Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131392e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131392e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          xuGdsvttE4cfh7hi0jGC+4jcXc2bi0igBkoZEEj1NR0=
Subject key identifier:   F0:E0:E6:2D:B6:1D:58:62:5B:B4:F2:2F:7B:AA:9C:85:2F:75:EE:AD
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       23E9AF9DAC1B3A478DA043CFB55DD13D121458DE
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131392e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 05 Mar 2024 17:52:27 +0000
ROA not before:           Tue 05 Mar 2024 17:47:27 +0000
ROA not after:            Tue 04 Mar 2025 17:52:27 +0000
asID:                     52283
IP address blocks:        200.108.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e9:af:9d:ac:1b:3a:47:8d:a0:43:cf:b5:5d:d1:3d:12:14:58:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Mar  5 17:47:27 2024 GMT
            Not After : Mar  4 17:52:27 2025 GMT
        Subject: CN=F0E0E62DB61D58625BB4F22F7BAA9C852F75EEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:16:4b:e6:f7:ed:8e:fc:8b:a5:86:eb:08:d0:
                    48:16:62:35:1d:79:26:b2:67:f4:c7:43:8d:b6:47:
                    3b:90:5a:56:39:57:80:0b:79:b5:9a:46:b4:9d:90:
                    1e:f3:42:80:0c:08:0b:8a:61:2d:6e:b6:22:9a:da:
                    6a:c1:aa:b0:fb:3d:c1:83:37:42:15:c3:09:74:59:
                    ca:69:50:7c:92:9d:be:0b:4b:f5:10:2b:0a:19:14:
                    a2:04:07:43:e0:a4:2b:25:ee:4b:93:fc:e4:51:bd:
                    f9:ce:7b:53:86:72:0d:6d:0d:12:f4:a2:fe:e9:91:
                    8d:0e:c2:9f:f5:a4:20:37:bd:fb:84:e2:a6:ad:5c:
                    34:fe:ba:80:f5:81:e6:b0:26:b0:fb:cf:d4:69:9a:
                    41:52:5f:20:39:7f:22:d6:91:b6:02:31:08:19:b4:
                    5e:9e:c8:0a:7d:29:86:b5:7d:4b:18:fb:e1:24:af:
                    7a:38:24:a7:7a:7f:bb:a8:af:10:a7:ff:d7:19:49:
                    ab:7f:7b:02:a1:10:06:b4:ea:62:42:c5:ac:ab:c0:
                    3b:ff:af:2f:33:67:74:55:1b:ec:7a:7e:72:51:8b:
                    08:43:f9:cf:bc:e7:38:d0:a6:b8:31:0e:37:ef:14:
                    cc:61:c7:fc:ab:f3:cf:9b:b6:04:91:48:b6:f1:aa:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E0:E6:2D:B6:1D:58:62:5B:B4:F2:2F:7B:AA:9C:85:2F:75:EE:AD
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131392e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:82:a7:ef:9b:9c:82:43:51:62:f5:a2:3b:58:d2:c1:07:
         af:e2:71:72:f2:cb:3d:eb:87:83:b7:88:18:69:56:e9:83:f7:
         cc:22:4e:a8:bf:73:92:f2:f5:8d:11:9b:d3:8d:d7:ed:0d:c5:
         8d:26:00:e2:ba:a2:6c:65:e5:c0:16:98:3b:59:a8:78:d6:14:
         9b:46:5b:1b:a0:ed:7e:ae:ae:5e:7a:80:99:4f:3b:2d:f5:aa:
         57:51:7c:35:f3:43:08:72:b0:16:84:03:4a:dc:f6:d9:35:37:
         7c:1f:e8:35:42:fa:cc:dd:f8:b0:90:3a:2c:35:13:3e:6c:52:
         28:05:1a:3c:f0:0e:2e:e7:ba:76:5a:5d:72:78:a7:87:90:b0:
         e4:1e:09:e4:4a:22:d3:4d:d3:3a:bb:45:4a:d0:1c:b8:84:1a:
         4a:38:56:37:1d:fb:bb:bf:dc:b0:d7:68:eb:d3:61:37:15:6b:
         c5:af:62:99:fe:fb:4e:e7:26:e5:9e:7e:ca:4a:34:41:30:cb:
         ae:e7:9e:5d:81:04:1e:97:69:15:0f:d0:9e:35:7b:65:7b:79:
         7f:d1:79:e2:99:53:3b:3b:69:94:54:d1:bb:d6:b6:7d:6f:1d:
         78:90:14:d9:b3:e3:26:9d:da:89:b7:f1:39:32:af:c7:63:59:
         66:de:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org