Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233312e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3233312e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          BjVZVXUJwDyypANMHFQsr/M4vAyDX+60FP/Tal0ZSa8=
Subject key identifier:   A8:AA:7F:E7:3D:3E:71:03:17:3D:79:3C:6B:13:26:3F:44:DF:3A:7C
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       7B33657C8B233739B13C41990FB8C2F08D8527C8
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233312e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 05 Mar 2024 17:56:40 +0000
ROA not before:           Tue 05 Mar 2024 17:51:40 +0000
ROA not after:            Tue 04 Mar 2025 17:56:40 +0000
asID:                     27727
IP address blocks:        200.61.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:33:65:7c:8b:23:37:39:b1:3c:41:99:0f:b8:c2:f0:8d:85:27:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Mar  5 17:51:40 2024 GMT
            Not After : Mar  4 17:56:40 2025 GMT
        Subject: CN=A8AA7FE73D3E7103173D793C6B13263F44DF3A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:79:f0:06:0c:b6:12:16:87:51:88:3e:c0:f2:
                    87:73:21:1d:0d:86:0a:84:76:cc:7d:11:9b:49:8e:
                    65:f0:6a:5e:a4:9b:8f:73:26:f5:1e:85:fe:a0:5b:
                    29:c6:d1:67:e8:09:98:4b:10:1f:a6:06:ef:10:29:
                    1a:5a:20:3e:01:f4:1a:37:8f:b4:41:c3:18:ed:05:
                    96:b9:93:ca:69:e0:ef:2b:b9:1b:cc:cf:6d:75:88:
                    c9:a1:f3:e8:aa:f5:7d:52:0c:51:c9:d6:fa:18:65:
                    e5:76:6b:ec:6e:67:e1:fc:59:da:9c:69:2c:d8:5b:
                    c7:2c:9b:ed:4a:d3:90:4c:f3:a8:cc:2b:ff:81:2d:
                    08:3c:a3:9d:09:d8:2b:a4:9f:af:c5:a3:dd:9f:9e:
                    13:c8:75:17:b5:be:8f:01:df:29:6e:ae:57:37:d6:
                    06:c1:c6:b7:9f:2f:21:72:c1:d0:29:22:ae:c9:d0:
                    70:a7:39:eb:10:10:3a:85:ba:33:95:3e:32:ae:ae:
                    86:de:4c:cf:33:10:e7:0b:f5:e3:3f:a6:b2:08:5a:
                    67:49:08:00:b6:5f:12:2a:c0:aa:56:50:1e:95:81:
                    c1:f2:ec:8a:39:db:b9:c9:1f:97:c9:7b:3a:ac:ff:
                    7c:46:50:dc:4e:52:9d:4e:6a:8d:ec:a2:66:39:b7:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AA:7F:E7:3D:3E:71:03:17:3D:79:3C:6B:13:26:3F:44:DF:3A:7C
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233312e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a9:9b:08:bd:69:2e:74:58:b3:cb:76:9b:6b:b0:3f:b2:8a:
         e3:03:ec:3c:41:f1:f7:c4:e5:71:f3:d6:85:12:24:11:70:3f:
         43:80:a4:ed:80:6c:42:36:d7:f3:a6:42:d3:81:89:41:2b:ee:
         8f:fe:d0:d7:e3:b2:40:8d:e6:c9:5a:46:52:a0:c6:36:d7:37:
         38:9f:1c:43:e4:17:5a:b8:96:7f:0e:07:4b:5e:b1:b8:c1:7c:
         af:a1:4e:2f:10:e9:b7:ce:09:09:0d:4a:46:32:de:cb:7c:f0:
         3f:8a:a6:d9:90:04:6e:36:cd:cb:4a:54:08:31:6c:54:54:29:
         31:28:6d:7e:33:4a:37:54:19:77:e2:d2:ae:79:68:41:83:78:
         45:40:06:c3:31:be:ee:d3:0e:e4:0f:41:9a:78:03:52:2d:da:
         b1:ee:e3:dc:8c:31:ee:95:a7:e0:b3:6d:9d:8b:41:8e:02:75:
         f5:01:bb:85:8d:b2:72:16:21:dc:21:fd:93:5c:ef:6c:32:3a:
         04:eb:66:bc:52:71:b6:04:6d:9b:1f:d3:8c:1f:61:ce:c4:40:
         a6:75:fc:6f:6e:39:15:f1:34:e4:66:39:73:bd:5d:23:c3:60:
         c5:09:58:4c:c9:0b:e6:6c:a6:68:34:3d:b5:f6:75:d8:d1:64:
         1e:2a:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 09:56:03 2024 by rpki-client on console-ams.rpki-client.org