Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/3230302e3232392e3231362e302f32342d3234203d3e20323637373831.roa
File:                     3230302e3232392e3231362e302f32342d3234203d3e20323637373831.roa (raw, json)
Hash identifier:          7CYb2S+XG1lyoVakJWBi8OPdp+6rHGtoB8ZeJGwPcbQ=
Subject key identifier:   11:C1:A7:23:29:1A:8C:13:2C:6F:8D:8F:47:E0:D9:87:4E:90:A2:41
Certificate issuer:       /CN=CC24D90254A41274A8A8BFBB503CD1112D6EF1D8
Certificate serial:       36183290878D75752511AB2CA5D37C69B801062E
Authority key identifier: CC:24:D9:02:54:A4:12:74:A8:A8:BF:BB:50:3C:D1:11:2D:6E:F1:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/3230302e3232392e3231362e302f32342d3234203d3e20323637373831.roa
Signing time:             Tue 05 Mar 2024 18:15:31 +0000
ROA not before:           Tue 05 Mar 2024 18:10:31 +0000
ROA not after:            Tue 04 Mar 2025 18:15:31 +0000
asID:                     267781
IP address blocks:        200.229.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:18:32:90:87:8d:75:75:25:11:ab:2c:a5:d3:7c:69:b8:01:06:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC24D90254A41274A8A8BFBB503CD1112D6EF1D8
        Validity
            Not Before: Mar  5 18:10:31 2024 GMT
            Not After : Mar  4 18:15:31 2025 GMT
        Subject: CN=11C1A723291A8C132C6F8D8F47E0D9874E90A241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:70:c2:84:ac:2e:fb:f6:1f:2a:b9:12:3d:
                    2f:8d:d4:88:23:bf:47:6f:45:00:e2:6d:3e:a2:0d:
                    77:33:9f:b8:34:ca:69:6b:e0:1d:cb:3e:d1:ec:89:
                    a6:8f:db:35:fe:9f:7f:f4:66:fe:3f:01:3e:91:a4:
                    0d:8c:23:83:1a:fc:f4:db:fe:dc:f7:b9:32:6b:e7:
                    39:8f:ba:cb:6f:5e:3e:a1:42:2a:f0:16:43:4b:be:
                    7f:71:85:c9:78:4e:09:8d:37:bb:5e:c6:97:0b:5c:
                    ba:7d:6e:bb:2c:57:f6:99:58:23:0c:f0:f6:5b:65:
                    64:96:3f:d4:e2:f6:dd:d9:13:6f:b1:e7:9e:c0:67:
                    95:96:8a:d5:4b:dc:ca:35:79:9d:03:02:b5:68:03:
                    f0:b5:d2:e0:e4:43:e3:f9:e0:e4:ef:14:cf:0e:04:
                    fc:c7:ef:a9:79:c4:8f:e2:43:6d:bc:f9:d1:00:7a:
                    a2:93:64:9f:00:1c:5a:6a:2f:63:da:01:d8:dd:97:
                    41:7c:5b:7e:b3:84:c3:1c:6d:58:0d:cb:d9:cd:55:
                    5f:66:7f:cb:07:03:2a:81:45:fb:5b:e8:67:0c:f2:
                    3a:dc:96:c7:4e:2d:35:e7:12:3f:3a:6f:9c:5c:bc:
                    8c:6d:21:d1:aa:b7:4f:29:82:29:df:9a:9d:2c:26:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C1:A7:23:29:1A:8C:13:2C:6F:8D:8F:47:E0:D9:87:4E:90:A2:41
            X509v3 Authority Key Identifier:
                keyid:CC:24:D9:02:54:A4:12:74:A8:A8:BF:BB:50:3C:D1:11:2D:6E:F1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/3230302e3232392e3231362e302f32342d3234203d3e20323637373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:67:e5:6f:e4:32:96:68:7f:2b:f0:5c:35:cf:52:af:c5:2c:
         b2:fa:cc:75:0c:35:1c:bd:d1:ea:a1:bb:a9:ab:70:ab:7c:13:
         de:75:2d:0c:96:22:15:3a:32:54:67:77:df:45:88:67:bc:de:
         a2:c4:86:84:e4:c7:a7:fb:ae:71:81:47:3e:78:e3:87:af:d6:
         fe:54:9c:28:82:b2:de:09:29:87:bf:6a:f0:a4:14:28:12:fe:
         da:ad:09:50:83:f1:97:4a:2e:b5:a5:81:1e:81:39:e9:a1:11:
         5b:6d:3c:f4:8c:11:cc:84:01:f5:a8:01:7c:e9:98:33:e3:27:
         8c:c0:a6:63:db:99:2a:7a:26:ba:28:ca:36:ba:7e:f3:c4:90:
         47:0d:62:c9:96:ac:70:82:cd:a5:4f:ad:6d:0e:d7:cd:58:2d:
         ab:c9:b0:42:af:b1:fe:68:2b:35:8e:6f:30:0b:ad:b7:7d:37:
         9b:9c:6d:41:b2:88:74:d8:78:73:5d:1b:d4:ad:7b:16:56:ae:
         b8:89:ac:53:e9:00:b4:39:f2:3c:55:f7:aa:3c:95:53:c9:db:
         d5:be:36:fe:54:8c:3a:b6:a3:4a:3d:82:f8:c2:39:a0:98:8b:
         2b:07:b8:64:a2:71:da:a0:a5:e4:8d:4a:67:d1:9c:53:50:fd:
         77:3b:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org