Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3234302e302f32302d3233203d3e203238313138.roa
File:                     3230302e34322e3234302e302f32302d3233203d3e203238313138.roa (raw, json)
Hash identifier:          RgH0V5y+vtOIR5ya8waGfEqGSrTWmND3ETTYawJ0gW4=
Subject key identifier:   84:65:E5:B1:5E:E8:96:DB:ED:0E:B8:5C:BD:BC:D4:00:F6:82:6B:BF
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       39B0FB9D615901AC48DF32FD88A2B4AAD626650B
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3234302e302f32302d3233203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:17 +0000
ROA not before:           Tue 05 Mar 2024 18:04:17 +0000
ROA not after:            Tue 04 Mar 2025 18:09:17 +0000
asID:                     28118
IP address blocks:        200.42.240.0/20 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b0:fb:9d:61:59:01:ac:48:df:32:fd:88:a2:b4:aa:d6:26:65:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:17 2024 GMT
            Not After : Mar  4 18:09:17 2025 GMT
        Subject: CN=8465E5B15EE896DBED0EB85CBDBCD400F6826BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:5b:b5:5a:65:fd:c6:74:20:4a:55:cc:aa:
                    a1:13:e4:a1:af:f8:d9:f4:7d:4a:f1:ac:c8:e7:0b:
                    8b:49:3f:00:af:03:4f:78:09:e2:a2:0e:40:da:e6:
                    f4:aa:01:bf:cf:31:29:9c:24:9e:32:26:cd:fa:9b:
                    74:1b:79:bd:c1:a7:c5:11:9c:13:a6:75:29:ba:1a:
                    d8:ae:fa:f9:16:7b:95:5e:a7:64:ab:61:21:6a:1d:
                    4c:9d:91:df:78:a8:35:92:8f:41:97:18:6c:f9:3c:
                    ac:96:a6:70:df:aa:19:0e:db:0d:4e:bc:36:4d:a5:
                    0a:e3:cd:40:af:bb:4a:dc:0f:cb:d6:33:e6:82:36:
                    e9:c8:d4:36:53:5b:0a:22:fe:8b:35:c7:55:37:dd:
                    76:ac:1b:69:92:3f:21:25:8a:0f:80:0e:11:9a:2f:
                    72:b6:4d:5b:cd:f3:f3:15:e0:d8:81:5d:f2:4c:c3:
                    2e:a4:15:1a:f0:97:de:33:3c:7f:b3:b2:eb:b9:01:
                    84:06:dc:a5:96:c6:9f:82:ae:6b:3c:b9:7c:ab:a0:
                    3e:d2:00:be:4b:98:7e:57:a5:57:07:be:9f:98:50:
                    9c:bd:8a:a5:16:59:c1:f3:64:c1:57:49:7a:26:77:
                    7b:68:99:a5:10:09:79:16:ce:50:11:80:3d:05:de:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:65:E5:B1:5E:E8:96:DB:ED:0E:B8:5C:BD:BC:D4:00:F6:82:6B:BF
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3234302e302f32302d3233203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:38:fc:98:18:f8:3e:4b:70:0f:3d:5b:40:f7:92:58:94:
         86:25:d9:67:05:a3:a9:0c:ab:39:6a:a5:52:aa:b2:fd:e2:de:
         98:d6:98:38:9c:87:b2:3d:b1:4e:18:25:96:49:77:19:9e:c7:
         6d:aa:33:3e:a4:6e:2a:cc:4f:61:80:74:bd:6c:9d:29:07:d6:
         04:8d:a9:34:f9:4f:d7:a7:ba:af:a9:28:57:33:5a:08:25:46:
         0d:bc:7c:83:cd:ba:9d:5a:6e:65:1c:e2:21:4e:b6:94:ce:85:
         4a:fe:f8:e4:14:69:3b:c9:d6:37:de:85:7c:bb:af:9a:70:32:
         1c:13:09:5d:b3:04:d7:d0:91:50:af:19:91:0d:e7:77:fc:f8:
         38:65:37:70:69:39:e3:e3:e8:7c:83:cd:4b:d2:e2:53:0d:d2:
         c9:22:81:4e:62:08:1c:dd:0c:a6:2c:1f:6b:d6:bf:05:db:f0:
         a5:e7:87:81:ba:ea:b0:75:9f:14:a5:8e:c2:ed:06:23:e1:0a:
         d8:09:11:7a:43:50:a9:2d:65:6e:2d:05:20:9b:3e:c6:9f:92:
         bc:6b:01:17:ea:49:c3:06:d7:8a:a0:55:21:e2:24:f3:c2:6b:
         50:10:0a:82:eb:35:2a:88:f9:52:28:ef:4c:62:f4:56:5b:f6:
         e7:b0:6b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org