Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/3230302e302e3137352e302f32342d3234203d3e203237373739.roa
File:                     3230302e302e3137352e302f32342d3234203d3e203237373739.roa (raw, json)
Hash identifier:          4rj1h5N8+L3cFdPzdcEHa0AGJHt4Mfg0ToomCK396w4=
Subject key identifier:   27:07:7E:43:39:29:53:CC:32:58:63:9A:D1:6E:88:4A:A2:15:B6:F4
Certificate issuer:       /CN=18F32445C7470480959C29EE05393EE1A6A424C0
Certificate serial:       367360138A53B31F570A363297886FF1A87DCFD0
Authority key identifier: 18:F3:24:45:C7:47:04:80:95:9C:29:EE:05:39:3E:E1:A6:A4:24:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18F32445C7470480959C29EE05393EE1A6A424C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/3230302e302e3137352e302f32342d3234203d3e203237373739.roa
Signing time:             Tue 05 Mar 2024 17:55:04 +0000
ROA not before:           Tue 05 Mar 2024 17:50:04 +0000
ROA not after:            Tue 04 Mar 2025 17:55:04 +0000
asID:                     27779
IP address blocks:        200.0.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/18F32445C7470480959C29EE05393EE1A6A424C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/18F32445C7470480959C29EE05393EE1A6A424C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18F32445C7470480959C29EE05393EE1A6A424C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:73:60:13:8a:53:b3:1f:57:0a:36:32:97:88:6f:f1:a8:7d:cf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F32445C7470480959C29EE05393EE1A6A424C0
        Validity
            Not Before: Mar  5 17:50:04 2024 GMT
            Not After : Mar  4 17:55:04 2025 GMT
        Subject: CN=27077E43392953CC3258639AD16E884AA215B6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:ae:0f:b5:ac:0f:80:08:0c:6c:72:49:a6:
                    b6:5d:30:91:5a:27:69:29:97:e1:15:9b:9c:42:74:
                    00:83:f4:3d:8b:61:07:94:f8:cf:5d:bf:a0:18:9d:
                    89:1a:17:41:f7:bc:6e:c0:6c:d6:a1:4e:7b:f3:c8:
                    34:51:db:9a:ea:b6:57:98:af:9a:0b:7f:8f:b3:d5:
                    d7:d6:c8:ee:ec:e7:17:4d:94:a9:4f:01:17:dd:25:
                    a7:30:47:c4:8b:a2:db:43:1d:b2:29:a4:e9:ec:99:
                    a1:4a:31:a2:67:4a:72:e1:fa:de:d4:0c:5c:ee:da:
                    ad:4b:2e:d3:dd:31:6f:d0:e4:7e:41:7a:38:4b:67:
                    b7:1f:64:9b:49:60:f1:00:eb:ef:1f:24:47:2b:2b:
                    27:33:a0:be:f7:69:d4:41:af:2e:89:69:be:12:eb:
                    86:87:da:68:ff:54:b4:fe:b6:f5:b6:92:f7:a4:cf:
                    78:88:5a:f9:4a:3a:13:56:67:ae:bc:46:15:76:59:
                    90:f5:42:fe:53:ff:9a:e0:88:72:74:5d:1d:96:78:
                    bd:11:47:0b:57:e0:1a:71:dd:40:d5:f4:12:76:2d:
                    50:ef:95:a6:13:2a:b7:af:a2:ee:c7:3f:de:54:ab:
                    31:4e:26:b7:b1:64:81:ab:9e:b0:d5:e9:62:6d:c7:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:07:7E:43:39:29:53:CC:32:58:63:9A:D1:6E:88:4A:A2:15:B6:F4
            X509v3 Authority Key Identifier:
                keyid:18:F3:24:45:C7:47:04:80:95:9C:29:EE:05:39:3E:E1:A6:A4:24:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/18F32445C7470480959C29EE05393EE1A6A424C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18F32445C7470480959C29EE05393EE1A6A424C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/3230302e302e3137352e302f32342d3234203d3e203237373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:19:90:e9:1a:f0:63:b4:c8:cb:c0:00:86:88:e8:00:69:31:
         12:87:02:4f:f9:28:e4:59:f3:83:3a:7f:19:e5:d4:ea:58:0c:
         85:3e:fa:42:03:f4:c6:c3:45:ae:4b:45:4d:63:54:5b:91:7a:
         40:e7:31:5e:64:8f:69:8a:e9:64:be:a2:b7:e1:3f:57:b6:6e:
         8e:4e:07:c1:e2:f0:74:85:83:cd:20:ad:f7:b9:03:28:7c:8e:
         3c:2f:68:15:c5:2a:45:17:f4:59:a5:74:25:26:d9:00:00:fa:
         29:4a:2d:62:fa:3f:5b:ba:34:99:8d:62:40:75:16:bc:93:4b:
         0f:7c:c5:6e:73:5f:7b:e4:b2:bb:1f:e0:e6:a2:58:f4:9a:15:
         86:bc:63:2f:c8:0f:fd:67:b9:4f:08:ac:52:9c:9e:e4:c4:23:
         af:7b:f7:28:17:0c:94:18:52:f1:4d:67:eb:3a:4b:92:c0:4d:
         d7:49:d2:f1:48:d1:2d:34:38:e6:57:53:2a:71:fc:6f:bf:0b:
         0b:e2:9f:ad:c3:dd:da:b8:61:e1:ec:9d:9a:7f:cb:d0:0b:0c:
         e5:90:ad:55:1c:d2:7a:47:98:fc:8d:41:09:d5:c2:54:c2:81:
         cd:d7:d6:6c:67:76:95:21:f4:08:3e:23:4c:41:a1:6d:60:d9:
         7e:4f:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:02:41 2024 by rpki-client on console-ams.rpki-client.org