Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/3230302e332e3134342e302f32332d3234203d3e203532343838.roa
File:                     3230302e332e3134342e302f32332d3234203d3e203532343838.roa (raw, json)
Hash identifier:          3O2GkdOtX9j7f8cU1r8tc5qgXjoJVcfQYS5sSlK3v3E=
Subject key identifier:   C6:7D:C8:DF:32:01:96:1A:D3:80:99:1A:5B:88:54:C7:FB:5A:D8:8C
Certificate issuer:       /CN=701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC
Certificate serial:       628EB6BA239CD58483E85D9687A967E1504D2695
Authority key identifier: 70:1E:1F:D0:4F:15:49:BD:B6:2D:5F:31:FE:C6:DE:58:97:0D:CF:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/3230302e332e3134342e302f32332d3234203d3e203532343838.roa
Signing time:             Tue 05 Mar 2024 18:14:35 +0000
ROA not before:           Tue 05 Mar 2024 18:09:35 +0000
ROA not after:            Tue 04 Mar 2025 18:14:35 +0000
asID:                     52488
IP address blocks:        200.3.144.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8e:b6:ba:23:9c:d5:84:83:e8:5d:96:87:a9:67:e1:50:4d:26:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC
        Validity
            Not Before: Mar  5 18:09:35 2024 GMT
            Not After : Mar  4 18:14:35 2025 GMT
        Subject: CN=C67DC8DF3201961AD380991A5B8854C7FB5AD88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:26:31:96:a1:f2:9b:42:82:01:f0:58:cb:
                    5e:22:aa:f6:78:67:20:b3:1a:69:83:2a:9d:57:82:
                    22:01:f2:ac:9d:64:bc:a4:67:8a:69:8d:95:d2:eb:
                    16:77:e3:f5:e0:84:f0:d8:8e:2e:39:f6:e9:e9:6b:
                    20:b5:74:3e:f7:0e:42:e8:55:49:3f:5a:24:86:ab:
                    34:a7:81:6a:96:db:c0:5a:79:6b:4b:37:eb:bc:b8:
                    5c:4c:91:78:ec:9f:91:cd:67:4e:b4:60:20:b9:e7:
                    43:4b:55:09:b8:37:02:c5:41:96:c0:32:8e:6a:ab:
                    33:ee:d6:35:41:49:3b:7d:4b:aa:98:da:4a:f6:16:
                    fb:86:9d:65:24:3d:4b:b6:de:7c:5c:17:72:f0:ae:
                    a4:39:09:00:9a:ce:4b:cc:c5:82:2d:ae:5e:b0:1c:
                    02:c5:b5:57:4e:c4:f8:ce:9a:9b:c5:38:50:a0:fd:
                    f4:70:a0:6b:92:8f:0d:92:11:62:15:ae:63:cc:f1:
                    91:a2:40:ab:eb:e2:44:1a:f6:88:1d:d0:8d:0d:ee:
                    f4:fa:ff:80:32:fb:f4:96:78:b3:6c:9e:17:74:6b:
                    9d:28:84:39:ba:38:7c:6b:b1:19:6d:89:2b:79:bd:
                    a7:48:75:aa:81:1d:61:43:0a:84:12:05:4b:aa:dc:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7D:C8:DF:32:01:96:1A:D3:80:99:1A:5B:88:54:C7:FB:5A:D8:8C
            X509v3 Authority Key Identifier:
                keyid:70:1E:1F:D0:4F:15:49:BD:B6:2D:5F:31:FE:C6:DE:58:97:0D:CF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/3230302e332e3134342e302f32332d3234203d3e203532343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:96:50:45:74:44:32:3d:9c:40:a8:bf:52:78:3e:75:73:5a:
         1f:f0:84:75:27:36:91:78:e8:02:da:af:27:55:4e:04:27:f7:
         78:15:7d:f0:42:59:0f:ef:a8:d2:26:51:20:26:e3:33:8f:c9:
         5f:39:de:de:ff:66:7c:95:e3:3b:28:09:ee:af:7c:ce:87:2e:
         bc:17:b4:77:12:99:db:38:43:b0:59:ab:5d:fa:78:36:54:92:
         f4:ae:b0:d3:68:7d:11:8e:f0:63:d3:52:b6:99:46:1a:f6:fd:
         b8:7b:17:c4:2d:e0:fa:c4:bf:51:aa:f8:83:2a:6e:58:ac:ce:
         20:ef:44:db:a5:7d:54:59:61:b3:e1:75:5b:54:1d:a5:1f:e8:
         52:13:88:be:d4:98:0c:e9:55:3e:75:e7:23:3e:87:7f:b3:4c:
         76:1a:60:d4:bf:19:a3:36:7a:40:d3:bb:a9:32:65:77:14:0f:
         aa:eb:63:42:9a:74:72:f1:12:4a:c9:64:4a:1b:b9:95:8b:ff:
         51:cb:48:2b:da:35:0d:25:09:7d:e1:d5:5c:d3:77:3a:c9:20:
         51:60:e0:7e:74:b5:3b:6e:99:f5:31:66:b0:45:43:22:16:1d:
         3e:5c:3e:44:2c:a0:d0:66:7a:1d:01:af:d3:76:32:e5:c8:ce:
         dd:65:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:17:24 2024 by rpki-client on console-fra.rpki-client.org