Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3137322e302f32322d3234203d3e203134313837.roa
File:                     3230302e34372e3137322e302f32322d3234203d3e203134313837.roa (raw, json)
Hash identifier:          spy5IXfa1CI/CCDX/y2bsOzj335Ji+/QXC5k/dgmv5k=
Subject key identifier:   7D:70:95:2C:D5:02:45:92:73:B4:9A:9C:E8:31:A1:BF:67:C1:FA:F1
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       450B6A05D4FDAF1F6B91E7FCFD6621006AB72331
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3137322e302f32322d3234203d3e203134313837.roa
Signing time:             Tue 05 Mar 2024 17:42:56 +0000
ROA not before:           Tue 05 Mar 2024 17:37:56 +0000
ROA not after:            Tue 04 Mar 2025 17:42:56 +0000
asID:                     14187
IP address blocks:        200.47.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0b:6a:05:d4:fd:af:1f:6b:91:e7:fc:fd:66:21:00:6a:b7:23:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Mar  5 17:37:56 2024 GMT
            Not After : Mar  4 17:42:56 2025 GMT
        Subject: CN=7D70952CD502459273B49A9CE831A1BF67C1FAF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:7c:ef:5d:0a:17:3e:78:61:1d:10:71:bb:
                    ea:1c:a1:c5:6d:0d:71:29:ac:e6:ce:34:ef:d4:ba:
                    30:85:7b:50:99:22:7f:97:c8:22:71:f6:3f:a6:83:
                    2d:af:fb:f1:2a:a9:82:85:4d:a3:15:b1:43:11:5b:
                    b4:8c:7a:4d:0b:c6:c3:66:8f:85:66:a7:92:ae:16:
                    e0:92:29:a8:b3:49:99:37:cf:fa:14:00:f3:bc:b6:
                    1b:05:4e:08:b4:20:0d:70:17:ab:24:5e:63:f9:a5:
                    64:77:76:f4:ee:35:49:24:ea:f0:09:da:8a:fe:d3:
                    b0:42:30:29:e2:72:16:b7:48:92:ec:a9:60:1e:c1:
                    04:1f:75:c2:73:cf:6e:62:bc:15:30:27:0e:74:86:
                    6e:e0:12:02:40:c8:bc:89:58:3a:bd:0c:09:a6:02:
                    90:13:f1:23:54:cc:a2:55:0e:a3:34:9a:06:ff:8e:
                    9b:75:51:6e:f8:0d:30:57:aa:47:cb:77:5f:89:db:
                    7c:b0:a5:74:64:c9:47:31:1d:a1:6d:9e:d2:ac:3d:
                    3d:43:5f:78:0b:33:06:4a:c6:66:08:fb:db:14:41:
                    01:ce:37:7e:27:1e:65:46:3f:fc:4d:df:69:1e:22:
                    d3:67:3b:f0:b5:c6:68:f3:5a:f2:e8:c2:80:a8:89:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:70:95:2C:D5:02:45:92:73:B4:9A:9C:E8:31:A1:BF:67:C1:FA:F1
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3137322e302f32322d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:e4:d8:7e:b7:8f:da:a3:a8:56:94:4b:e1:57:f9:84:9f:1f:
         78:44:0a:f4:72:4d:1e:5a:52:6b:37:8a:08:52:f0:62:da:52:
         5f:e7:13:dd:9d:db:f8:ec:8f:c5:c9:de:2e:78:e0:33:a2:54:
         b6:aa:cc:b0:e5:bc:8c:c0:7c:3e:f0:3a:aa:7e:e4:5c:0f:d4:
         84:c3:a4:09:87:34:68:0b:0e:67:50:66:62:d3:48:ef:43:56:
         2b:b9:dc:28:a6:2b:fd:b7:d8:95:86:66:cb:f9:e5:b5:0b:d3:
         e4:a7:b6:97:88:7f:66:0e:fb:e0:d6:fe:24:8a:29:fc:22:55:
         b5:dc:99:b5:15:49:0d:5b:fc:de:ea:d0:49:24:59:a6:69:d7:
         25:b8:e7:36:eb:23:6d:ea:12:de:3e:2b:b1:ee:51:d2:84:e1:
         be:91:8e:45:17:8e:7e:d3:8b:5e:89:09:f3:78:ee:65:b3:25:
         a7:a9:1d:5c:95:f2:93:41:50:e7:5c:f0:d5:13:4c:84:25:0b:
         bd:f4:b4:ba:3b:b4:31:f1:57:f7:84:f3:08:83:6a:92:0c:19:
         18:27:7c:58:f0:cb:29:1a:d8:fe:a3:aa:2d:a3:52:f6:b8:84:
         9a:26:27:9e:cc:eb:25:0e:ef:bc:3e:b5:3f:7d:78:bc:7c:6e:
         e6:3b:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org