Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35332e39362e302f32302d3234203d3e203139333332.roa
File:                     3230302e35332e39362e302f32302d3234203d3e203139333332.roa (raw, json)
Hash identifier:          FVNIOkUtebgOWZhM959tHptuN6z2vHiI/9IW7pIJFB4=
Subject key identifier:   87:22:D3:AB:43:D3:8B:7B:F2:82:46:1C:75:F1:D7:DF:87:76:34:93
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       75F576D6E0F4106B611005BD4588193A694F5580
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35332e39362e302f32302d3234203d3e203139333332.roa
Signing time:             Tue 05 Mar 2024 18:05:42 +0000
ROA not before:           Tue 05 Mar 2024 18:00:42 +0000
ROA not after:            Tue 04 Mar 2025 18:05:42 +0000
asID:                     19332
IP address blocks:        200.53.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f5:76:d6:e0:f4:10:6b:61:10:05:bd:45:88:19:3a:69:4f:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Mar  5 18:00:42 2024 GMT
            Not After : Mar  4 18:05:42 2025 GMT
        Subject: CN=8722D3AB43D38B7BF282461C75F1D7DF87763493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a5:18:13:fa:93:1d:0c:6d:fe:9f:ad:26:ba:
                    82:63:68:00:2e:33:5a:ff:19:70:ff:c9:5d:c8:2c:
                    19:2d:35:ef:36:27:b1:47:32:b2:10:36:eb:6b:9e:
                    5d:cf:16:b3:ea:7f:81:0d:bd:0c:15:07:33:65:f0:
                    28:0a:81:0c:43:5b:00:0a:b0:4c:19:4d:d6:61:49:
                    10:80:c0:b1:57:c9:df:26:f1:19:67:1b:8e:95:dd:
                    86:39:f2:dc:32:b7:c9:ea:45:e2:f2:ec:be:76:24:
                    01:da:f3:5c:7e:9b:40:c6:09:57:9e:04:35:8d:f9:
                    68:15:41:64:9a:43:77:36:15:33:82:1c:7e:dd:69:
                    57:65:ef:03:00:5a:86:f1:e5:b2:87:19:cf:30:77:
                    7f:1c:44:76:ff:a5:39:3f:01:74:d2:22:e9:0c:e5:
                    3c:69:60:ef:1b:e3:6a:44:7a:21:22:9e:7e:72:20:
                    77:11:8e:95:bf:a6:e8:09:1b:12:ea:47:09:d7:97:
                    be:e3:fd:2f:57:5a:96:d3:fe:7f:25:0e:3a:dc:e9:
                    bb:91:4b:01:f2:0f:5f:2d:d0:07:77:51:6f:7f:93:
                    d0:df:19:5b:bf:65:2f:c5:01:d3:37:b3:fd:23:45:
                    d2:83:8f:87:65:49:4a:b7:f6:f6:7b:22:44:ca:b8:
                    a1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:22:D3:AB:43:D3:8B:7B:F2:82:46:1C:75:F1:D7:DF:87:76:34:93
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35332e39362e302f32302d3234203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:08:e9:f3:88:89:3d:8d:da:62:c6:dd:60:77:f7:c8:41:
         05:98:22:7a:60:71:16:e0:e6:1a:7d:f8:50:e3:fd:fc:14:50:
         b3:93:a2:70:87:77:71:7b:44:4f:36:00:b7:e0:ff:62:3a:06:
         87:22:29:36:85:8b:6d:02:9a:9c:cd:56:55:ba:9d:38:9a:58:
         31:e4:9c:5f:ad:8c:8d:65:1a:b9:2f:18:a6:1b:ba:31:33:77:
         10:ce:98:1e:32:8c:1e:e4:3c:28:2e:f6:32:9b:c8:cc:58:0e:
         d4:4d:c8:1e:42:6e:14:40:89:97:af:a7:1c:01:05:9f:89:79:
         ed:a0:5e:ca:b1:e8:f0:e8:12:ae:61:f5:55:7e:da:dd:06:68:
         0b:b1:ec:23:80:99:3e:c7:6e:ae:cc:93:4c:12:50:f5:63:02:
         5f:2d:c4:71:62:ae:4c:ac:3e:bf:36:21:a8:66:b5:ed:38:84:
         c9:8d:d3:e0:2d:68:da:7f:97:a9:24:03:05:8d:86:3b:dc:f3:
         a8:17:b9:96:a8:20:74:d0:1d:9c:95:5b:86:5b:97:b0:6c:ff:
         14:f5:1d:41:9a:54:f7:7f:c2:cc:97:f0:e4:65:87:13:59:df:
         1b:ad:c8:30:1e:66:af:2e:75:31:7e:1d:ae:a6:4e:b6:3f:e5:
         10:bb:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org