Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136362e302f32342d3234203d3e203532323530.roa
File:                     3230302e392e3136362e302f32342d3234203d3e203532323530.roa (raw, json)
Hash identifier:          /Ke/mgQDr8Mui/XMjHkKGcXXvyfnVHfIRhqkHk1KJkU=
Subject key identifier:   3B:02:B9:A1:3F:3E:E8:6C:6D:BD:45:1E:BB:4B:CF:9B:B6:1B:5E:B3
Certificate issuer:       /CN=E840769E201D72D7EA098EEE7538061FBEA58116
Certificate serial:       4FF4CE5A32685B4575D4CDF608D5EE1D544C7122
Authority key identifier: E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136362e302f32342d3234203d3e203532323530.roa
Signing time:             Tue 05 Mar 2024 18:05:03 +0000
ROA not before:           Tue 05 Mar 2024 18:00:03 +0000
ROA not after:            Tue 04 Mar 2025 18:05:03 +0000
asID:                     52250
IP address blocks:        200.9.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f4:ce:5a:32:68:5b:45:75:d4:cd:f6:08:d5:ee:1d:54:4c:71:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E840769E201D72D7EA098EEE7538061FBEA58116
        Validity
            Not Before: Mar  5 18:00:03 2024 GMT
            Not After : Mar  4 18:05:03 2025 GMT
        Subject: CN=3B02B9A13F3EE86C6DBD451EBB4BCF9BB61B5EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:5f:b7:5c:0d:61:e0:6a:f3:6d:30:52:74:
                    cb:67:89:28:90:05:94:d9:11:84:7e:2d:45:fa:2f:
                    d5:85:ba:ca:19:fa:ce:5b:8f:bc:a5:01:f4:6b:d4:
                    f2:10:70:98:f4:34:af:99:76:9f:62:48:4a:5c:f1:
                    2e:bc:fb:32:8c:6d:91:57:d0:77:43:a7:d2:f8:5c:
                    42:92:6f:e8:78:7a:7c:8f:1b:bf:df:a7:4d:ad:3e:
                    8e:ad:6c:c9:4a:9d:d6:3b:c8:95:c6:77:5c:06:ab:
                    22:6d:1a:45:3d:df:98:8e:ce:fd:8c:89:a7:99:72:
                    29:b6:84:44:8a:58:41:27:18:bd:09:3d:3b:66:d7:
                    ef:43:bb:f1:50:e7:1f:28:ef:13:87:3d:0c:b1:f2:
                    62:b5:b4:ba:84:df:28:a2:b3:de:2e:a7:e6:cc:bf:
                    1c:d1:56:24:cd:b8:88:79:3b:95:fd:a5:80:7e:70:
                    23:0a:eb:98:fc:55:6c:5c:ac:93:72:dd:e2:f8:4b:
                    1c:db:65:15:e3:3a:ab:e5:d6:ae:9d:fa:b4:e1:6e:
                    9c:1f:d1:96:3d:08:a4:73:95:5c:27:86:6e:17:f9:
                    ad:9f:67:80:e1:cd:9f:6b:c0:02:22:6c:da:60:a6:
                    3d:4f:64:95:ca:bd:71:6e:32:9c:01:44:f7:36:68:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:02:B9:A1:3F:3E:E8:6C:6D:BD:45:1E:BB:4B:CF:9B:B6:1B:5E:B3
            X509v3 Authority Key Identifier:
                keyid:E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3230302e392e3136362e302f32342d3234203d3e203532323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:5e:82:65:66:76:11:20:72:16:2d:54:fd:44:ec:bb:89:
         5e:85:3b:fa:18:e2:59:98:34:2d:07:de:a3:2e:de:ba:76:01:
         cf:3a:b3:b2:4a:fa:1b:0a:34:51:43:b7:e0:17:13:ec:64:fd:
         cd:2b:41:d8:6f:83:ca:6c:84:82:c8:1b:69:29:88:1b:be:c5:
         e9:d8:46:15:e0:d8:20:34:89:08:20:0a:64:37:8b:41:e1:12:
         d8:95:9a:e9:05:c3:d0:0f:a3:34:a0:49:28:b3:61:d6:9e:be:
         c6:1e:a9:8f:02:bb:5a:52:c3:4b:75:5f:f0:df:d8:b2:87:96:
         7a:f9:92:63:7a:fd:cf:a0:ef:2b:8a:91:7c:82:eb:84:9d:6e:
         ac:d2:8d:5e:29:99:d0:8b:3f:9a:6b:86:9b:43:6a:5b:54:45:
         2d:d2:23:90:e7:da:65:8f:23:8d:b2:90:df:1e:7d:f2:f6:3e:
         fc:b0:c0:0e:ae:8b:7c:18:ea:90:61:b6:60:c2:10:53:4d:64:
         e6:a8:ef:6c:6e:f0:98:26:66:72:bf:b1:57:06:fd:86:cb:29:
         45:15:e0:fb:cd:58:04:03:2f:9a:6b:16:1d:bd:a9:bd:b3:ef:
         76:31:b1:62:f0:0c:0d:f3:2a:24:d0:81:24:cd:c2:89:11:13:
         48:5a:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:05:53 2024 by rpki-client on console-fra.rpki-client.org