Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137342e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3137342e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          fyNiVWrG1QtTD4vuiI69RLuWS22WVSdqTF8n9pd1bv8=
Subject key identifier:   B9:9E:52:14:6C:33:F0:A1:EC:82:81:7D:81:2D:AF:8A:2D:11:63:03
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       0DF432E9182A04057CFF3030DA8088A57C513208
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137342e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 05 Mar 2024 18:07:22 +0000
ROA not before:           Tue 05 Mar 2024 18:02:22 +0000
ROA not after:            Tue 04 Mar 2025 18:07:22 +0000
asID:                     22541
IP address blocks:        200.75.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f4:32:e9:18:2a:04:05:7c:ff:30:30:da:80:88:a5:7c:51:32:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Mar  5 18:02:22 2024 GMT
            Not After : Mar  4 18:07:22 2025 GMT
        Subject: CN=B99E52146C33F0A1EC82817D812DAF8A2D116303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:d7:76:9a:67:b8:79:68:a0:07:a3:07:58:
                    a1:bf:1f:8e:bb:af:80:1a:16:46:46:95:5c:1f:57:
                    8c:5c:7f:41:dc:8e:e4:c9:bd:7e:5c:fd:b8:16:c0:
                    e1:3d:77:f6:20:3a:48:f2:06:72:04:63:db:a6:d5:
                    51:a8:d2:87:04:21:db:78:d7:8d:be:bc:c4:64:19:
                    46:a2:48:68:03:b0:56:c9:1d:d0:38:8a:5d:72:6d:
                    77:ce:33:53:24:fc:4a:a1:0d:b5:aa:f9:4c:c8:e7:
                    a5:df:ec:91:39:e1:88:dd:fa:de:f3:de:03:15:be:
                    8e:f7:0d:01:45:17:ab:40:b8:ee:96:0a:e9:b8:34:
                    bc:bb:f6:84:93:86:59:2c:0c:29:c6:b1:19:64:e5:
                    88:08:61:1f:a8:1a:e2:b9:08:25:c5:13:9d:67:ef:
                    26:44:bb:a0:5f:c6:8c:6a:59:28:fc:98:a8:25:12:
                    22:8c:51:05:52:86:3b:57:14:76:1c:87:7e:ce:23:
                    67:cb:97:85:bb:a4:37:b5:42:0c:4d:2b:70:19:85:
                    34:32:e9:e5:eb:fc:0e:b6:3e:1b:c3:96:69:b5:ac:
                    6e:61:19:25:15:98:0c:b2:a4:fb:68:87:1c:f1:ad:
                    77:44:7b:28:8a:7e:b8:54:91:51:05:32:af:ff:7d:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9E:52:14:6C:33:F0:A1:EC:82:81:7D:81:2D:AF:8A:2D:11:63:03
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137342e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:50:57:67:17:d6:2f:ee:a0:53:cf:9f:35:7e:70:7e:2a:
         bb:c1:e3:79:6b:bf:9f:0c:aa:bd:b0:3d:b4:d1:b9:4a:63:ed:
         ef:f3:17:64:82:7f:45:a9:c5:c0:50:f5:40:00:2f:c3:40:70:
         d6:39:f6:54:75:d6:01:28:51:91:ea:5a:63:8d:47:47:81:36:
         d3:be:24:d6:56:57:f3:be:03:6a:1e:aa:c8:46:6a:fb:1e:e1:
         1e:67:11:3d:e6:37:dc:66:94:10:58:b2:d4:8a:07:d2:33:b6:
         4c:8b:59:74:1f:03:c9:cb:74:24:23:8d:9a:ed:e4:83:0e:a5:
         14:34:2e:9d:64:40:bd:8a:85:d6:a1:47:bd:44:55:a1:23:b3:
         77:69:b1:64:cf:5f:3f:2e:39:f5:28:b4:db:92:f0:c9:36:31:
         67:02:f1:fa:e0:8a:04:2b:c2:ec:f4:31:eb:e9:1c:39:e2:05:
         35:d7:9f:10:5d:9e:05:06:2e:51:1d:c4:77:66:2b:3a:96:eb:
         ff:5a:4c:64:21:8f:48:76:83:72:3f:1b:8d:1a:b5:c7:52:c5:
         35:99:56:44:39:49:28:8e:74:5f:fc:62:67:68:e0:d3:7c:13:
         a7:23:a6:ca:ac:10:b4:e4:1a:05:9e:55:28:bf:79:35:a9:29:
         e3:0b:12:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org