Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e36342e302f31392d3234203d3e2036343731.roa
File:                     3230302e31312e36342e302f31392d3234203d3e2036343731.roa (raw, json)
Hash identifier:          56Cn5//1aXdsD3ebH+E7Og/i+BNOJh3VzAD8F2xLI8Y=
Subject key identifier:   D5:3D:0B:9F:F4:C1:1E:E5:A6:43:86:6E:5D:39:02:8A:0F:5C:56:2B
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       03BB905169D892E15283BB0C15FF3906C3E6CD47
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e36342e302f31392d3234203d3e2036343731.roa
Signing time:             Tue 05 Mar 2024 18:14:55 +0000
ROA not before:           Tue 05 Mar 2024 18:09:55 +0000
ROA not after:            Tue 04 Mar 2025 18:14:55 +0000
asID:                     6471
IP address blocks:        200.11.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bb:90:51:69:d8:92:e1:52:83:bb:0c:15:ff:39:06:c3:e6:cd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:55 2024 GMT
            Not After : Mar  4 18:14:55 2025 GMT
        Subject: CN=D53D0B9FF4C11EE5A643866E5D39028A0F5C562B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:3a:e9:fd:38:97:91:05:3f:03:cb:3d:c6:
                    f6:a1:e7:5d:33:9d:c1:e6:59:3d:79:1b:ef:fe:b4:
                    50:43:7d:c9:e1:54:74:8d:a3:94:ff:7a:5f:08:b9:
                    01:93:49:87:25:d3:5f:26:83:33:65:bf:dc:24:25:
                    4f:28:12:ca:13:28:3a:df:93:7d:61:4b:d1:cc:f6:
                    ee:30:07:ef:71:8c:33:da:fa:34:9e:4e:ee:41:27:
                    fb:8f:55:97:56:ff:22:d8:46:b4:ea:46:45:db:b2:
                    ed:af:00:e4:a9:5f:b3:1b:ae:ba:99:6a:f7:65:be:
                    bd:6a:0f:a9:86:16:ff:00:52:5e:b9:eb:53:86:ff:
                    d6:40:14:d2:41:09:90:01:51:a6:f2:16:e8:d8:21:
                    c1:6e:a2:ad:0f:75:26:79:ca:51:5e:8f:0e:cb:a4:
                    16:26:ea:79:43:e4:64:7c:9f:74:5a:b1:86:05:57:
                    6e:ed:6a:68:3e:18:6e:04:70:d3:06:9e:86:ee:27:
                    f8:c6:a3:57:40:88:c2:bb:79:ec:ba:ed:da:83:3e:
                    25:f6:44:83:7a:e8:84:ca:f7:c9:1f:45:d9:53:77:
                    1e:68:fd:f7:c7:24:80:81:74:77:06:55:a8:d0:1c:
                    d0:66:eb:0d:a7:64:1a:60:dc:1d:df:c4:27:6d:91:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3D:0B:9F:F4:C1:1E:E5:A6:43:86:6E:5D:39:02:8A:0F:5C:56:2B
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e36342e302f31392d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:23:71:78:37:46:22:11:a4:da:d4:fa:59:7e:bc:10:93:7e:
         7b:cf:25:0b:c4:88:01:bc:96:61:0f:3d:88:f3:15:85:9c:bb:
         f4:a2:e0:bc:68:c6:c6:f6:63:32:3e:86:84:cc:50:a8:ec:1d:
         12:28:1a:e3:06:cf:fd:1d:f5:65:1b:b3:71:a9:6c:a6:a6:54:
         d1:ff:1b:6c:3a:0e:00:41:57:04:38:4e:11:0c:1c:d2:ea:89:
         fe:c7:a4:81:ea:c6:81:50:8e:62:6e:f9:60:b5:29:8f:60:cc:
         6c:ca:04:36:8a:ed:0a:7a:75:b5:7d:00:9d:54:d1:b9:1a:c8:
         db:44:a8:3d:41:23:f8:c4:4b:82:f5:62:d8:78:99:ef:a4:91:
         d5:2b:2a:59:e4:f8:a1:98:96:2d:9d:f3:d3:50:11:fe:2c:7c:
         af:4b:68:7b:44:46:d1:9a:cd:f8:86:45:af:68:ba:61:68:e9:
         6a:41:3d:b6:06:33:90:6e:27:05:03:1b:df:76:16:76:9d:93:
         88:b0:ce:79:ed:4e:eb:84:9a:34:fd:92:c9:ec:a1:9b:9e:fd:
         7f:30:08:c8:6e:b3:d7:14:e3:ed:9e:41:65:df:7a:7f:f1:1d:
         48:7b:2d:e9:e3:59:52:22:2f:b5:1d:6e:dd:f5:48:c2:57:46:
         a7:ea:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:06 2024 by rpki-client on console-fra.rpki-client.org