Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e33392e39362e302f31392d3234203d3e203139333332.roa
File:                     3230302e33392e39362e302f31392d3234203d3e203139333332.roa (raw, json)
Hash identifier:          ozi+J59+FZLRjvIq329sCT2nhfmvFnwqzV4n6kSb7OY=
Subject key identifier:   97:A6:5F:2C:C8:41:FC:9A:96:74:22:02:53:48:A7:A7:23:F3:29:E3
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       1270203D027FE1379B1C417574F42ECFDA99F109
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e33392e39362e302f31392d3234203d3e203139333332.roa
Signing time:             Tue 05 Mar 2024 18:05:41 +0000
ROA not before:           Tue 05 Mar 2024 18:00:41 +0000
ROA not after:            Tue 04 Mar 2025 18:05:41 +0000
asID:                     19332
IP address blocks:        200.39.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:70:20:3d:02:7f:e1:37:9b:1c:41:75:74:f4:2e:cf:da:99:f1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Mar  5 18:00:41 2024 GMT
            Not After : Mar  4 18:05:41 2025 GMT
        Subject: CN=97A65F2CC841FC9A967422025348A7A723F329E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:74:2a:89:9b:2c:8e:cd:b9:03:75:2c:32:
                    cc:2f:7b:a6:df:74:4a:f2:6b:91:fe:e9:53:12:5b:
                    dd:e5:ee:62:a2:96:1d:db:44:eb:7b:49:3d:16:4a:
                    b9:ba:2f:f1:b2:5f:13:0a:a8:f8:f1:91:f1:68:30:
                    3e:9f:fe:b2:84:e5:ee:f4:ba:27:f7:c1:9e:78:97:
                    dd:0b:d7:1c:e2:b7:b1:6a:bc:06:f5:95:2a:b3:19:
                    cf:f4:ad:fc:97:5f:30:2f:67:b7:46:c8:1a:49:bd:
                    13:54:13:37:33:fc:d0:80:51:b6:b1:29:f4:a4:c7:
                    12:c0:f3:b2:cf:c3:f0:67:fb:ff:1b:e3:9d:03:2f:
                    50:21:18:ed:3f:e4:88:9e:c8:ff:f7:a3:ab:58:a6:
                    25:9c:5f:91:31:cf:78:1e:8a:0f:98:1c:c8:31:b4:
                    91:22:04:ae:72:16:09:cb:21:ad:4a:d9:54:18:64:
                    e6:af:5c:60:c6:0a:1d:eb:4e:85:d4:3e:34:67:ae:
                    ce:e4:0e:68:6c:00:c5:10:58:39:b0:96:46:31:b5:
                    50:e4:18:55:8d:bc:73:da:9c:a8:b9:4f:af:bc:7c:
                    4e:a7:6f:10:d4:15:e2:2e:f8:8d:cc:ec:32:41:01:
                    67:75:67:a6:df:ec:81:fc:92:46:26:2c:a0:d8:06:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A6:5F:2C:C8:41:FC:9A:96:74:22:02:53:48:A7:A7:23:F3:29:E3
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e33392e39362e302f31392d3234203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:bc:58:2f:10:5b:07:32:69:38:c1:90:c8:79:48:15:7c:99:
         2f:0e:1f:f7:3b:18:a7:f7:da:e3:44:da:98:96:3b:cd:61:0f:
         e7:df:ba:27:81:7e:c6:58:e0:17:0f:5f:bf:56:f7:c3:b9:99:
         9a:2f:e2:6b:a0:03:de:31:fe:60:c4:b1:8c:e8:6b:b9:84:42:
         b9:86:09:18:83:43:5b:ec:ab:5e:78:22:e5:e2:7f:7d:8b:0b:
         af:e7:39:71:a3:44:68:75:aa:3d:ee:5f:2c:fa:3e:17:ca:1e:
         48:b6:a5:60:da:3a:15:45:e7:2b:3c:24:94:6d:09:a2:5e:72:
         de:b2:e5:56:65:89:f4:57:02:af:f3:e2:10:45:5b:86:c0:b4:
         54:1d:82:45:5e:03:3d:fe:93:9b:f5:b4:9b:8c:14:35:68:6b:
         5f:7d:82:f4:39:82:02:d4:d5:b4:e8:05:32:57:a5:40:0b:41:
         f1:74:93:27:de:e7:a3:d0:60:2b:04:68:1a:34:8c:40:88:39:
         6c:67:7c:02:0b:0c:fc:0d:bb:28:a9:f5:f5:fb:d5:a7:5c:7f:
         1d:91:56:a4:ad:57:e7:59:8e:43:d0:c9:03:e7:d3:24:4b:4e:
         17:83:6c:da:a5:d4:55:e5:9e:fd:5c:7b:14:51:46:93:23:97:
         b5:39:80:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org