Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e20313938393439.roa
File:                     3230302e31302e3230392e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          EmcsPiOZLW/xbThNLwR49noYdIvYa0fZlxoqs4OQHyo=
Subject key identifier:   A3:AE:9A:CC:43:BE:66:5D:24:0E:16:44:20:47:D9:04:B1:B0:DB:7B
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       448146CA0E6035E6091E3FED1D0FD59EEDE7AEBA
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 05 Mar 2024 17:44:15 +0000
ROA not before:           Tue 05 Mar 2024 17:39:15 +0000
ROA not after:            Tue 04 Mar 2025 17:44:15 +0000
asID:                     198949
IP address blocks:        200.10.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:81:46:ca:0e:60:35:e6:09:1e:3f:ed:1d:0f:d5:9e:ed:e7:ae:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Mar  5 17:39:15 2024 GMT
            Not After : Mar  4 17:44:15 2025 GMT
        Subject: CN=A3AE9ACC43BE665D240E16442047D904B1B0DB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:94:de:c1:c5:4d:5f:09:02:e8:41:c0:e0:
                    6b:48:0c:5f:ce:7c:c2:de:1d:fc:7e:01:e0:5d:cc:
                    5b:3a:a0:a1:2c:b7:65:e9:83:7e:12:a7:d0:a4:e9:
                    60:46:ac:a4:ca:87:25:e1:1d:df:3e:ea:b4:9d:ab:
                    92:4f:03:db:55:15:6c:dd:ad:69:3f:07:9e:57:30:
                    9f:87:a9:0c:76:ae:97:5b:12:ac:94:ef:19:34:3b:
                    9a:d0:ae:03:58:f2:fc:5b:b8:0e:18:37:8e:51:d8:
                    5f:cd:3a:5f:93:11:dc:86:ea:8e:77:70:f5:76:d4:
                    62:24:52:c9:37:2a:54:73:f6:25:d6:ff:83:b3:a3:
                    41:c0:4d:e7:b0:64:f7:dd:e6:b6:a7:0c:61:32:c2:
                    c4:f6:89:8b:4d:be:12:8f:0f:f3:93:77:2f:7e:10:
                    59:47:34:99:26:77:73:e9:19:a8:96:dd:a5:4d:c3:
                    5d:88:77:e8:62:6d:19:70:63:98:ce:24:92:20:a1:
                    5f:a4:5a:33:65:dd:0f:36:7e:01:bc:df:c7:15:15:
                    e8:ef:0e:85:78:73:99:d9:9b:d5:f6:d5:98:c6:de:
                    90:e3:1a:27:ad:e7:8b:07:3f:da:f9:61:04:5f:d9:
                    7f:76:16:bf:3c:cb:07:3d:ae:f4:aa:75:70:c1:bb:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:9A:CC:43:BE:66:5D:24:0E:16:44:20:47:D9:04:B1:B0:DB:7B
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2a:0f:7a:1a:53:e0:d9:f5:a8:07:23:93:4e:6f:ef:89:3b:
         c3:d6:39:a1:02:a6:89:ca:c5:24:5d:93:69:ff:63:87:90:a5:
         ad:dc:ae:bd:68:c2:b3:ec:96:5f:3d:6d:d1:40:58:ba:24:e7:
         2a:50:22:f4:4d:0d:81:41:32:45:12:54:17:f1:47:c3:dd:69:
         5a:71:8d:35:b7:06:79:71:dd:9c:c4:e7:24:3d:e5:66:af:e9:
         f1:3d:79:d7:02:a1:82:67:65:0e:98:df:ac:5b:6a:c4:f8:bd:
         c6:6a:d4:f5:b4:04:30:31:f6:33:7a:a2:73:c5:dc:98:c8:63:
         4d:39:43:b0:ae:19:35:4b:68:30:62:b8:31:26:11:7d:fc:77:
         80:2a:33:86:8f:2a:ba:fe:94:93:16:84:bc:32:fe:2e:2a:69:
         9b:e1:74:6c:d4:8f:19:73:e6:e0:c4:57:41:a9:65:ac:71:2d:
         1b:10:76:96:be:61:c7:dc:dc:75:b1:dd:6b:0c:a9:da:4f:eb:
         2a:55:e0:72:fc:7b:b5:df:06:d8:d7:35:57:cc:9c:0d:39:ab:
         04:2e:b2:18:e0:a4:92:f7:b9:16:a7:69:55:c3:5c:d3:e1:ed:
         2f:2d:7f:76:38:39:ea:f5:6b:3e:d2:e9:a7:f6:fe:ae:fe:c3:
         c5:d6:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 11:44:53 2024 by rpki-client on console-ams.rpki-client.org