Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131372e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131372e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          9epfdq5q2gYD7BJNziLVQzec5O/Ya96ZMkgJS6deWEM=
Subject key identifier:   D7:E7:47:A9:C1:49:F9:85:56:D5:1F:49:4E:67:BC:2D:65:4C:F1:17
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       4FFFC683084880B3F4D11AF702DB2F696EC0615B
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131372e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 05 Mar 2024 17:52:28 +0000
ROA not before:           Tue 05 Mar 2024 17:47:28 +0000
ROA not after:            Tue 04 Mar 2025 17:52:28 +0000
asID:                     52283
IP address blocks:        200.108.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ff:c6:83:08:48:80:b3:f4:d1:1a:f7:02:db:2f:69:6e:c0:61:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Mar  5 17:47:28 2024 GMT
            Not After : Mar  4 17:52:28 2025 GMT
        Subject: CN=D7E747A9C149F98556D51F494E67BC2D654CF117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:6b:f0:27:55:d0:fa:e9:a7:b8:f8:13:54:
                    3f:c4:bd:23:0d:ea:a8:b6:4d:5e:bd:12:89:86:b8:
                    6f:2d:da:b0:96:c2:a7:62:f0:41:52:df:ee:5e:84:
                    96:2b:b1:4a:92:ce:84:64:08:d0:d3:43:d1:2e:72:
                    84:e9:d6:dd:ff:28:23:91:85:32:a1:b6:97:d5:42:
                    e1:5c:75:7e:30:a9:ce:bb:9a:8e:05:31:d7:e5:16:
                    6b:e8:89:96:48:14:e5:bf:bf:d6:6f:28:47:34:f7:
                    25:33:61:c5:3d:f7:ba:c5:49:80:1e:6b:04:83:eb:
                    80:01:82:10:c9:47:e5:83:a2:8a:d8:48:d5:93:93:
                    1d:51:cf:e8:3d:de:52:21:26:76:df:ac:c0:7d:e4:
                    89:62:46:52:9b:b6:bc:16:c1:11:f9:6a:40:b9:50:
                    19:b1:ba:9e:9e:b1:a7:70:ff:79:51:15:8c:aa:fe:
                    14:b3:dc:e3:04:e6:15:9d:be:60:fc:29:a7:b3:d4:
                    6e:b5:13:ab:12:a2:2b:df:b5:8f:ce:de:93:b7:43:
                    50:d2:e6:88:c6:d6:eb:07:73:65:36:fd:c5:0a:d6:
                    fe:20:85:ad:84:db:10:7a:0f:18:db:d6:2b:71:49:
                    14:ea:30:6a:a9:ec:89:57:4e:5a:cd:b4:fd:68:1c:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E7:47:A9:C1:49:F9:85:56:D5:1F:49:4E:67:BC:2D:65:4C:F1:17
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131372e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:42:91:79:39:1d:2c:8a:d4:4f:f3:b4:71:68:ef:d0:46:32:
         eb:a3:ce:54:31:71:5c:16:d7:52:60:17:4c:00:12:95:1e:55:
         45:cb:4d:ae:1f:c4:eb:b4:f0:15:76:1d:85:b4:b5:31:46:e7:
         65:99:cd:69:b9:be:fd:76:a6:2c:d0:ca:eb:80:f8:4f:4a:3b:
         d8:57:24:fa:3d:d9:c2:6d:eb:aa:dd:57:6d:ba:a7:aa:06:b3:
         89:6a:29:78:54:16:de:bb:67:96:77:8d:b7:1c:a1:17:20:f1:
         e7:2d:ea:d0:d2:64:8a:20:cc:9a:ed:ff:82:c1:81:d7:5d:ab:
         62:27:6f:4c:4e:1a:be:0d:c1:44:01:11:81:02:93:00:3f:02:
         58:d6:3a:62:77:e5:d1:47:40:85:95:da:4d:b8:64:93:c6:3e:
         13:02:32:6d:7b:69:a2:6a:1f:36:af:60:31:d3:0c:63:a1:52:
         48:9c:ed:bf:65:04:41:c2:9a:be:89:db:41:ba:68:6a:84:3c:
         1f:d0:3e:19:0a:80:cd:b7:6e:00:d4:66:0c:15:0f:b7:39:75:
         bb:03:14:93:30:e5:3e:d8:1f:74:22:5c:ff:73:55:8f:c0:66:
         3d:99:ad:ee:6a:f3:16:8f:98:d1:b8:93:86:a2:bd:aa:07:77:
         7a:c6:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org