Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203238313138.roa
File:                     3230302e34322e3232342e302f32302d3234203d3e203238313138.roa (raw, json)
Hash identifier:          w9y13LuZL7aUd1FGmlTQ+bP1WUGLUh7j7kr4MWxwZy0=
Subject key identifier:   C9:53:F6:11:F2:6A:84:D6:38:B4:14:29:8D:8A:51:54:55:86:D2:A9
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       1180A55D1195FB24E399CA900C443C8A3365B710
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:13 +0000
ROA not before:           Tue 05 Mar 2024 18:04:13 +0000
ROA not after:            Tue 04 Mar 2025 18:09:13 +0000
asID:                     28118
IP address blocks:        200.42.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:80:a5:5d:11:95:fb:24:e3:99:ca:90:0c:44:3c:8a:33:65:b7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:13 2024 GMT
            Not After : Mar  4 18:09:13 2025 GMT
        Subject: CN=C953F611F26A84D638B414298D8A51545586D2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:bb:86:aa:6d:2e:78:a9:00:07:b9:b9:94:
                    78:54:6a:67:11:eb:25:8a:b7:70:71:71:65:df:0a:
                    c5:20:c8:c2:f4:02:98:7e:2f:67:3a:a0:c3:dc:13:
                    e9:3d:a6:e9:2f:df:df:d5:2e:38:12:a0:c2:ef:9a:
                    02:84:fa:36:2a:91:eb:e1:b8:22:e1:d1:4e:8b:f6:
                    14:dc:5d:9d:ea:2f:2f:86:f5:10:d5:ff:60:4e:27:
                    9e:96:e6:65:c2:de:94:2a:2b:72:59:77:67:2f:3a:
                    9a:7d:66:d4:be:b3:34:c4:96:ca:22:c7:d1:f1:fb:
                    b3:67:70:e1:a5:a6:bd:e2:7d:5e:c2:d7:e4:c7:72:
                    b0:96:4b:25:fe:b2:a7:fb:54:4e:0e:35:66:1b:b9:
                    bb:a0:75:3a:11:a1:90:71:a0:ae:d4:ee:67:e7:4c:
                    dc:b9:45:bc:5e:82:6f:5d:dc:1e:6e:f1:92:0f:35:
                    76:d2:30:05:5c:19:d9:84:35:a1:d6:40:5e:d1:f7:
                    27:9f:e4:a2:8f:65:63:3c:93:51:92:d4:bf:c5:27:
                    c8:61:19:93:a7:02:35:20:73:46:80:aa:b6:71:0f:
                    fb:c4:b0:20:33:f3:a1:e6:00:27:99:e0:b2:17:5b:
                    50:3e:a9:7f:aa:1d:b7:97:9e:1e:14:5f:e4:e7:a6:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:53:F6:11:F2:6A:84:D6:38:B4:14:29:8D:8A:51:54:55:86:D2:A9
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:ba:3e:ce:58:43:43:e6:5b:ba:5b:3c:27:5a:03:1d:24:b5:
         fc:d3:03:e8:eb:74:3f:0b:21:6e:f3:ae:4f:fb:f3:9f:d9:fc:
         dd:f6:1b:80:6c:a4:13:3d:64:5e:19:9a:d2:e5:a3:7d:b0:18:
         61:24:11:97:ae:6d:84:3b:ae:46:29:11:1e:95:d7:8d:34:37:
         37:1d:41:7e:2a:4f:6b:cd:95:f8:17:39:63:eb:62:71:00:de:
         8f:b0:65:a2:32:51:d9:8a:8b:76:34:bf:d6:52:c1:86:bc:f7:
         b7:3b:d1:d4:8c:d4:f3:81:0e:2c:bf:dc:b9:9a:98:1f:a8:72:
         67:dd:b3:20:59:6d:7c:87:3f:b3:16:f7:b2:49:85:18:f6:c3:
         1d:5b:43:1d:fc:5a:0c:98:c2:55:f7:10:d1:09:48:35:6c:c1:
         d9:30:45:6d:5e:76:71:f2:84:41:ca:e6:c7:4f:bd:e5:a1:9f:
         10:bd:25:49:3b:6a:de:bd:f1:4a:68:ff:39:58:14:77:1d:cf:
         dc:f9:d2:5b:b9:82:d5:36:a6:d3:d5:01:fb:fc:a1:ec:d0:4d:
         43:ef:3e:b6:94:d9:b0:ab:3a:df:ec:92:0b:99:9c:a3:2f:e1:
         17:5a:c0:e1:81:ee:a2:fd:5c:54:fe:63:72:22:ae:31:f7:8c:
         22:76:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:26:34 2024 by rpki-client on console-ams.rpki-client.org