Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e36342e302f32342d3234203d3e20323732303433.roa
File:                     3230302e32352e36342e302f32342d3234203d3e20323732303433.roa (raw, json)
Hash identifier:          CBkf9UmtV4PGc0EGKHHFDyb7APD0s8VRceSj3aAR2mQ=
Subject key identifier:   4F:BA:F4:CA:56:DB:DD:5D:01:22:7F:D7:43:BE:8E:C4:3E:7A:9E:7E
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       1A3E4D204EF7E3976773EB6E83AC1F48C9A3E084
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e36342e302f32342d3234203d3e20323732303433.roa
Signing time:             Tue 05 Mar 2024 17:41:54 +0000
ROA not before:           Tue 05 Mar 2024 17:36:54 +0000
ROA not after:            Tue 04 Mar 2025 17:41:54 +0000
asID:                     272043
IP address blocks:        200.25.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3e:4d:20:4e:f7:e3:97:67:73:eb:6e:83:ac:1f:48:c9:a3:e0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Mar  5 17:36:54 2024 GMT
            Not After : Mar  4 17:41:54 2025 GMT
        Subject: CN=4FBAF4CA56DBDD5D01227FD743BE8EC43E7A9E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:76:84:3a:70:f8:34:bd:a6:fd:45:18:2c:
                    40:ff:5d:67:02:6c:9a:34:f4:30:f9:a7:5f:bd:57:
                    9d:fe:6f:30:1e:84:24:17:0a:27:3c:1a:01:36:17:
                    1f:26:0d:07:8c:2e:bd:7e:5d:c8:45:2f:ba:bb:5f:
                    ea:2a:d6:1d:b2:0c:ce:05:59:e0:f6:7b:06:9a:d8:
                    f1:5d:c1:fb:e0:f3:bd:1f:22:62:9b:93:d6:31:56:
                    3e:d5:1e:16:78:b0:ba:74:ff:32:14:27:ea:32:55:
                    7d:4a:55:eb:21:51:ea:19:22:ae:ae:1c:27:5e:ca:
                    bd:5e:6f:69:cf:c2:4a:1f:6f:90:c3:d3:b1:df:5c:
                    f8:75:81:88:2f:f4:40:03:15:ae:ef:a9:e5:95:e8:
                    e7:f6:21:48:27:c4:0a:84:6d:d1:83:63:88:8d:27:
                    fe:5d:9b:7c:c8:14:f9:f7:05:fc:d3:40:0d:4b:e5:
                    a7:5e:37:dc:3f:17:56:0c:f9:ac:fe:18:09:ae:0b:
                    e0:5c:d8:04:bb:da:53:6b:b9:57:fc:6a:fd:ef:0a:
                    ce:cd:4c:aa:5f:de:49:aa:ad:14:20:3d:da:58:74:
                    16:09:ca:06:5d:22:5e:0a:97:a2:70:f1:3a:38:35:
                    21:7f:b5:af:25:43:82:98:1c:02:55:94:ae:31:fd:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BA:F4:CA:56:DB:DD:5D:01:22:7F:D7:43:BE:8E:C4:3E:7A:9E:7E
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e36342e302f32342d3234203d3e20323732303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:80:95:5e:52:03:14:54:a6:9d:c4:a9:31:ed:19:c4:79:
         16:f7:c9:ab:0c:c5:36:c3:ce:4d:5d:df:52:e7:b0:dc:5a:33:
         81:d9:f1:52:27:d3:bd:b8:0f:6d:f5:ab:23:c5:94:c5:b4:ee:
         94:14:d5:c6:4e:31:4a:40:19:6c:0a:d0:12:bd:95:01:9d:bf:
         12:ee:dd:fa:d4:4d:4e:6f:33:22:0b:55:c3:e2:d8:a2:96:03:
         6c:19:25:88:9f:7f:f2:00:13:ee:b6:09:fe:b5:e3:4f:44:a4:
         78:61:0d:f4:e1:0f:22:34:bb:02:95:5b:86:fd:32:c4:20:a2:
         75:c3:90:f6:33:a0:73:24:f3:09:1e:67:4b:73:cd:4f:96:a1:
         47:52:76:79:3e:fc:14:d9:18:23:8b:5f:c4:28:b4:fd:d8:e1:
         03:8e:49:d3:9a:75:54:35:71:f9:64:e2:e4:4f:14:d8:87:11:
         5a:7f:9d:c7:8b:4d:db:22:1a:b3:05:d7:5a:27:3b:aa:44:63:
         4b:cd:eb:89:a3:e8:ce:61:3d:18:c7:2d:62:c7:d1:01:08:f9:
         06:64:40:af:a9:2f:60:fe:5f:84:49:9d:a9:32:fa:d4:3c:96:
         de:19:c3:1e:a5:15:74:ef:41:73:e9:86:fc:8e:83:f3:a6:81:
         0d:cb:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org