Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203238313138.roa
File:                     3230302e34322e3139322e302f31392d3234203d3e203238313138.roa (raw, json)
Hash identifier:          UNs40BosMpi/oUh+4AuP72LgCB9z4GHgBGe4m7h8YxE=
Subject key identifier:   AF:91:13:B4:30:E7:DE:92:19:32:62:DD:40:7D:F1:8D:D4:52:4C:44
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       3B1B94F168644EE5898768271B2E87F9A2512C96
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:18 +0000
ROA not before:           Tue 05 Mar 2024 18:04:18 +0000
ROA not after:            Tue 04 Mar 2025 18:09:18 +0000
asID:                     28118
IP address blocks:        200.42.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1b:94:f1:68:64:4e:e5:89:87:68:27:1b:2e:87:f9:a2:51:2c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:18 2024 GMT
            Not After : Mar  4 18:09:18 2025 GMT
        Subject: CN=AF9113B430E7DE92193262DD407DF18DD4524C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:59:f0:98:ca:28:59:6e:e8:df:01:20:4a:1c:
                    62:7e:84:59:a1:f5:dc:6c:7d:80:86:13:07:97:ff:
                    ff:4a:49:f2:b1:68:1a:ab:9e:29:24:f4:89:1b:9d:
                    b9:7f:4c:7f:ab:a5:de:3b:e0:4c:53:6a:60:15:30:
                    46:36:e4:e1:67:97:23:56:25:66:41:c9:89:86:b4:
                    91:c3:cb:5b:4e:8a:26:b6:64:8c:60:e4:b1:b3:53:
                    1f:e9:fd:1c:3a:97:13:9b:0e:6c:4f:6a:56:bf:a1:
                    c8:98:56:b6:ee:58:48:8b:1c:ea:04:eb:bc:3a:48:
                    e9:88:47:c4:6b:db:ae:74:04:e6:6e:a4:56:d0:ff:
                    48:9e:84:84:96:19:0a:f3:f4:81:58:0b:ea:2a:0e:
                    5f:6a:76:55:e5:8d:3e:07:c3:f8:c1:ea:dc:4b:5e:
                    62:56:47:b7:ec:48:a7:fe:6b:14:bf:0e:1f:7a:05:
                    e1:22:24:16:34:10:cf:79:42:f7:73:6d:2b:22:57:
                    d7:56:94:27:61:27:53:0b:d2:2b:7e:eb:4d:5c:e3:
                    02:f4:30:e0:2f:db:aa:44:bf:4d:65:bb:22:3e:00:
                    b5:24:9c:2d:f3:f1:65:04:22:e0:c5:70:d4:87:c6:
                    d6:a2:fb:99:f9:28:a7:0a:c0:ec:b9:57:28:7f:65:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:91:13:B4:30:E7:DE:92:19:32:62:DD:40:7D:F1:8D:D4:52:4C:44
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:63:e9:a1:6b:2a:d5:d5:00:da:ed:3f:1c:e9:f3:de:54:80:
         54:5e:d2:23:6d:d8:f9:7b:5c:ff:4a:9e:97:e0:50:91:58:0b:
         45:9a:d2:35:1d:64:ea:a2:4c:19:66:ad:81:60:aa:8d:ee:73:
         ed:1a:a4:37:d2:89:a1:65:c9:8e:0b:98:c5:08:77:7f:9a:99:
         03:00:5e:35:31:8c:f2:ef:1e:c9:4b:60:78:40:f0:ab:cf:1b:
         da:7b:ae:5e:ba:76:1a:e4:86:40:da:7d:3c:b8:0f:54:6e:90:
         49:d2:ac:ad:d2:7f:3f:66:5f:59:5b:aa:8b:92:e8:c1:20:33:
         55:71:39:1c:9c:d9:ed:aa:89:a4:2e:11:ba:6b:e5:8c:b4:c7:
         2a:48:90:cc:c4:f1:f3:40:14:3d:97:95:cd:12:69:cc:93:3a:
         9a:8a:35:f5:24:bc:d0:e8:3d:46:5e:7f:e7:96:f4:82:ec:05:
         8e:89:d3:9e:87:35:40:ea:3d:9f:c7:1a:9d:f7:38:d5:76:04:
         4c:0e:d7:80:57:d5:76:2b:e0:a1:e1:9c:97:44:1d:e1:39:26:
         7b:9a:53:3d:ad:ad:2e:ec:89:d0:78:6a:eb:ea:99:48:23:f2:
         8e:4f:86:d3:98:1e:16:34:7e:3a:93:cf:83:e6:01:c7:5d:f1:
         fe:84:f2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org