Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230302e39342e3136382e302f32312d3231203d3e203238353039.roa
File:                     3230302e39342e3136382e302f32312d3231203d3e203238353039.roa (raw, json)
Hash identifier:          nbtkm4AUbsFRriJFACQ8IIUdk1tcJAr9uul/Qjd6I6Q=
Subject key identifier:   93:6E:67:5C:BF:C9:A2:B0:2F:12:3F:2C:96:8A:A9:B4:B4:D6:8A:D7
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       08A2569ACB5D7179D8E70888AC1A2A4A90055F12
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230302e39342e3136382e302f32312d3231203d3e203238353039.roa
Signing time:             Tue 05 Mar 2024 17:43:26 +0000
ROA not before:           Tue 05 Mar 2024 17:38:26 +0000
ROA not after:            Tue 04 Mar 2025 17:43:26 +0000
asID:                     28509
IP address blocks:        200.94.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a2:56:9a:cb:5d:71:79:d8:e7:08:88:ac:1a:2a:4a:90:05:5f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: Mar  5 17:38:26 2024 GMT
            Not After : Mar  4 17:43:26 2025 GMT
        Subject: CN=936E675CBFC9A2B02F123F2C968AA9B4B4D68AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:49:92:f9:22:49:87:8e:64:6d:63:44:b4:
                    8f:19:6b:8d:e5:a4:a2:73:d1:f7:bb:ad:1e:dd:25:
                    cc:f4:39:2c:f1:18:ff:9c:a8:12:53:f9:c5:59:5d:
                    5f:bf:97:f4:22:6b:36:a5:0a:3b:9c:cd:a6:3a:fc:
                    24:13:7d:d9:f0:c4:9c:8f:65:61:a8:ef:2b:53:c7:
                    9e:00:ba:6e:f6:ff:61:62:29:cb:c4:ec:05:96:1e:
                    57:e7:b7:2d:b6:87:80:9a:e1:fa:62:78:38:ed:c3:
                    8f:48:f5:8f:7f:d0:48:87:41:b5:38:13:29:5e:bd:
                    b4:66:d2:b8:a4:02:55:00:8a:11:b8:74:04:71:89:
                    8b:43:a5:63:00:07:8e:37:0b:a3:77:de:cd:de:5d:
                    f7:05:2b:20:66:d0:9e:ce:7c:8d:e0:0f:ef:3c:93:
                    ed:c7:be:ae:a8:ad:a4:5d:48:99:d0:cd:e0:e3:c3:
                    e4:b5:6b:08:84:17:9b:ff:d8:ad:5f:f2:13:2b:73:
                    2d:e5:8d:55:18:41:af:0b:73:35:f1:0a:a6:5d:5d:
                    46:dd:cc:96:59:94:b5:e2:e0:c1:73:97:93:37:1d:
                    85:5d:4a:da:75:a5:84:47:09:e8:d1:89:9a:fa:f2:
                    79:ba:79:77:ca:62:96:07:23:ff:32:db:67:4a:b4:
                    7a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6E:67:5C:BF:C9:A2:B0:2F:12:3F:2C:96:8A:A9:B4:B4:D6:8A:D7
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230302e39342e3136382e302f32312d3231203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:3e:96:72:af:8a:d9:57:d0:4f:b4:d0:84:dc:9a:c9:7b:ce:
         44:2d:6f:96:42:a1:f8:27:13:49:83:b1:df:be:e1:66:ec:a3:
         74:05:ee:3e:12:67:91:b9:eb:2c:06:d2:ff:4d:53:d1:3c:fa:
         91:ef:57:90:66:13:e8:22:40:9b:e0:ce:a0:5a:48:c1:09:0d:
         8b:18:b0:13:00:c1:17:7b:6a:32:fc:c7:be:7e:34:08:e0:12:
         ff:21:2f:3c:33:fa:9f:dc:a5:49:ce:6f:c4:18:85:e5:4d:a9:
         09:24:f3:bf:00:3a:1e:27:0e:2b:07:f4:dc:d2:87:9e:15:46:
         08:ca:44:72:51:c0:ad:94:27:3e:38:3b:9f:7a:42:4b:ec:1f:
         81:2f:25:80:03:29:81:ce:af:f8:f1:a6:76:3f:0c:91:59:c6:
         c0:d3:b4:fe:94:e4:ca:e1:b3:29:16:40:b6:e1:5c:3c:6a:c4:
         25:8b:0b:87:9a:93:30:03:64:e8:77:0c:11:af:8a:03:a6:5a:
         ac:2d:85:39:20:88:95:d5:24:99:39:09:96:03:87:5b:7c:5d:
         f3:42:43:88:3d:70:24:46:e8:ec:cb:43:b6:79:d0:5a:dc:4b:
         e6:35:60:ec:cf:bc:61:6b:a8:c7:b6:90:96:fa:c5:e9:b1:a2:
         15:55:77:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:13 2024 by rpki-client on console-ams.rpki-client.org