Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139342e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          A7AbVBZfN17QGJ9JPynkrpa/Pc39gwJbenjdFPzN6SY=
Subject key identifier:   D9:6E:CF:FF:3F:5A:C6:87:89:21:15:9E:42:7B:23:51:FF:94:FB:17
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       206AD939C0F2ECB45AF20A6F05A61FBCC3F5EDB1
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:13:17 +0000
ROA not before:           Tue 05 Mar 2024 18:08:17 +0000
ROA not after:            Tue 04 Mar 2025 18:13:17 +0000
asID:                     20015
IP address blocks:        200.71.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6a:d9:39:c0:f2:ec:b4:5a:f2:0a:6f:05:a6:1f:bc:c3:f5:ed:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Mar  5 18:08:17 2024 GMT
            Not After : Mar  4 18:13:17 2025 GMT
        Subject: CN=D96ECFFF3F5AC6878921159E427B2351FF94FB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:63:45:1a:93:f5:94:3c:36:97:6b:ef:de:
                    e6:08:30:f3:9c:03:96:36:54:4b:11:b6:4c:e6:08:
                    d6:dc:a4:56:e8:4c:88:ae:d2:7a:54:65:4f:7c:38:
                    c9:bc:6d:c3:49:7d:c6:3d:89:30:9f:be:62:64:1f:
                    63:0d:8d:93:a5:a2:d2:34:26:a3:ff:e4:11:89:66:
                    06:c6:4d:15:eb:0a:9c:9e:4a:77:1b:0e:5c:04:44:
                    03:a3:a7:99:0a:78:17:eb:6f:fc:cb:8b:30:9d:df:
                    a4:07:d9:28:4d:88:62:45:f4:26:7d:67:50:1c:cd:
                    7f:48:e7:4f:53:cd:4e:86:a2:b9:9e:ad:22:7f:3c:
                    31:79:91:bc:22:31:50:e2:b7:9b:87:87:9d:a5:7c:
                    f0:97:bb:56:d5:0c:74:f6:79:2e:09:2e:46:37:1f:
                    32:dc:58:07:88:de:c6:4d:70:37:40:4f:50:3a:33:
                    32:86:a1:48:f2:b0:d8:0d:d6:7e:83:91:64:58:4f:
                    12:4f:9a:b2:11:d4:0c:d6:da:c3:10:40:de:10:fe:
                    17:16:aa:0c:c0:21:35:d8:31:fc:77:a3:22:01:52:
                    a4:53:01:95:30:85:85:d4:d5:7e:bb:66:67:8a:d1:
                    ae:97:db:a0:88:15:bf:8f:fa:21:ac:1f:27:6c:50:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6E:CF:FF:3F:5A:C6:87:89:21:15:9E:42:7B:23:51:FF:94:FB:17
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a8:0b:12:91:37:ec:6a:c0:c1:53:35:b8:18:95:7f:05:26:
         ff:f6:38:15:8d:11:4e:65:2f:20:3b:50:2c:54:b6:0e:5f:6c:
         3b:3f:02:73:34:e6:32:e6:7d:83:60:85:87:8b:06:88:2d:ee:
         25:5c:23:40:91:fa:56:aa:20:7c:68:c9:d0:ca:3f:27:b1:64:
         95:e1:39:11:5d:b7:86:13:cb:66:1a:5d:b9:28:62:16:c9:63:
         77:c7:c6:b4:ac:81:bc:37:5e:4a:11:6b:67:14:67:15:dd:63:
         45:45:55:92:b8:f0:12:59:58:f5:23:ac:eb:50:86:81:dd:bf:
         24:61:b3:24:b5:ad:9f:2b:e2:f0:a7:c0:19:d9:99:a3:f6:56:
         78:c4:87:f5:5b:c7:72:31:c3:ed:d2:91:07:8f:2d:8b:73:8b:
         b9:bf:29:29:3b:6b:a3:25:3a:18:77:1e:b0:24:9c:13:95:26:
         58:59:f5:bb:9a:82:2a:c8:d2:d5:2b:e7:ba:53:6e:94:9c:b1:
         9c:43:18:1d:d0:94:0d:60:54:ac:d5:92:bc:e0:0f:28:7a:bd:
         23:e9:b3:9c:f8:9b:5e:ff:2a:f6:ba:a9:ae:37:7d:4e:16:61:
         d4:36:d6:8e:e7:39:64:79:f2:b6:3c:90:29:6a:e2:d4:12:b4:
         fd:2a:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org