Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa
File:                     3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa (raw, json)
Hash identifier:          T8yb67Ru7fnHquqEbd5wFXF7ftsU6Jpqpa837c67y+k=
Subject key identifier:   FE:46:2F:8F:BD:EC:F8:CF:41:90:B3:94:C2:6B:FE:66:03:9A:99:FB
Certificate issuer:       /CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
Certificate serial:       2B7E9D08F23C2550E8AEEB0EE76825302D1DA405
Authority key identifier: 40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa
Signing time:             Tue 05 Mar 2024 17:48:34 +0000
ROA not before:           Tue 05 Mar 2024 17:43:34 +0000
ROA not after:            Tue 04 Mar 2025 17:48:34 +0000
asID:                     14970
IP address blocks:        206.223.124.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7e:9d:08:f2:3c:25:50:e8:ae:eb:0e:e7:68:25:30:2d:1d:a4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
        Validity
            Not Before: Mar  5 17:43:34 2024 GMT
            Not After : Mar  4 17:48:34 2025 GMT
        Subject: CN=FE462F8FBDECF8CF4190B394C26BFE66039A99FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:2c:76:90:b9:ba:95:9b:20:1c:99:e4:4b:
                    d7:cf:9b:06:40:17:31:c6:58:29:9b:ae:9f:36:2d:
                    e4:2a:19:25:2c:d5:79:10:11:f1:68:ca:7d:e0:ad:
                    61:26:00:e3:92:e6:7a:c6:a3:3b:9f:88:3a:d6:e5:
                    ee:5b:86:58:4b:90:79:d5:4e:13:ee:78:b7:9d:b5:
                    7b:c8:ab:16:9f:ea:10:fe:1c:a9:2a:07:98:c3:41:
                    bf:9f:8d:6a:64:3f:b5:e5:66:4b:83:da:45:7d:9d:
                    73:29:9f:c5:71:bd:5b:e4:b4:d8:4d:77:e5:45:b2:
                    3c:f1:75:54:35:16:1f:e3:d3:c1:67:c7:03:50:3b:
                    31:aa:ab:e9:8b:a4:25:ac:3a:e4:90:94:9f:56:16:
                    ba:b0:f5:db:ee:c8:ac:06:11:6f:69:a1:45:98:d9:
                    ff:04:da:66:4a:77:31:7d:1e:1a:cf:45:70:95:d4:
                    31:3b:0a:af:0f:51:ea:6d:cb:4b:ec:12:98:38:aa:
                    31:57:07:a3:92:d5:96:e2:52:d5:ea:33:9a:e7:60:
                    ba:7c:50:5f:fe:5a:d5:77:51:ff:65:e7:47:db:bf:
                    74:bd:88:8f:71:e6:d3:78:91:ea:5a:39:8f:85:26:
                    2a:94:b7:5b:0d:7f:c6:79:f6:17:44:bb:5f:72:66:
                    80:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:46:2F:8F:BD:EC:F8:CF:41:90:B3:94:C2:6B:FE:66:03:9A:99:FB
            X509v3 Authority Key Identifier:
                keyid:40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:1f:9d:88:14:f0:a7:3e:b1:17:57:e8:9b:42:75:1b:48:
         53:5a:38:c9:ea:c7:94:6b:bd:c0:a6:73:6c:17:a8:62:9b:be:
         f4:d1:91:6e:15:6e:bc:8f:36:7c:0d:a7:fc:49:04:39:d2:05:
         d5:67:9c:6f:63:1d:16:cb:e7:84:01:e3:65:73:df:de:79:e1:
         ca:2e:f6:70:58:54:ea:71:bc:e1:87:a1:f7:f5:df:c8:c5:44:
         92:a8:c6:a4:33:99:94:aa:fd:71:bf:ec:09:fd:25:84:e5:e9:
         73:f2:49:c3:2d:cc:f7:66:81:c0:03:c3:c5:6d:57:5c:e1:01:
         92:ea:35:23:a0:86:fc:02:74:14:60:ce:92:23:65:7c:73:3e:
         83:ac:31:0a:5b:3c:88:f9:45:fc:af:e3:5a:1f:d4:1e:ab:58:
         2b:f7:e8:18:71:80:27:1d:79:a6:73:44:b6:72:91:9d:fd:fd:
         f9:33:58:c7:1c:3d:1e:9a:8b:37:1c:c1:15:35:4c:7e:77:29:
         b6:04:eb:71:3b:b1:8e:ae:48:a4:2e:88:53:0b:86:47:dd:b2:
         de:ba:bb:ce:e5:5a:da:da:1c:ed:be:2a:0b:36:25:66:0b:7d:
         55:28:8f:25:38:e9:89:2d:a8:0d:13:66:5c:5e:5f:9d:ad:90:
         29:94:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 10:13:16 2024 by rpki-client on console-ams.rpki-client.org