Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133382e302f32342d3234203d3e203532333633.roa
File:                     3230302e36312e3133382e302f32342d3234203d3e203532333633.roa (raw, json)
Hash identifier:          hb3PTI9QmGBxU5ihM1wM7v+BreRu/tHiiV0+z5YzQME=
Subject key identifier:   43:24:12:44:78:48:B3:5C:D6:A1:93:8B:DB:A5:A9:D2:A9:C1:0F:2B
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       0C85BF0F131D0641ED116E59BBC569A22CD71A9D
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133382e302f32342d3234203d3e203532333633.roa
Signing time:             Tue 05 Mar 2024 17:59:02 +0000
ROA not before:           Tue 05 Mar 2024 17:54:02 +0000
ROA not after:            Tue 04 Mar 2025 17:59:02 +0000
asID:                     52363
IP address blocks:        200.61.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:85:bf:0f:13:1d:06:41:ed:11:6e:59:bb:c5:69:a2:2c:d7:1a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:02 2024 GMT
            Not After : Mar  4 17:59:02 2025 GMT
        Subject: CN=432412447848B35CD6A1938BDBA5A9D2A9C10F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:f8:6e:85:e5:1d:8b:40:71:b5:bf:5a:90:
                    25:58:92:19:b8:67:6e:21:d2:3d:19:5e:76:8f:2b:
                    6c:86:89:d1:68:fe:1d:81:92:71:63:35:84:ff:e7:
                    c5:d0:54:81:c0:cd:17:96:11:1c:23:c5:c2:fb:4d:
                    8c:df:a2:45:73:30:68:34:33:90:a1:30:55:b7:4d:
                    c3:9a:e4:b9:7d:5c:ec:e3:63:9f:eb:29:b8:38:a8:
                    82:a4:4b:a4:70:f2:91:a0:bc:ed:42:8e:c5:09:ab:
                    4d:95:82:c1:24:27:a2:cf:93:f8:8c:78:c6:52:ae:
                    9b:41:16:b3:db:1c:7b:03:0a:87:ec:98:cd:a8:7e:
                    a0:ef:c8:ac:5c:93:2e:19:f1:d7:ad:04:49:a5:0f:
                    3e:ba:24:d5:a0:67:17:0a:b8:7d:95:fd:d0:b0:71:
                    a4:84:ff:b2:e2:db:75:34:fd:82:0a:5f:54:2d:b7:
                    14:f6:42:d8:50:42:8c:ae:b6:ca:81:8f:4d:3f:95:
                    ca:9d:51:0b:48:a3:8f:6d:dd:b9:42:ff:ad:af:32:
                    52:a4:33:94:d8:73:d9:e1:30:bd:4e:e0:2b:e9:cb:
                    9b:ff:46:f2:37:94:b5:8b:4f:c8:d6:23:15:64:41:
                    dc:e2:74:e7:f1:00:ef:ee:b2:a9:27:1b:ec:ce:76:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:24:12:44:78:48:B3:5C:D6:A1:93:8B:DB:A5:A9:D2:A9:C1:0F:2B
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133382e302f32342d3234203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:d5:b1:d4:be:2c:b1:4b:72:25:82:f3:cb:ea:92:b5:c0:
         8c:92:cd:09:53:53:95:be:12:34:e4:52:39:32:f8:1f:20:c1:
         6d:f1:09:31:9b:2d:34:07:0f:5d:c4:79:5e:c8:2e:00:18:7e:
         78:ff:ed:bb:31:dc:4c:58:97:84:81:54:34:16:8b:c9:b9:0f:
         e2:ee:66:7c:7e:8f:bd:9c:7f:53:5a:ba:81:ea:57:67:b7:fe:
         32:ee:1f:f2:85:c8:d4:e7:e8:77:bc:a9:02:a7:97:d6:a0:08:
         2f:a2:6f:9b:a2:28:01:4f:6a:41:7b:5e:19:89:24:3b:44:77:
         f0:12:3b:49:71:ed:cd:6e:f3:35:a4:d4:fe:67:37:ad:53:e9:
         ff:7d:da:15:21:4f:03:7b:37:95:cc:b8:6e:c7:e7:55:6c:80:
         e3:11:54:11:c3:1a:18:df:2f:d4:74:52:72:8e:f9:15:3a:86:
         bb:d1:17:c7:b6:06:65:7c:40:81:7e:9a:8d:a1:26:1a:e5:07:
         a9:57:c7:87:3c:44:c1:84:86:35:1b:23:73:5d:10:d0:1c:03:
         3d:cc:cf:0a:a8:ef:f0:ce:af:65:14:bc:da:ae:9f:14:b5:ac:
         eb:0c:6c:14:65:cc:cf:64:6a:99:e5:d0:57:b7:d9:ee:d3:d0:
         58:6e:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:18 2024 by rpki-client on console-ams.rpki-client.org