Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139332e302f32342d3234203d3e20323632313931.roa
File:                     3230302e332e3139332e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          xxwW/1EID8Q9aUFj3p78cBTYClqKJc+W/GWtlKc/ejs=
Subject key identifier:   80:D8:E4:58:82:E7:9A:A5:7A:93:E1:BB:9A:EB:24:A8:E9:43:AC:DE
Certificate issuer:       /CN=A4810347EA70678F1F1785A618883EAA51B29441
Certificate serial:       378EEABC9E9665C0A61F4795E7DB6A8A1BDA7FCD
Authority key identifier: A4:81:03:47:EA:70:67:8F:1F:17:85:A6:18:88:3E:AA:51:B2:94:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139332e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:23:45 +0000
ROA not before:           Tue 05 Mar 2024 18:18:45 +0000
ROA not after:            Tue 04 Mar 2025 18:23:45 +0000
asID:                     262191
IP address blocks:        200.3.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8e:ea:bc:9e:96:65:c0:a6:1f:47:95:e7:db:6a:8a:1b:da:7f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4810347EA70678F1F1785A618883EAA51B29441
        Validity
            Not Before: Mar  5 18:18:45 2024 GMT
            Not After : Mar  4 18:23:45 2025 GMT
        Subject: CN=80D8E45882E79AA57A93E1BB9AEB24A8E943ACDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:aa:c2:c2:7c:25:99:47:23:50:2c:85:e0:
                    a4:71:08:3f:19:b3:87:95:7a:4c:63:94:e6:8b:a0:
                    6e:52:7d:29:e2:27:13:b5:e6:06:3b:0a:16:f7:8a:
                    d4:8d:97:99:3a:6c:18:cd:8b:29:38:0a:40:d6:18:
                    0b:0c:c1:ad:a7:75:6a:cb:7b:fe:41:59:e5:89:a9:
                    f5:60:fe:4b:df:d8:a3:80:dc:db:d9:0e:5a:c1:fb:
                    03:33:b9:66:69:e3:90:45:dc:5b:00:61:97:d9:24:
                    5a:b5:72:2a:0b:28:47:8d:51:44:1a:49:82:b7:8b:
                    04:f2:fd:13:08:44:bf:78:88:eb:36:b1:5d:ca:d1:
                    e6:9a:77:32:24:3d:c7:c9:f7:ed:a8:90:10:16:90:
                    c6:4b:f3:b0:d1:bf:8a:18:fe:ba:ef:7c:17:74:eb:
                    46:2a:85:ae:3d:28:55:8a:03:2b:59:87:93:01:30:
                    0d:95:2c:13:31:f3:a0:96:ec:ac:89:46:ed:f7:47:
                    10:78:ec:00:bb:c7:55:d6:c3:61:79:f3:0e:bb:17:
                    e4:9d:03:52:dc:69:06:54:0a:a8:fd:ba:34:10:0c:
                    29:50:8e:ec:2f:db:b8:98:5a:8b:e0:b2:46:10:6c:
                    56:c2:db:27:85:f3:2f:ab:35:f3:67:15:2f:fa:16:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D8:E4:58:82:E7:9A:A5:7A:93:E1:BB:9A:EB:24:A8:E9:43:AC:DE
            X509v3 Authority Key Identifier:
                keyid:A4:81:03:47:EA:70:67:8F:1F:17:85:A6:18:88:3E:AA:51:B2:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139332e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:6d:5c:ed:49:2f:76:24:d0:6b:97:48:cc:09:ab:d2:9f:
         64:48:9d:bf:81:cb:d1:b1:a8:11:99:eb:8b:a5:94:78:61:ce:
         eb:73:8b:32:f3:4d:e7:9e:48:44:c6:61:7f:6b:14:57:94:65:
         b5:fc:a1:6a:89:d3:b7:b7:de:e5:3d:9d:96:60:6e:d2:55:f8:
         0c:8a:b8:82:ff:8e:6a:ff:b5:08:8a:bf:41:85:cd:b4:8f:c7:
         c1:99:c1:3f:17:c7:88:c0:f5:8c:21:63:3b:cd:93:44:3a:af:
         f3:a2:0d:97:6e:30:7c:d8:9d:3a:87:b3:85:ac:7e:8a:b4:13:
         ee:71:aa:d5:2c:f5:0c:ae:93:b9:ce:ac:79:a8:0c:d8:00:e2:
         2d:23:ad:27:dc:b4:00:44:48:87:84:63:ee:f5:09:85:a8:88:
         da:43:f4:1a:6c:6b:80:7d:b0:de:16:f5:3f:dc:a7:63:e3:03:
         29:2c:cf:ea:23:f5:33:6a:e6:b4:99:57:e1:3f:d2:b5:c0:dd:
         99:8f:ea:59:ea:5f:b9:c1:a3:78:cf:88:59:d6:db:8d:70:a2:
         22:fa:ad:ec:97:d2:2a:55:16:ca:62:15:40:2b:48:ca:b1:22:
         5d:bc:9f:03:06:da:d9:74:63:87:59:f3:ed:bd:6b:a6:69:42:
         85:36:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org