Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3230302e302e3230342e302f32322d3232203d3e203237373530.roa
File:                     3230302e302e3230342e302f32322d3232203d3e203237373530.roa (raw, json)
Hash identifier:          COuGJfCUS8C5uCjSLjxArGWVgHkbpNBS/r6NRnEeIto=
Subject key identifier:   9F:C7:6F:18:DC:6D:A1:CC:D4:69:E6:CB:44:54:D4:ED:F8:9E:6F:99
Certificate issuer:       /CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
Certificate serial:       46926DF68D6B9157AA29B43EDF25D4486F5F17B1
Authority key identifier: A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3230302e302e3230342e302f32322d3232203d3e203237373530.roa
Signing time:             Tue 05 Mar 2024 17:43:41 +0000
ROA not before:           Tue 05 Mar 2024 17:38:41 +0000
ROA not after:            Tue 04 Mar 2025 17:43:41 +0000
asID:                     27750
IP address blocks:        200.0.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:92:6d:f6:8d:6b:91:57:aa:29:b4:3e:df:25:d4:48:6f:5f:17:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
        Validity
            Not Before: Mar  5 17:38:41 2024 GMT
            Not After : Mar  4 17:43:41 2025 GMT
        Subject: CN=9FC76F18DC6DA1CCD469E6CB4454D4EDF89E6F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:56:34:b4:d4:59:2b:43:9d:9e:83:2a:f2:
                    84:1a:50:e5:58:ed:d1:96:51:ca:13:7d:00:83:08:
                    e9:30:12:07:0c:13:1f:77:60:2d:0c:85:f5:22:50:
                    c9:8d:83:54:d7:e2:0f:76:e2:f7:50:12:36:df:c2:
                    a0:d2:92:cc:80:59:ef:2b:e8:a5:85:4c:44:55:1d:
                    ff:70:0d:88:36:dd:f0:1f:b7:a8:de:8a:02:e9:71:
                    a8:31:09:1c:f3:04:cc:f8:b8:50:4a:15:d7:9b:38:
                    5f:06:92:c9:b1:92:90:77:7e:da:b3:a3:b6:07:73:
                    32:98:dd:b8:e6:db:4a:aa:12:54:8d:d6:38:67:de:
                    f7:eb:ce:12:7f:11:4c:a7:c5:35:84:b1:35:c8:18:
                    be:47:c1:af:92:5a:b7:db:e2:5c:e5:f8:bf:32:8f:
                    de:34:b7:75:5d:c6:88:8a:91:26:03:e0:60:ca:4c:
                    fb:4f:f1:31:fd:95:16:6a:71:12:f0:55:28:26:60:
                    d0:7e:9f:1c:21:af:b1:7e:ff:11:34:a2:23:0d:ad:
                    5a:cc:53:d0:51:21:3b:d0:20:57:b9:c9:72:81:19:
                    22:49:b3:cc:41:60:e3:9b:26:68:25:e6:cd:93:6f:
                    cb:48:62:f1:63:db:d6:c9:83:82:2e:4b:42:f5:b1:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:6F:18:DC:6D:A1:CC:D4:69:E6:CB:44:54:D4:ED:F8:9E:6F:99
            X509v3 Authority Key Identifier:
                keyid:A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3230302e302e3230342e302f32322d3232203d3e203237373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:e2:4f:73:87:e6:08:ef:a6:e7:99:9a:9a:66:65:ef:bd:aa:
         ce:a7:7a:a9:43:5b:9a:43:2e:0d:c0:62:78:09:7c:63:13:34:
         17:c0:0f:62:e2:9c:85:73:20:db:85:9f:9c:52:04:14:5d:ca:
         e3:2d:9c:f1:ba:d0:47:0b:d8:0d:42:08:9d:d5:bc:d2:00:fb:
         a4:46:c1:4d:ac:f9:6d:84:12:9a:8f:cf:ec:72:09:e6:7b:fa:
         af:62:91:ac:19:83:67:67:dd:51:ce:2a:11:41:aa:89:d7:9b:
         8f:92:95:c9:ed:5e:d9:2e:53:94:10:68:14:99:1d:cd:d9:03:
         80:4e:cd:64:d0:7d:82:ed:d8:73:f6:54:ba:5b:f8:df:ee:f8:
         9c:ba:37:fd:b1:af:87:b3:4a:63:3a:3b:c7:b1:c3:14:d2:ce:
         91:40:a1:78:5e:fb:c0:e0:dc:17:18:dc:63:39:f8:b2:c6:4c:
         46:ea:02:9c:18:31:aa:54:93:19:f3:b7:da:b9:d7:d5:04:a6:
         3a:b1:49:a1:af:67:31:a2:47:09:96:2d:6e:7d:04:18:af:f4:
         c1:90:ef:c1:a2:d7:5e:29:2d:d8:4b:c4:11:34:74:6a:b0:41:
         24:d0:f9:d8:df:25:b6:fb:dd:d6:6b:8f:e5:12:d5:ac:77:74:
         22:e7:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org