Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e3131342e302f32342d3234203d3e20323634363338.roa
File:                     3230302e36382e3131342e302f32342d3234203d3e20323634363338.roa (raw, json)
Hash identifier:          vJ6dk4XOyMXqV72CTAf0QBL/BEJ04Qz36jkeCO7N1dw=
Subject key identifier:   D3:E3:AF:2A:9A:67:F7:AB:E5:39:25:BC:E2:FC:41:68:55:6D:AE:2E
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       2B3A3CDDC2FAAA6E8C19CC806B602876F06DE8EC
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e3131342e302f32342d3234203d3e20323634363338.roa
Signing time:             Tue 05 Mar 2024 18:12:07 +0000
ROA not before:           Tue 05 Mar 2024 18:07:07 +0000
ROA not after:            Tue 04 Mar 2025 18:12:07 +0000
asID:                     264638
IP address blocks:        200.68.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3a:3c:dd:c2:fa:aa:6e:8c:19:cc:80:6b:60:28:76:f0:6d:e8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:07 2024 GMT
            Not After : Mar  4 18:12:07 2025 GMT
        Subject: CN=D3E3AF2A9A67F7ABE53925BCE2FC4168556DAE2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:82:ff:1e:55:ea:db:5c:63:db:5c:50:75:
                    9c:b6:36:76:31:bf:f2:c5:39:df:d2:21:47:9a:35:
                    d3:de:31:dd:51:c8:24:b2:da:b3:6b:93:3b:ca:82:
                    dc:ca:19:98:99:e5:c4:d3:be:e4:26:f2:a6:aa:23:
                    a1:1f:90:d3:f9:30:1f:ca:3e:5e:02:a6:f6:10:b8:
                    22:ed:b1:3e:40:1b:05:db:36:e2:ee:0d:9e:a5:87:
                    e0:f9:28:99:81:33:8f:88:b1:f7:4f:93:d7:7c:f4:
                    6c:ef:ab:50:78:ec:52:e6:b4:3d:41:b7:06:a8:f6:
                    3e:0e:20:fc:37:4c:60:82:3d:58:ec:5f:da:8c:e7:
                    a5:4f:41:35:39:8b:38:d0:d3:3b:4d:21:d6:1f:ad:
                    58:5e:c9:09:01:39:88:c2:6f:79:bd:c5:58:42:c7:
                    7c:83:76:59:5f:64:db:d8:a5:ba:63:2c:e5:a9:9f:
                    71:39:10:aa:b2:af:6d:cf:a2:59:f2:5d:72:ce:fc:
                    0a:2b:4d:d7:40:ad:e7:97:67:c9:88:3e:2b:f2:bc:
                    3a:de:42:9e:4d:87:52:10:65:3b:29:15:99:a0:bf:
                    fa:73:14:0a:54:7e:c0:ce:d1:41:b5:a0:59:79:f5:
                    a9:6b:b1:1e:99:09:04:fa:1e:31:89:03:72:67:5b:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E3:AF:2A:9A:67:F7:AB:E5:39:25:BC:E2:FC:41:68:55:6D:AE:2E
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e3131342e302f32342d3234203d3e20323634363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:73:e0:8b:66:d9:0c:b9:cd:26:9e:60:19:55:b8:bc:37:
         2e:f1:f6:a9:21:8c:f6:23:7c:b3:e2:74:f5:21:6a:c0:02:27:
         8d:35:d5:1b:35:55:d5:93:5b:b4:2b:86:d5:6e:b4:ce:52:45:
         58:f7:66:1d:57:7b:5f:a8:e6:24:7a:bc:05:0e:26:7d:d9:b3:
         da:a8:c8:80:25:45:fb:94:97:d7:93:85:29:ec:0e:06:32:34:
         16:91:91:04:66:4c:e1:ba:69:27:50:0f:e7:fd:42:23:24:ae:
         74:ff:0b:7d:a7:f6:17:74:9f:7d:ad:ff:ba:88:c9:73:a4:50:
         ec:af:6a:28:8a:e8:ff:f5:c7:a9:37:cb:d3:e2:c4:5e:44:a0:
         24:6d:7b:92:2b:2d:e6:19:a0:e0:e2:2c:70:9a:cf:91:e1:c7:
         1d:64:e2:2d:f9:7f:20:fc:9b:d3:5e:34:d5:13:1d:c8:16:79:
         3d:aa:a7:07:63:01:73:76:98:94:24:e0:e9:a2:72:4e:53:7e:
         7b:df:1b:73:8e:c1:50:70:8f:e1:4a:2e:3d:5a:3c:e5:2a:7b:
         44:92:2f:d3:9e:6f:83:82:12:d8:3f:6a:80:c8:a6:43:58:5b:
         b4:98:77:6f:66:a9:1d:e1:da:5b:ee:ca:ec:57:f5:21:15:65:
         e5:85:8d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org