Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139322e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139322e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          RTSobzaddP8xMe5w8X9NVt6CHEsFYXdCdY7gF3x6Cig=
Subject key identifier:   C3:93:D4:8F:9C:9C:FF:9F:F9:6F:96:0C:F0:4C:A0:1D:14:87:6A:C0
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       61A868B5D35E84CB8931F0492D5C0DC488F85539
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139322e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:20 +0000
ROA not before:           Tue 05 Mar 2024 18:08:20 +0000
ROA not after:            Tue 04 Mar 2025 18:13:20 +0000
asID:                     20015
IP address blocks:        200.71.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a8:68:b5:d3:5e:84:cb:89:31:f0:49:2d:5c:0d:c4:88:f8:55:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:20 2024 GMT
            Not After : Mar  4 18:13:20 2025 GMT
        Subject: CN=C393D48F9C9CFF9FF96F960CF04CA01D14876AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:19:37:97:8b:02:4c:c3:61:c9:9b:cf:05:
                    5a:fd:2b:75:a2:a9:33:f0:8e:a7:6a:83:51:59:fc:
                    cf:17:fe:b0:67:2d:76:c2:ab:e9:c3:be:fe:91:96:
                    27:3c:77:7e:3e:55:ea:e2:61:bf:66:fc:5f:05:d3:
                    0c:19:99:6a:61:ee:f0:f2:6d:90:21:ba:5f:b3:9c:
                    78:de:85:47:91:ff:f9:20:03:8a:21:7d:17:35:02:
                    94:fb:2e:4f:0e:f1:a5:0c:29:e2:77:39:60:b8:64:
                    fb:aa:c6:3c:14:81:1d:80:5a:e9:96:dd:5f:ba:d1:
                    c2:17:9a:11:63:96:69:0e:31:10:8f:ee:f0:53:97:
                    19:69:bc:31:fd:a0:e7:93:5c:2c:3a:cc:fe:24:98:
                    ad:7e:9e:12:af:bc:07:09:41:fd:72:e0:20:65:e2:
                    5e:b9:e2:68:19:74:d5:d0:4c:5f:c2:5c:69:07:18:
                    d3:3b:3e:d4:86:97:c2:26:cb:79:d4:d3:06:09:92:
                    02:63:48:04:1d:aa:2c:d0:0b:35:e2:c9:d3:65:d7:
                    0c:e7:f3:89:66:71:47:1f:a3:0e:5f:b2:44:d7:76:
                    2c:8a:60:42:f6:25:3e:ca:4b:a0:59:7e:b5:85:68:
                    24:42:3d:97:59:2b:6a:cb:19:f5:7d:4e:32:cf:21:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:D4:8F:9C:9C:FF:9F:F9:6F:96:0C:F0:4C:A0:1D:14:87:6A:C0
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139322e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:3d:e6:bb:18:82:0e:80:68:f3:37:32:ea:8c:74:2c:bf:3d:
         ce:13:2c:d0:b5:b5:63:d2:7d:0e:88:f7:ec:b6:25:9a:73:af:
         9f:1a:af:21:f2:b9:79:10:c6:f1:6e:12:36:27:d4:5b:79:49:
         cf:a6:33:fa:18:67:5c:c6:b7:99:15:75:10:c5:16:a2:c2:f9:
         89:c6:44:3e:10:8a:d0:4b:2d:1c:a8:f7:89:1c:fe:31:07:69:
         57:01:5a:cb:8b:2e:6c:b4:d3:4d:59:3e:cb:69:27:3d:5a:02:
         de:8f:25:a5:a8:19:2c:69:3a:d2:2f:27:51:71:d6:05:83:f4:
         ab:18:7f:26:1f:2a:f4:34:6b:71:80:18:03:5c:5d:c1:eb:4b:
         b2:bd:20:b8:ae:ec:0f:cc:6b:70:d6:95:c8:cc:be:bf:88:05:
         75:e3:87:c2:8b:05:fe:b0:62:f0:4b:35:a3:6a:ea:fc:4e:2c:
         43:fd:d3:69:1a:d0:ad:92:ab:39:e9:ff:ec:d3:c5:fa:70:79:
         0f:a6:3d:ef:9b:c5:6a:bf:7e:ec:49:d0:c5:00:72:f3:eb:13:
         31:d2:e4:5c:c3:3d:d7:ba:d5:fd:12:b6:ed:60:b5:af:74:4d:
         43:2c:17:22:9a:b6:e5:75:e9:c5:53:9f:4f:c2:aa:96:d8:4b:
         53:ba:4e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:40:31 2024 by rpki-client on console-fra.rpki-client.org