Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136362e302f32332d3234203d3e203532323530.roa
File:                     3230302e392e3136362e302f32332d3234203d3e203532323530.roa (raw, json)
Hash identifier:          E3Q4bo5d4U67XUYK+I/pUbPDU/Jsfl5G9gSp0SIwSxk=
Subject key identifier:   87:D8:6E:91:D2:81:12:8D:EA:D1:37:35:9D:D6:EF:53:00:3C:D1:71
Certificate issuer:       /CN=E840769E201D72D7EA098EEE7538061FBEA58116
Certificate serial:       1BC1D3541200BA04382F7635076F941EE607C837
Authority key identifier: E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136362e302f32332d3234203d3e203532323530.roa
Signing time:             Thu 14 Nov 2024 18:20:00 +0000
ROA not before:           Thu 14 Nov 2024 18:15:00 +0000
ROA not after:            Thu 13 Nov 2025 18:20:00 +0000
asID:                     52250
IP address blocks:        200.9.166.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c1:d3:54:12:00:ba:04:38:2f:76:35:07:6f:94:1e:e6:07:c8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E840769E201D72D7EA098EEE7538061FBEA58116
        Validity
            Not Before: Nov 14 18:15:00 2024 GMT
            Not After : Nov 13 18:20:00 2025 GMT
        Subject: CN=87D86E91D281128DEAD137359DD6EF53003CD171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:80:b9:cb:7f:9a:85:f5:eb:ba:c6:a1:e9:
                    5b:59:cb:57:11:88:4b:f4:f2:fd:47:44:7d:99:33:
                    b9:f9:e8:46:c1:29:73:72:15:a2:c3:9b:f1:0e:74:
                    27:bb:0f:88:6d:63:4a:23:cb:0a:6f:a1:5a:0e:28:
                    fa:ae:cb:65:e9:49:9f:91:33:25:82:eb:e1:6d:09:
                    88:be:f6:b5:9c:06:9e:54:fc:de:3e:f4:ee:db:ed:
                    97:62:42:25:bd:e8:ab:d4:bd:f2:fa:b3:c8:91:17:
                    de:fc:e0:c4:06:25:06:f4:44:9d:fb:80:4f:d3:80:
                    ea:9b:38:e7:60:88:f6:9c:b6:16:4e:ae:49:1a:e3:
                    c9:b6:6e:96:cc:0b:81:9d:a5:e0:9e:6b:f1:ba:2a:
                    72:70:1b:0f:13:14:9e:75:1b:c8:da:4b:24:b1:0b:
                    0b:2c:0f:81:c1:0c:91:a6:20:4a:33:6f:4b:98:ff:
                    34:87:59:35:7c:54:e2:d6:45:12:0c:fd:ca:92:d2:
                    98:c2:20:06:f6:7c:22:6f:b2:31:34:17:eb:77:8b:
                    c6:7c:67:a8:ff:b5:15:13:49:68:d1:ce:c4:ac:e0:
                    33:5a:88:0f:af:d2:3e:a4:18:db:e5:f4:15:0c:8b:
                    0b:5b:36:76:6b:36:98:98:ab:09:3a:08:fd:45:7e:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D8:6E:91:D2:81:12:8D:EA:D1:37:35:9D:D6:EF:53:00:3C:D1:71
            X509v3 Authority Key Identifier:
                keyid:E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136362e302f32332d3234203d3e203532323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:85:9c:ef:5f:aa:07:88:86:09:cd:33:88:66:1c:de:9c:59:
         c7:cc:ff:db:0e:46:6d:eb:fa:4c:0a:89:45:19:6c:1e:ad:57:
         f0:81:bd:6c:ab:1a:59:c2:dc:ed:72:ad:eb:d9:85:79:05:df:
         a2:fe:3b:b7:a5:65:dc:75:12:3f:e6:43:39:e8:99:8a:32:79:
         74:fa:a3:f7:19:86:e5:cd:cd:c7:08:7c:65:02:78:2b:59:e6:
         a5:e0:e7:5a:4f:72:6e:cb:d0:2c:43:58:d4:d6:32:2e:a4:12:
         0f:c5:99:b9:2a:e0:33:12:60:a2:65:47:cc:1d:e5:de:3f:af:
         75:d2:0a:f9:d2:43:8a:b1:b1:6b:5c:81:4e:95:ad:40:7d:97:
         8e:da:11:1d:0b:77:b1:13:28:ab:48:48:19:51:0e:3e:35:97:
         d0:9a:86:aa:3e:1b:71:51:2b:5a:cc:4b:cd:7b:a9:d7:5c:6c:
         27:de:eb:b1:93:ff:60:11:9f:b7:39:ce:7c:f4:84:ab:36:7a:
         46:20:df:63:01:37:38:c3:fe:7e:29:de:08:df:c6:40:11:00:
         4f:57:e1:6f:a5:c6:90:4a:42:2f:0c:4c:99:a2:90:d1:4c:e7:
         84:9b:9d:01:8a:9b:05:a0:10:b4:77:84:48:b7:f8:73:f7:8f:
         1a:f2:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org