Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3230302e3131302e3139322e302f32312d3234203d3e203237393430.roa
File:                     3230302e3131302e3139322e302f32312d3234203d3e203237393430.roa (raw, json)
Hash identifier:          1UtUiD+fAZIDlO50ajQctXpuLDLovrdWWy2ABIIhCUA=
Subject key identifier:   C7:45:90:83:84:7D:4B:B1:6D:C4:A0:6B:8A:CE:2A:59:C7:4B:41:43
Certificate issuer:       /CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
Certificate serial:       480EBA83DC69E8AF993872E246565A19DF2206E4
Authority key identifier: 94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3230302e3131302e3139322e302f32312d3234203d3e203237393430.roa
Signing time:             Tue 05 Mar 2024 17:53:31 +0000
ROA not before:           Tue 05 Mar 2024 17:48:31 +0000
ROA not after:            Tue 04 Mar 2025 17:53:31 +0000
asID:                     27940
IP address blocks:        200.110.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0e:ba:83:dc:69:e8:af:99:38:72:e2:46:56:5a:19:df:22:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
        Validity
            Not Before: Mar  5 17:48:31 2024 GMT
            Not After : Mar  4 17:53:31 2025 GMT
        Subject: CN=C7459083847D4BB16DC4A06B8ACE2A59C74B4143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:50:89:23:a9:ac:a1:f7:03:35:f7:00:fc:
                    d0:4e:ac:f1:23:0e:fc:28:90:22:b7:ec:75:46:96:
                    15:bb:1e:82:90:63:9e:b6:26:e9:17:99:da:73:76:
                    65:92:14:a0:65:3e:5b:b5:b7:bc:03:57:0f:83:6a:
                    3b:40:cd:37:1b:5a:8d:14:b5:f7:34:e5:d2:af:f2:
                    2d:3d:0f:69:83:0b:e1:46:f3:73:8d:2d:1d:d6:ff:
                    78:bd:98:46:90:cf:a7:b0:38:4c:2a:7f:c9:98:6b:
                    cc:1d:43:df:14:c1:0a:cf:a7:1f:1d:6d:b0:db:9c:
                    49:c0:65:4a:c5:33:14:7f:d2:4d:dd:47:b1:b6:59:
                    2c:0d:17:9a:24:07:c6:cd:18:9f:05:73:d8:f3:07:
                    99:9f:13:15:91:3e:1d:7a:26:a8:96:76:7f:db:52:
                    33:ba:38:c4:e1:b1:27:03:0d:15:af:00:18:cb:bd:
                    87:38:8c:0b:db:c1:48:8d:c2:65:15:7f:c5:00:0a:
                    87:e1:8d:1c:e6:15:f3:8a:53:03:ac:a0:71:04:3b:
                    e7:e7:cb:fe:6a:b6:9f:15:c6:10:d6:39:3d:3d:30:
                    53:59:4b:f5:cc:bb:08:64:d9:5a:20:a2:aa:1e:e1:
                    ed:0e:f6:d1:d8:df:40:a0:f0:48:9e:83:a7:81:43:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:45:90:83:84:7D:4B:B1:6D:C4:A0:6B:8A:CE:2A:59:C7:4B:41:43
            X509v3 Authority Key Identifier:
                keyid:94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3230302e3131302e3139322e302f32312d3234203d3e203237393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:70:20:8b:1b:41:3c:de:b2:c7:57:42:79:c3:8e:6e:b8:ec:
         88:77:e4:ae:95:5d:c1:fa:9d:c9:f1:f9:64:de:5f:2b:9b:9d:
         b4:05:31:90:f3:3c:cd:7f:b3:4e:6e:c6:8f:2d:ab:5d:72:48:
         b9:6c:d7:84:d3:dc:16:7b:63:eb:79:44:29:53:ed:51:cd:16:
         03:61:d9:7b:c2:6d:b1:f7:4b:a6:f1:68:aa:fd:69:85:7d:f1:
         38:50:42:15:d4:4c:6d:f8:78:be:a1:7f:c7:c7:51:d0:77:8a:
         f2:4c:9c:17:d5:7f:b8:76:69:99:b7:53:90:60:c6:3b:79:ac:
         86:0b:86:28:ae:d8:8c:19:d2:b5:39:9e:6c:e9:72:13:76:39:
         f5:da:46:f5:cc:88:65:f7:1d:fd:11:50:b5:59:5a:cf:30:17:
         e2:de:4e:69:38:d7:f0:69:f7:5e:6f:5e:ce:30:d1:d0:3e:8c:
         20:44:09:65:94:6d:76:ea:e8:30:1e:06:4b:ef:4c:58:ee:a3:
         15:e3:b2:ef:26:16:44:ee:88:bd:1d:f3:d0:7b:9d:15:75:7f:
         05:f3:79:d5:cd:19:cf:94:fc:ab:ae:62:87:cc:bf:f2:03:49:
         c8:d6:32:54:3c:89:db:ff:e8:1a:55:70:6b:4c:02:f2:6f:00:
         68:50:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:08 2024 by rpki-client on console-ams.rpki-client.org