b:ed:bc:59:9e:30:ea:34:26:a9:41:
                    65:a9:14:4c:14:ff:bc:a9:b9:e0:95:88:66:94:7d:
                    2f:42:81:14:7c:d6:73:31:0b:31:57:18:8f:05:d2:
                    de:8c:88:fb:a0:8d:1f:b2:28:b3:39:30:fd:10:40:
                    ca:67:07:d3:86:92:b9:6e:de:5b:50:ed:73:13:be:
                    ce:71:76:46:e6:96:7e:84:f5:ca:ee:55:c6:30:95:
                    d6:25:ed:f1:17:30:f8:60:14:90:c5:b7:b7:30:41:
                    ad:ac:d9:50:55:75:20:36:7b:35:03:0d:0b:d8:01:
                    3c:1d:e4:4b:fd:05:9d:c6:72:74:b4:b2:cc:47:0a:
                    98:a4:63:c5:26:02:ef:e6:41:76:19:ec:a5:be:de:
                    fc:16:4e:3b:0f:55:d7:eb:56:89:35:6a:8b:9c:58:
                    60:05:ea:cd:d8:d8:29:eb:59:c8:4c:68:98:70:18:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F2:4D:B3:4E:96:3D:0C:A7:DA:78:40:12:47:E8:E8:69:0A:22:7E
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131342e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:0d:96:1d:25:83:2c:2e:ef:29:39:bb:60:29:4a:c6:09:
         ca:6b:2b:28:02:53:c3:ae:fc:8a:1a:f7:0b:85:47:77:3c:5d:
         52:15:57:83:dd:6c:fd:eb:2c:ad:de:32:ce:a5:1d:aa:26:d9:
         6a:7a:f1:cf:46:6e:29:77:d1:c7:1d:32:ab:8c:3c:7e:ed:55:
         6f:d0:ac:b7:7c:5a:2d:3e:13:5a:9c:8c:74:ad:d0:9f:eb:98:
         c5:fe:f5:df:6e:03:be:8c:8c:a4:e9:70:a5:3f:62:99:e7:ed:
         9d:7c:50:a5:43:88:0a:da:9c:45:3b:80:9f:7e:49:79:03:ff:
         06:03:47:f6:a3:a1:5d:60:63:86:29:fb:1c:30:97:03:69:90:
         a9:82:15:6a:88:7d:ca:dc:48:79:65:ae:f6:ba:8b:1e:12:1b:
         80:29:19:1e:50:14:91:eb:6f:04:b8:ec:ca:79:72:f7:dd:59:
         6d:90:c6:2c:f2:31:f2:5f:2c:f1:d7:ac:4d:74:aa:62:58:0d:
         83:80:37:19:7d:96:14:78:94:78:b1:a6:df:37:25:ea:70:28:
         98:c4:a7:c9:46:1b:88:15:7f:d0:8d:01:3f:7f:44:e2:2e:79:
         2b:d2:4d:67:a0:0e:54:03:73:70:93:be:91:02:2d:29:42:97:
         45:6a:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org