Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/3137372e3230302e3233382e302f32332d3234203d3e20323639393833.roa
File:                     3137372e3230302e3233382e302f32332d3234203d3e20323639393833.roa (raw, json)
Hash identifier:          lun1CQKdxZVGeEa4D4AN2Jry+1XenQRokY4Df3qFsGE=
Subject key identifier:   6C:D6:D9:4F:7B:B5:3B:3A:3C:C4:0E:E4:F4:55:2A:9C:5D:CE:4A:E3
Certificate issuer:       /CN=C1C868DAE462CF1EFAC4EF35B251505AC4C7F982
Certificate serial:       54B47F340B3B90A824A7ECAEA7046F51555B68A5
Authority key identifier: C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/3137372e3230302e3233382e302f32332d3234203d3e20323639393833.roa
Signing time:             Tue 05 Mar 2024 18:19:15 +0000
ROA not before:           Tue 05 Mar 2024 18:14:15 +0000
ROA not after:            Tue 04 Mar 2025 18:19:15 +0000
asID:                     269983
IP address blocks:        177.200.238.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b4:7f:34:0b:3b:90:a8:24:a7:ec:ae:a7:04:6f:51:55:5b:68:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C868DAE462CF1EFAC4EF35B251505AC4C7F982
        Validity
            Not Before: Mar  5 18:14:15 2024 GMT
            Not After : Mar  4 18:19:15 2025 GMT
        Subject: CN=6CD6D94F7BB53B3A3CC40EE4F4552A9C5DCE4AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:50:c6:8c:f9:d7:69:5d:65:19:c8:d0:c6:
                    36:08:8d:69:65:73:48:a8:c6:d8:a8:c1:8f:86:f5:
                    6d:0a:1f:64:0d:9e:ca:8d:f7:23:9f:f1:08:15:ee:
                    13:30:bd:28:f7:69:44:59:d3:8e:c6:9d:68:56:91:
                    bf:23:52:bc:60:a5:06:9c:f3:9b:0e:71:9a:a6:68:
                    05:26:a7:6f:ea:ad:0e:3f:2b:dd:70:e8:fe:14:78:
                    bd:ff:9a:69:c0:63:ce:25:75:2a:9f:02:b6:b5:15:
                    f2:22:68:7d:09:9e:d1:fc:32:5e:d5:30:fb:b7:bd:
                    22:9c:b4:59:da:15:c6:44:a2:e2:c2:dd:65:21:87:
                    51:5f:20:bc:c3:60:aa:cf:ed:78:60:93:b6:8d:16:
                    d5:f1:f5:70:9b:7b:d3:73:88:1e:79:56:f2:54:20:
                    8f:78:0e:c8:83:e2:c7:fe:2d:df:c0:1f:f8:21:c4:
                    18:88:39:9d:a8:ac:4a:ad:5d:16:8a:dd:f4:ad:ee:
                    14:64:0d:33:c7:0a:6f:2c:37:4c:ea:ee:91:c3:5b:
                    ac:a8:d9:21:97:f4:28:38:1e:68:9f:04:10:94:53:
                    d4:2f:09:00:85:6a:1c:d4:2f:81:63:36:ff:01:5c:
                    3d:43:21:de:8e:12:e2:8a:34:36:d2:42:d4:a6:0c:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:D9:4F:7B:B5:3B:3A:3C:C4:0E:E4:F4:55:2A:9C:5D:CE:4A:E3
            X509v3 Authority Key Identifier:
                keyid:C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/3137372e3230302e3233382e302f32332d3234203d3e20323639393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:76:fa:c0:9e:69:ca:84:eb:d6:00:63:f9:47:07:02:4a:
         60:26:85:bd:40:bc:39:9d:49:6b:14:f5:5a:2f:3f:3f:9b:2a:
         c4:2a:a4:65:b2:53:11:20:32:98:0c:13:d8:6e:29:a6:1a:88:
         6a:4e:f1:c1:fb:9f:01:a5:08:17:88:ae:87:41:3b:a4:07:6f:
         59:74:52:43:92:0d:98:a6:cc:c7:60:29:d3:8e:e6:bf:b5:d2:
         10:88:d8:87:1b:5b:d0:91:3a:9e:9f:75:8a:e2:40:c1:7f:5a:
         00:a2:73:f4:60:02:fa:ad:07:5c:01:30:1a:36:fe:0e:a3:95:
         83:fd:48:6e:1a:8e:7e:3e:b4:94:41:c9:3d:82:36:53:ca:dc:
         b4:83:5a:e7:6c:dc:22:fd:70:9e:f8:c8:b7:2e:d5:ac:0f:33:
         6f:4e:9d:e8:47:3e:62:90:75:af:79:84:0a:f5:6f:c5:39:e5:
         9b:89:6d:9f:42:42:a4:f3:08:e4:e7:1c:25:8e:3c:0a:ac:89:
         cf:32:3c:06:3d:7c:aa:a0:f3:07:59:33:29:ec:94:b9:22:f6:
         e1:8a:ad:60:53:39:3a:ee:07:e3:7e:6b:f1:ab:fd:91:ab:a3:
         39:f4:40:56:c2:a0:81:76:b4:07:fe:90:bf:5a:c8:e7:bb:29:
         cd:7b:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org