Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa
File:                     3230302e36382e36342e302f31382d3234203d3e203136383134.roa (raw, json)
Hash identifier:          g39UE3JRt2wcf8wSOe0d9RmP7UYWOeeqgW55FvH/y/8=
Subject key identifier:   44:04:BB:F0:5F:8B:B5:0F:16:AC:53:E1:B2:28:FB:C2:83:86:D4:75
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       12E91C0FD77B32A9B7D457DFEA5F99208A402F8C
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa
Signing time:             Tue 05 Mar 2024 18:12:07 +0000
ROA not before:           Tue 05 Mar 2024 18:07:07 +0000
ROA not after:            Tue 04 Mar 2025 18:12:07 +0000
asID:                     16814
IP address blocks:        200.68.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e9:1c:0f:d7:7b:32:a9:b7:d4:57:df:ea:5f:99:20:8a:40:2f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:07 2024 GMT
            Not After : Mar  4 18:12:07 2025 GMT
        Subject: CN=4404BBF05F8BB50F16AC53E1B228FBC28386D475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:e2:9c:ac:31:04:3a:f8:fb:2d:d6:80:2d:
                    98:ff:38:84:d6:35:f3:b6:91:9a:a5:a7:bb:5d:d9:
                    1e:87:09:4a:ca:1a:5c:b6:86:eb:43:b3:28:ef:8f:
                    4c:10:bf:05:70:e4:d3:65:b2:72:c8:a0:65:23:cf:
                    d1:5e:7c:d5:54:6b:64:6c:ec:58:77:db:6b:f3:b5:
                    29:4e:4d:dd:50:5f:25:8a:72:7d:07:51:f1:7e:c3:
                    cb:c1:b8:3e:69:95:be:1d:39:e2:98:68:d1:71:4c:
                    4e:4a:87:15:86:b9:ef:c5:af:ef:41:b9:b6:10:77:
                    b4:3e:7e:b6:29:77:de:e3:cc:fd:18:c0:38:1f:d4:
                    ad:09:94:9c:9e:0d:cc:1d:3a:3a:94:da:c0:d5:da:
                    19:93:91:62:dd:40:51:93:19:ab:fe:bc:77:39:53:
                    32:43:ae:34:8c:36:2e:82:37:85:ba:1b:02:ba:67:
                    cf:3a:26:87:48:e4:68:9c:e7:3a:9e:63:a2:3f:a9:
                    ba:6e:17:6e:fa:e3:b9:6f:19:cd:80:17:28:98:0d:
                    90:77:78:be:53:4e:72:67:f4:3e:ed:cc:85:ee:96:
                    36:71:13:8e:ab:00:eb:ce:cc:66:b2:19:a4:ce:e5:
                    93:d7:b3:9a:bf:9d:0d:34:d6:60:42:21:34:f9:9d:
                    ba:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:BB:F0:5F:8B:B5:0F:16:AC:53:E1:B2:28:FB:C2:83:86:D4:75
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:42:6b:3e:e2:9a:19:3b:e6:ee:f8:f4:52:07:74:a1:d1:ef:
         ff:72:0d:da:15:92:f9:7a:55:8a:2a:b5:86:44:f4:f1:2f:4f:
         03:be:31:07:8e:4c:ef:9c:57:96:c7:7a:a8:7b:c1:05:c8:e9:
         62:1e:c0:ed:90:52:a5:06:43:a1:67:20:a5:5c:1f:8a:c6:e2:
         e9:2c:40:a8:b3:72:42:93:8d:33:48:35:03:38:57:77:d2:f3:
         02:58:3d:6b:ce:c9:bd:c9:28:7f:50:14:30:a8:20:3d:93:50:
         d3:86:e2:64:c2:72:03:0e:d1:79:85:68:f5:02:a4:da:d7:d6:
         22:f0:06:6d:44:ec:1f:72:06:b4:b2:9e:f9:a7:2a:d3:a8:b9:
         5c:94:5a:e7:ab:76:dc:87:31:2a:fc:fa:c3:ac:02:f6:c6:9f:
         4f:14:b8:cf:16:1e:2d:d8:16:51:bc:4e:ce:bb:a3:1a:8e:c4:
         3e:a3:dc:cb:bf:7f:da:12:92:a1:86:03:45:cb:fe:ac:1d:af:
         d0:e6:cd:99:43:c7:e5:19:0c:b5:c6:27:b1:03:55:5a:b2:df:
         31:59:f0:27:bd:5e:a1:55:12:0c:37:37:ef:10:51:f4:a9:3b:
         3e:76:6b:9a:d0:95:d4:91:dd:17:83:1f:62:7e:8a:9e:8f:a7:
         73:ce:20:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:23 2024 by rpki-client on console-fra.rpki-client.org