Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139332e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139332e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          6jMP2X2SLCGmbN0QF5aTgrGF1rOorOJr4dwyHmeR2G4=
Subject key identifier:   B3:0E:18:72:B1:13:E5:9D:E2:1D:CA:11:10:5F:72:17:02:3F:EC:12
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       1F17DF5A30E593AF48C7D4ECBC530421525C86B5
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139332e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:17 +0000
ROA not before:           Tue 05 Mar 2024 18:08:17 +0000
ROA not after:            Tue 04 Mar 2025 18:13:17 +0000
asID:                     20015
IP address blocks:        200.71.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:17:df:5a:30:e5:93:af:48:c7:d4:ec:bc:53:04:21:52:5c:86:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:17 2024 GMT
            Not After : Mar  4 18:13:17 2025 GMT
        Subject: CN=B30E1872B113E59DE21DCA11105F7217023FEC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:a5:34:b4:fe:b8:84:df:b1:f6:cd:d3:9c:
                    e7:ab:b1:fd:3b:bd:4e:92:ab:cf:31:3b:f9:7b:8e:
                    18:ae:a5:6b:d9:04:86:05:a3:85:01:61:7d:ac:19:
                    e8:37:ab:06:9b:ca:26:aa:b6:60:bb:ca:e4:11:8c:
                    0a:32:16:b7:86:ae:2c:a2:8f:58:07:69:2e:20:fa:
                    2f:90:8e:e0:a0:cd:ba:cd:14:64:81:0c:49:0e:4a:
                    b6:99:23:a7:05:31:d6:78:76:90:88:ae:20:ad:3e:
                    fb:c4:d2:97:79:d1:dc:0f:4c:31:51:3f:9d:1f:dd:
                    93:05:9d:3d:a7:39:ec:78:cd:24:d3:23:f1:c3:bb:
                    6b:96:3e:4a:df:af:4e:59:6e:34:e5:94:70:db:90:
                    63:ac:3a:cf:50:a8:93:d2:33:f2:51:b2:c2:5b:28:
                    25:9e:85:6f:2e:ac:ea:95:b4:eb:b9:17:ee:c2:46:
                    1c:3b:f8:1f:e8:93:36:5d:97:f3:a6:73:92:18:9d:
                    76:fa:91:39:cf:72:bc:43:a5:e0:db:8f:2f:be:56:
                    25:58:42:e8:fb:e8:bc:3a:b5:06:da:b6:29:22:8b:
                    13:ce:1e:0d:2e:2c:a8:91:d7:05:1d:87:df:30:cc:
                    01:f2:58:66:0c:9d:2f:04:1d:3a:57:aa:59:1a:07:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0E:18:72:B1:13:E5:9D:E2:1D:CA:11:10:5F:72:17:02:3F:EC:12
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139332e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:6c:bb:67:53:62:35:58:27:91:a7:44:3e:de:09:0b:53:
         e8:5d:36:d5:a6:a0:62:c3:be:f9:ff:68:e6:65:73:f6:81:cc:
         6d:64:a8:8e:27:7c:4b:40:e2:36:b2:82:5f:da:4d:2a:0c:c1:
         c4:62:56:e6:ab:be:69:8b:9b:42:e2:97:b4:06:7c:09:f0:3b:
         bc:a4:d3:f6:8b:95:0e:7b:bf:82:e7:f3:00:48:47:2d:a7:d5:
         eb:e0:4a:b4:2c:dd:89:d4:bf:71:e1:f3:e7:25:a1:50:b0:b3:
         1a:05:c0:53:08:fe:20:20:13:fc:e9:73:c7:a8:08:9c:bb:92:
         f9:cc:2f:04:22:84:12:64:54:b1:f1:e6:3d:3d:9f:51:29:67:
         b8:8b:c5:36:62:a8:39:ee:62:43:41:03:38:df:a9:ec:99:b4:
         12:13:7f:4f:71:fd:e1:22:69:3e:62:47:d0:5f:b8:42:2b:10:
         dd:30:6e:25:2f:9f:19:b9:9f:83:de:32:9e:d3:18:b2:91:83:
         58:e7:ed:31:cd:b9:b0:84:c8:bf:8b:4f:32:d5:96:de:e9:60:
         8c:ff:30:f6:e2:88:a1:c7:7d:0e:60:45:19:ad:be:16:7f:8c:
         ad:02:1d:10:92:55:95:bd:20:b2:7a:2e:eb:82:7b:be:19:10:
         d4:3c:8a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:35:25 2024 by rpki-client on console-ams.rpki-client.org