Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e38322e302f32332d3234203d3e203236353036.roa
File:                     3230302e32352e38322e302f32332d3234203d3e203236353036.roa (raw, json)
Hash identifier:          Pdb+Hi+FLZlg5OCc2tx4+HXr0ooc+mQPxydlq6m0pME=
Subject key identifier:   22:10:3F:F5:C6:CD:C5:62:E2:4D:98:3E:F1:3A:33:77:4D:A6:33:59
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       07AD9A682DE727F60FBDF98CB582A450C4434D14
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e38322e302f32332d3234203d3e203236353036.roa
Signing time:             Tue 05 Mar 2024 17:41:53 +0000
ROA not before:           Tue 05 Mar 2024 17:36:53 +0000
ROA not after:            Tue 04 Mar 2025 17:41:53 +0000
asID:                     26506
IP address blocks:        200.25.82.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ad:9a:68:2d:e7:27:f6:0f:bd:f9:8c:b5:82:a4:50:c4:43:4d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Mar  5 17:36:53 2024 GMT
            Not After : Mar  4 17:41:53 2025 GMT
        Subject: CN=22103FF5C6CDC562E24D983EF13A33774DA63359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:c3:8b:3e:7f:54:a2:25:47:41:87:13:74:
                    fd:d8:c3:d0:fa:bd:54:1a:9a:1b:58:45:81:d9:30:
                    ab:8f:30:96:18:04:e5:ec:e4:dd:33:0b:e7:32:7e:
                    b0:a6:27:45:22:86:57:7d:c6:2d:16:f1:ac:4a:b7:
                    92:9d:85:d2:d2:e1:8c:48:41:c8:c1:7d:81:ea:01:
                    0a:c8:2a:6c:8b:5f:6f:d3:c0:c5:c6:2f:60:03:b1:
                    27:23:84:14:48:07:1e:ab:85:d7:e6:68:9c:7b:e2:
                    88:15:33:f0:df:3c:b8:f6:df:65:f4:7b:b6:50:15:
                    32:83:79:0f:4e:93:6f:6c:39:4f:7f:45:8a:d1:37:
                    9a:b2:70:81:ed:e4:e0:41:65:ce:aa:fb:d7:42:00:
                    28:6c:11:82:08:63:e7:1a:bc:74:5d:62:3d:6e:af:
                    85:55:01:2f:ff:d2:c6:39:43:70:84:23:7c:4b:e6:
                    84:79:11:f7:a5:38:bd:3a:22:34:ca:04:49:74:40:
                    77:07:ae:d8:18:72:e2:48:46:34:10:c8:f7:55:b5:
                    c7:e8:0f:b0:9c:c6:a6:b5:3d:b5:36:b4:2d:64:ef:
                    07:d7:cf:e6:aa:34:5a:6a:fb:3d:a4:81:be:26:50:
                    6e:b4:21:6c:0b:79:3c:4c:c0:b0:7c:05:ea:e5:20:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:10:3F:F5:C6:CD:C5:62:E2:4D:98:3E:F1:3A:33:77:4D:A6:33:59
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e38322e302f32332d3234203d3e203236353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:c0:be:f2:1c:8d:e4:b4:47:b4:d5:ec:cf:37:ae:f8:bb:
         c5:14:38:47:f5:b4:c9:52:73:50:7c:fa:23:49:ce:02:1b:39:
         8d:83:21:ab:80:e7:de:b7:61:42:0a:82:73:20:07:07:c7:a9:
         89:7f:12:9b:f6:e5:fa:7c:9e:7a:a9:fb:6f:25:22:a8:e1:ac:
         72:89:33:2f:82:0a:46:67:a8:88:9a:eb:a5:f9:d0:39:1c:39:
         db:18:d6:91:ff:cf:ed:f9:af:95:ee:3f:8c:93:20:f5:44:95:
         c1:b4:95:bd:63:8d:7b:0d:b7:b1:32:4d:79:b7:2c:e7:2e:1f:
         03:63:ab:2e:f7:a5:a3:d8:3f:69:ac:1d:24:47:09:7b:7a:34:
         bf:12:cf:fd:ee:78:95:4d:41:14:1a:9e:c2:7b:2a:2f:a5:27:
         d9:26:8f:63:fb:c8:d0:92:86:b5:38:25:57:65:4f:ac:aa:d6:
         94:df:44:54:be:0c:b2:60:41:87:77:78:44:23:7a:56:af:ba:
         05:b0:f7:41:95:ad:bd:63:84:8d:6f:ba:e9:7b:ea:35:4f:82:
         0e:b8:8a:0b:ef:51:5b:17:fb:15:49:96:52:18:7c:98:92:c5:
         88:7a:3f:f3:f8:b9:56:0f:9e:70:52:20:f1:43:e6:43:5f:2f:
         40:29:26:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:25 2024 by rpki-client on console-ams.rpki-client.org