Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e203237373834.roa
File:                     3230302e31302e3230392e302f32342d3234203d3e203237373834.roa (raw, json)
Hash identifier:          XABNG5pqs72pbK5GK7Fxn2fyF755UotkL4XypzPGGCk=
Subject key identifier:   47:70:A6:B3:AE:C0:9F:44:55:55:90:98:50:30:3C:F4:97:E0:F8:07
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       5F2D2CEF59A66E62A988A440C034F5C1D7A963F3
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e203237373834.roa
Signing time:             Tue 05 Mar 2024 17:44:16 +0000
ROA not before:           Tue 05 Mar 2024 17:39:16 +0000
ROA not after:            Tue 04 Mar 2025 17:44:16 +0000
asID:                     27784
IP address blocks:        200.10.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2d:2c:ef:59:a6:6e:62:a9:88:a4:40:c0:34:f5:c1:d7:a9:63:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Mar  5 17:39:16 2024 GMT
            Not After : Mar  4 17:44:16 2025 GMT
        Subject: CN=4770A6B3AEC09F445555909850303CF497E0F807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:81:e7:d0:ba:41:3f:59:20:f4:0b:b9:d4:
                    a9:d4:a1:b1:74:70:e4:14:92:a0:0f:cb:bb:69:30:
                    5a:61:c8:22:6a:66:36:41:c8:38:bb:95:80:f6:17:
                    50:a0:e8:9d:c8:c0:53:b4:2b:4c:84:28:1f:bc:a2:
                    cd:9c:83:cd:15:79:ca:34:1a:f9:4e:89:6c:9c:0e:
                    81:10:23:35:c6:ea:0a:08:02:4b:2b:f6:6c:1c:e3:
                    06:f9:a6:6f:d8:74:03:11:5e:94:6f:14:ec:7c:fb:
                    3d:8c:7c:56:61:bd:81:3a:73:54:d1:b7:12:e5:d2:
                    50:7d:a0:a4:07:a3:22:2e:cf:64:5d:b8:ed:9f:c2:
                    b5:66:1d:66:ed:6c:5b:e4:c9:37:ea:b7:bf:be:8e:
                    a7:f1:0c:43:2c:7e:a4:ba:ed:86:62:30:d7:85:20:
                    16:0a:27:19:cb:95:d7:b9:a2:6d:0c:8e:2e:37:7c:
                    bb:14:e5:25:3c:b9:c8:22:21:ac:62:61:87:d6:b6:
                    bd:5a:bd:c9:b9:53:e7:e2:cc:a1:0d:f1:bb:c5:23:
                    32:86:86:12:a6:36:e7:b0:d1:e1:e6:c5:f9:f2:fe:
                    01:7b:b6:46:8e:42:c8:11:5f:6c:be:ac:7a:b2:e1:
                    06:97:e7:59:41:e5:e3:c0:8f:91:0d:28:db:c5:bc:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:70:A6:B3:AE:C0:9F:44:55:55:90:98:50:30:3C:F4:97:E0:F8:07
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e203237373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:1b:96:16:57:53:04:73:79:0d:44:3f:01:db:de:07:83:f3:
         c0:c0:b1:e0:26:a1:07:2d:7b:e7:d6:96:d6:4e:39:44:63:ca:
         11:3f:3e:45:51:dc:f9:0e:02:ca:40:7d:01:e6:84:c7:7f:c0:
         df:35:70:d8:b9:c6:a8:7c:56:eb:62:8d:81:96:29:05:1d:ac:
         a0:69:a7:ef:6c:82:30:95:b5:28:bb:5e:94:b5:9d:38:31:a8:
         9d:3c:19:c7:12:7b:56:13:55:4e:c4:fd:85:20:88:7f:ef:f1:
         eb:88:5d:b8:7f:9f:5f:f5:58:61:4c:9e:5c:4c:81:6a:64:fc:
         12:b4:75:7b:8a:bf:2d:fa:91:95:db:63:a8:a1:06:07:a3:27:
         69:10:bb:9c:45:73:56:19:41:d6:1c:3e:05:6c:56:2b:da:e1:
         6b:c3:4d:87:82:63:5a:90:7b:30:9a:3a:ca:95:b3:27:f1:dd:
         d3:b3:31:7f:15:0a:48:8e:4d:02:93:1f:86:8a:a6:1d:89:e1:
         e0:a2:ef:56:2e:fd:e8:3e:6a:fe:d1:f6:e1:f1:cb:03:d7:73:
         95:d8:78:64:d8:51:0c:67:f5:1e:86:49:d5:e2:36:ab:86:72:
         f8:67:2c:b1:de:45:2d:15:68:5f:5c:a1:ab:c5:a8:43:5f:b7:
         38:39:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:36:44 2024 by rpki-client on console-fra.rpki-client.org