Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233352e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3233352e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          vxNLR3tM+dK+J8+XoVXut7RXC2M0HN5Nv3K0QvdnZnA=
Subject key identifier:   5B:D9:7D:82:A9:EE:56:1D:60:35:F7:78:E3:E7:2D:3E:A4:1A:B8:E3
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       4D8F9AB430A7E8F3B10C29C76461FF535548FFCE
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233352e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 05 Mar 2024 17:56:35 +0000
ROA not before:           Tue 05 Mar 2024 17:51:35 +0000
ROA not after:            Tue 04 Mar 2025 17:56:35 +0000
asID:                     27727
IP address blocks:        200.61.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8f:9a:b4:30:a7:e8:f3:b1:0c:29:c7:64:61:ff:53:55:48:ff:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Mar  5 17:51:35 2024 GMT
            Not After : Mar  4 17:56:35 2025 GMT
        Subject: CN=5BD97D82A9EE561D6035F778E3E72D3EA41AB8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:1d:0c:d0:00:3a:37:e4:3f:29:2d:51:da:
                    5e:f4:19:02:4e:fc:47:8a:c4:7f:38:7d:d4:07:a0:
                    b5:7d:18:cb:40:11:a2:12:37:00:48:33:07:cc:f1:
                    59:05:f8:99:01:4c:48:95:bd:14:74:08:91:b6:c4:
                    7b:aa:ae:64:8a:8b:cd:3d:e4:c0:c1:9d:b0:65:c1:
                    58:43:88:20:d9:5e:95:8c:7e:56:75:fb:2b:e1:8f:
                    1e:a1:29:3f:59:9d:6a:42:9f:af:42:b2:fb:51:6c:
                    01:ce:c2:70:df:fe:33:f3:78:17:83:7a:7f:c5:94:
                    45:65:51:28:d9:69:e1:66:08:44:52:6a:77:10:13:
                    3b:19:47:af:89:00:06:ff:85:53:30:41:1d:b6:44:
                    43:18:5e:84:24:b6:8e:4f:e5:82:8f:93:5a:84:aa:
                    3f:ea:f9:15:9e:9c:a5:7d:0b:1a:aa:bc:f6:23:e1:
                    a9:62:72:75:63:8d:e8:b6:07:8a:a5:9c:5d:99:16:
                    5e:63:db:ef:72:23:3f:88:78:b9:9c:99:da:f6:a4:
                    a9:05:60:ec:f9:15:9c:15:df:9e:69:6d:69:95:93:
                    46:53:ba:56:bb:6b:e8:68:16:03:50:06:1b:f2:45:
                    c0:03:9c:98:db:5c:a9:8e:11:f5:98:10:33:d1:84:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D9:7D:82:A9:EE:56:1D:60:35:F7:78:E3:E7:2D:3E:A4:1A:B8:E3
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233352e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:47:b3:4c:c2:fd:4b:57:b0:d3:5c:3d:1f:8f:e4:42:1b:21:
         80:da:b6:77:42:27:9c:7d:e0:78:7e:e5:e1:8a:b2:e9:19:89:
         d9:8d:1f:1f:ec:06:be:0d:89:d1:51:81:eb:16:fd:52:29:f1:
         4f:34:4d:85:0d:59:46:db:c2:a3:c1:ed:a5:36:14:a0:c8:92:
         f2:0d:11:96:7a:d9:43:d1:96:40:d7:7e:b1:64:fe:b6:4b:0c:
         cf:09:8a:53:d0:a8:9e:ea:aa:14:d3:de:3d:e9:8a:b9:9c:b9:
         00:b8:30:67:62:9d:31:b0:ac:1e:71:70:ee:dc:32:a9:4b:e1:
         4a:a1:a8:2c:ef:b6:a2:64:0f:72:ab:e3:7a:4c:d9:03:ec:5b:
         30:43:60:64:95:74:de:d8:d5:bf:8e:9e:02:5c:34:73:c4:06:
         af:48:48:1d:0c:8d:ca:91:f5:8b:53:94:73:9a:f0:e2:0d:ae:
         fd:58:ba:24:2d:a6:58:bc:27:84:e5:07:e5:f1:c8:d8:64:fd:
         1b:05:cb:50:be:89:33:c2:46:fa:54:f6:13:06:8e:89:cb:15:
         a8:5e:18:58:bd:9f:ff:f1:0c:44:8c:d5:fd:c1:95:74:a2:73:
         16:8e:bb:82:cc:c1:3a:cb:1a:a4:98:5c:85:86:e9:ec:87:33:
         6a:db:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 09:56:03 2024 by rpki-client on console-ams.rpki-client.org