Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3230302e3131352e32332e302f32342d3234203d3e20323632313638.roa
File:                     3230302e3131352e32332e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          q5WVytUwd2yKQQA72ZfjXeyBTFN9INiYXyFTvAtVl3E=
Subject key identifier:   65:15:1A:D2:B7:E4:17:30:F3:67:5E:91:83:60:A8:FC:CC:2C:B6:60
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       2075E2CCB345CA76AB60F85A28F6F04C5AA7D63A
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3230302e3131352e32332e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 05 Mar 2024 18:00:27 +0000
ROA not before:           Tue 05 Mar 2024 17:55:27 +0000
ROA not after:            Tue 04 Mar 2025 18:00:27 +0000
asID:                     262168
IP address blocks:        200.115.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:75:e2:cc:b3:45:ca:76:ab:60:f8:5a:28:f6:f0:4c:5a:a7:d6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Mar  5 17:55:27 2024 GMT
            Not After : Mar  4 18:00:27 2025 GMT
        Subject: CN=65151AD2B7E41730F3675E918360A8FCCC2CB660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:dc:b4:5c:dd:d4:dc:34:6c:52:1a:77:ca:
                    99:4c:03:88:b1:6c:1c:58:b8:eb:d0:52:7d:67:71:
                    a1:67:70:80:30:3d:3a:7a:7f:52:d3:48:aa:12:f3:
                    9a:13:9f:79:bf:72:66:3d:cc:f5:de:08:31:4c:0d:
                    4f:9b:c3:ec:72:ed:92:97:d4:19:c2:3c:36:c9:c4:
                    05:51:2c:67:ba:3b:6d:61:62:5c:ca:f0:10:71:43:
                    01:31:10:27:de:5e:30:e8:ef:97:08:6e:2b:17:d3:
                    57:27:2d:07:e4:cf:a5:59:bd:39:a9:48:cd:c9:48:
                    2d:60:96:ac:15:c9:30:a8:71:a0:38:0b:98:ce:09:
                    4e:c2:5d:f0:a9:92:08:cf:60:38:66:ba:0f:1f:09:
                    4c:68:b5:e1:b9:bb:28:6a:c6:2c:d8:45:2e:06:ee:
                    07:8c:ff:2d:d5:d6:a8:2f:fc:3c:63:ba:00:2d:94:
                    77:73:d8:13:a6:6f:3b:ef:36:1d:fa:52:27:8b:57:
                    33:46:61:c2:a0:d8:d8:74:f9:b4:8a:68:fb:c6:34:
                    be:f1:5b:51:1c:28:6c:03:51:ff:d0:b7:0f:3a:0a:
                    de:cf:ed:6e:5d:15:56:9f:27:6c:4b:c3:2a:a1:5f:
                    cd:4d:1d:77:35:c1:f4:c0:fb:26:76:b3:e7:ac:56:
                    42:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:15:1A:D2:B7:E4:17:30:F3:67:5E:91:83:60:A8:FC:CC:2C:B6:60
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3230302e3131352e32332e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:79:45:65:1b:4d:80:a9:0e:b4:e8:4b:46:3c:83:71:28:c2:
         97:0e:8e:b4:3a:6c:d9:02:fb:da:2d:fd:64:a8:06:d7:63:7d:
         cb:6d:40:d7:95:68:5f:53:85:fc:90:eb:18:a3:5c:55:20:ee:
         9c:99:61:84:26:ef:94:70:a6:90:fe:6f:9e:86:fb:74:e4:e8:
         a0:0a:da:ee:95:51:ed:ba:a8:3d:a1:6c:c9:de:0b:a6:ae:51:
         7b:95:8b:24:5f:26:d3:b5:45:81:ff:15:30:37:19:d5:da:e1:
         27:8e:61:52:0d:f2:cb:a3:26:84:86:18:59:23:0d:cd:fc:fd:
         8c:95:38:5d:ef:45:5c:21:93:99:cc:36:56:26:00:cd:61:9d:
         a0:d3:a9:31:a7:0c:b5:80:21:ec:0d:81:d3:9f:0c:2c:da:ab:
         13:2a:b3:4a:17:8f:cf:bd:24:91:18:b6:8c:f1:ef:72:96:e8:
         49:b1:bb:db:98:fd:96:ea:46:51:51:eb:2a:ed:17:7f:ab:46:
         d7:ac:d3:1f:ae:79:e7:a3:ba:4d:da:51:3f:89:01:93:87:c3:
         e2:6c:c9:91:1a:c6:4c:20:66:93:49:73:a1:8e:fa:68:52:01:
         10:e5:18:ed:4f:0b:32:bd:99:7c:25:d1:a9:38:1b:7c:43:47:
         b9:b9:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:09 2024 by rpki-client on console-ams.rpki-client.org