Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136392e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136392e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          qMsBpWDmq4l7vCIhgoQY8ubGkDqJhzUO6FlZR7s6iuw=
Subject key identifier:   CB:9B:EF:B2:91:33:4D:02:31:79:BA:1A:AB:CC:64:55:22:D1:52:38
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       4CD07A81C2BEB34232617ADEDD9699BC9B223415
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136392e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 05 Mar 2024 18:07:16 +0000
ROA not before:           Tue 05 Mar 2024 18:02:16 +0000
ROA not after:            Tue 04 Mar 2025 18:07:16 +0000
asID:                     22541
IP address blocks:        200.75.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d0:7a:81:c2:be:b3:42:32:61:7a:de:dd:96:99:bc:9b:22:34:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Mar  5 18:02:16 2024 GMT
            Not After : Mar  4 18:07:16 2025 GMT
        Subject: CN=CB9BEFB291334D023179BA1AABCC645522D15238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:1f:ea:ae:64:0f:d3:c5:31:5a:55:8f:ec:
                    61:fb:8d:53:91:b9:8a:8f:4f:0e:12:57:69:4b:b6:
                    24:10:cd:71:86:46:5d:3b:bd:be:2a:57:81:24:99:
                    bf:8d:cc:45:d0:44:c8:37:77:e7:4e:7e:22:c9:d1:
                    3f:4f:4d:f0:54:a7:67:06:a1:8f:c5:2a:c9:58:74:
                    bb:e9:ef:50:44:86:85:f5:64:10:3e:95:e6:4a:9c:
                    4e:49:14:3f:10:f5:9a:ac:90:d9:7b:6e:22:2f:e0:
                    ec:22:fd:4a:6e:94:bf:f3:1d:e0:99:0e:d1:e1:08:
                    aa:ff:22:e2:7f:87:8a:1b:69:0d:11:da:5c:9e:78:
                    ed:d3:34:d9:86:05:5d:2a:0b:96:0c:8c:f2:76:8c:
                    9f:f8:1c:2d:ee:e9:a4:4d:c0:62:7b:2c:eb:26:bf:
                    84:72:fe:cc:a7:5e:fc:23:52:cb:33:dc:5a:90:16:
                    50:5b:be:66:1c:bb:44:ab:e7:e6:07:f5:53:b2:4b:
                    fe:16:27:25:87:27:99:99:81:cf:a3:cb:81:c9:cf:
                    38:27:f7:29:7f:73:5e:13:75:92:7e:1f:8f:41:a8:
                    f9:37:62:49:31:7a:61:d0:92:05:a6:16:2d:e4:6f:
                    38:10:0b:02:39:4c:83:1d:71:63:79:b4:53:e0:09:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:EF:B2:91:33:4D:02:31:79:BA:1A:AB:CC:64:55:22:D1:52:38
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136392e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d0:ea:2d:f4:e4:53:46:48:b6:7d:dc:ea:5c:fb:6b:a7:b9:
         ef:c4:91:37:66:d9:a6:8b:e2:6d:c7:92:f9:e7:8e:fa:da:fe:
         8c:a3:61:9c:f5:18:38:b2:17:20:85:d2:b0:f8:9f:1a:9a:b2:
         de:89:76:ff:55:2b:d1:03:d3:3d:6f:29:27:84:69:84:47:e6:
         23:ea:26:10:e0:39:f0:5a:23:25:92:d0:7b:b1:8b:90:ae:81:
         23:82:b0:be:b1:18:82:26:34:eb:98:f3:27:2b:88:27:0b:43:
         12:6d:02:ef:c9:44:10:d6:d8:f4:a8:33:72:ba:f8:82:7b:03:
         30:4d:bf:57:1e:45:bb:91:f8:9a:49:28:03:b1:6f:73:79:aa:
         d5:73:39:98:57:3a:4e:98:e6:ef:01:be:7c:92:ed:7b:9b:00:
         2c:c0:22:33:b9:a9:fe:2b:a9:9e:7b:a7:73:0c:c7:80:82:0f:
         10:ca:ac:53:10:ca:f4:3d:5c:1c:a2:86:d8:52:fe:6e:77:7d:
         3c:be:a2:b6:7f:9b:90:3d:8b:65:0a:da:2f:ca:23:c8:ac:34:
         75:56:fd:e6:b6:6c:d9:5e:88:a8:53:15:17:70:79:f0:c4:69:
         ac:25:18:c1:3f:c7:d8:50:df:62:d7:b0:64:fe:01:2a:fe:cd:
         94:f4:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org