Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/3230302e3131352e34322e302f32332d3234203d3e203237373834.roa
File:                     3230302e3131352e34322e302f32332d3234203d3e203237373834.roa (raw, json)
Hash identifier:          oUSXTX4MLw78RH13hAN7Jre7mZzseIUbE/ntwHgKg0g=
Subject key identifier:   F7:25:B7:3B:03:DC:11:73:9E:1D:0C:C2:F6:9F:56:5E:1D:29:4B:FA
Certificate issuer:       /CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
Certificate serial:       21835F6627669FFF93219AF600B07EC0C78E586E
Authority key identifier: 37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/3230302e3131352e34322e302f32332d3234203d3e203237373834.roa
Signing time:             Tue 05 Mar 2024 18:19:20 +0000
ROA not before:           Tue 05 Mar 2024 18:14:20 +0000
ROA not after:            Tue 04 Mar 2025 18:19:20 +0000
asID:                     27784
IP address blocks:        200.115.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:83:5f:66:27:66:9f:ff:93:21:9a:f6:00:b0:7e:c0:c7:8e:58:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
        Validity
            Not Before: Mar  5 18:14:20 2024 GMT
            Not After : Mar  4 18:19:20 2025 GMT
        Subject: CN=F725B73B03DC11739E1D0CC2F69F565E1D294BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:5b:6f:e7:c7:87:11:1d:22:9d:3b:1c:6e:
                    9d:49:49:02:fc:86:c8:75:70:ec:e7:8c:a6:85:d1:
                    b1:d4:06:cd:8a:0b:d4:54:0b:d6:a5:ad:e0:0d:f7:
                    b4:68:5e:54:0f:bb:a3:37:75:bc:d7:bb:51:fa:09:
                    da:1a:e2:49:29:be:13:9b:cc:22:6f:7b:9b:0b:18:
                    3f:d1:08:e5:2b:29:8e:52:e3:95:e0:ff:12:a2:8f:
                    15:29:47:8b:d4:35:17:89:93:ae:97:71:fa:e9:32:
                    cc:68:6c:6a:6d:a1:4d:89:88:b8:63:b6:fb:b6:60:
                    02:e0:a5:57:06:7d:51:af:8a:e6:22:c1:a2:87:98:
                    eb:e8:c7:dc:3a:df:28:6a:68:b6:b2:08:11:0d:7c:
                    27:9f:12:86:c9:81:95:19:60:35:e8:4b:a8:fa:34:
                    05:51:8a:a8:32:b6:55:a0:76:97:46:a3:7d:86:17:
                    8d:9a:bb:85:56:e2:d9:9f:87:de:bc:7c:0a:94:1d:
                    35:a4:35:4b:48:d9:94:f0:1b:a8:7c:fd:3b:99:ea:
                    bd:11:f7:09:6b:d7:b2:87:0b:92:b9:d0:b2:d3:52:
                    5e:f1:db:e3:6e:f6:93:57:b8:60:c2:c0:13:ab:31:
                    d2:78:6e:b8:cc:39:a9:ac:4b:c8:95:db:1f:72:c0:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:B7:3B:03:DC:11:73:9E:1D:0C:C2:F6:9F:56:5E:1D:29:4B:FA
            X509v3 Authority Key Identifier:
                keyid:37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/3230302e3131352e34322e302f32332d3234203d3e203237373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:71:99:69:4b:74:52:d3:50:63:10:63:8a:1f:ff:bd:c9:
         63:d6:7d:3a:27:91:e6:8e:4a:99:62:8a:7a:c5:82:ba:c5:e5:
         f6:b4:28:4f:80:03:2b:ea:3d:5b:dd:fc:e4:e0:55:d2:51:9f:
         0d:68:b2:76:af:39:b3:3a:d0:a2:a3:71:e8:e4:7e:08:1d:10:
         f5:80:84:59:25:0b:dc:ba:a9:f2:1b:0b:e8:e7:48:73:38:3f:
         d3:f2:82:56:b1:5a:c3:de:96:3e:19:da:0b:04:e3:b2:6c:91:
         9d:f8:f4:92:7a:c5:4f:a9:48:43:2d:38:4c:34:92:9a:9b:d1:
         57:18:9c:2b:31:42:a7:06:8a:d4:ac:2f:64:39:eb:a2:01:ae:
         ea:fd:6d:ba:d3:e0:93:17:e2:57:44:81:ba:ae:b3:2d:87:b1:
         f4:54:75:a8:e8:37:38:85:5c:87:08:98:51:bc:14:0d:1a:71:
         5e:ac:9b:ab:5a:4a:49:b9:a7:51:38:1b:09:3f:e0:9e:0f:7e:
         bb:b2:6e:73:92:f7:a1:73:e8:38:9b:37:7e:f0:51:4f:24:09:
         d0:c0:aa:f2:91:8a:90:ba:86:8a:99:d4:de:00:a3:cc:d5:41:
         9b:20:31:cc:8d:16:05:75:2b:60:58:a4:3a:f8:1b:52:86:55:
         e3:8d:bd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org