Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e312e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e312e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          VSksEwZAeOLiIpBnp83qbSFKVwLoRY/ZtnYWpHxIRQw=
Subject key identifier:   36:13:64:C5:CF:27:B4:7E:20:37:F7:49:B0:46:44:52:64:9F:1E:E5
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       4160664D5662AADC276A3EFEA53853EC9A86AE1E
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e312e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:02 +0000
ROA not before:           Tue 05 Mar 2024 17:54:02 +0000
ROA not after:            Tue 04 Mar 2025 17:59:02 +0000
asID:                     18747
IP address blocks:        200.73.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:60:66:4d:56:62:aa:dc:27:6a:3e:fe:a5:38:53:ec:9a:86:ae:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:02 2024 GMT
            Not After : Mar  4 17:59:02 2025 GMT
        Subject: CN=361364C5CF27B47E2037F749B0464452649F1EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:c8:68:2d:d6:d7:2e:56:66:0c:55:96:2a:
                    95:94:f9:bf:0d:9c:ad:97:e8:85:d5:37:50:eb:9f:
                    ba:8b:dd:2e:1d:ff:d7:ec:a1:e8:c2:52:ba:54:6e:
                    db:15:ee:fb:91:5b:24:d1:5d:90:73:c3:25:58:47:
                    48:09:2c:6d:ec:5c:78:57:b5:41:02:21:9f:34:61:
                    82:a6:38:d2:34:70:a0:22:3e:d7:4c:8f:8c:6f:ae:
                    20:89:0c:af:47:8a:9d:c7:70:21:68:9f:9c:f6:8d:
                    5a:1c:1b:c6:88:ec:98:de:9f:b7:63:5f:c4:ad:67:
                    35:3c:92:7c:d3:33:60:76:a6:a8:cc:0b:d6:cd:85:
                    f2:dd:76:bb:b7:9f:a0:a2:4f:aa:ee:58:7a:92:a8:
                    12:73:73:51:d4:94:e0:d6:80:24:72:90:11:a5:a7:
                    2e:56:17:3b:74:78:db:bb:6b:25:36:96:d7:5e:a8:
                    ab:ec:dd:c8:16:ce:4e:ad:f9:99:e6:5a:df:d0:91:
                    23:57:fe:5d:8d:e8:ce:a6:fa:a3:b8:8e:78:8a:c4:
                    c1:db:dc:73:54:80:39:ac:51:ba:a5:ab:c9:42:88:
                    97:f5:9b:3f:f7:10:bd:f1:37:a7:bf:ca:9b:c4:f7:
                    b6:cd:41:57:4d:28:85:60:1a:7a:0e:d6:87:45:d7:
                    25:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:13:64:C5:CF:27:B4:7E:20:37:F7:49:B0:46:44:52:64:9F:1E:E5
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e312e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:77:e5:94:14:8d:65:8b:62:50:c3:a2:5d:25:8c:77:42:c2:
         63:76:eb:e3:c3:84:10:69:5a:55:62:0e:e5:da:3d:9c:7f:49:
         48:ab:86:f7:6f:82:1b:7c:ce:6e:61:68:3f:84:9b:7d:f7:71:
         3a:1a:9a:d9:2a:64:4e:be:a2:42:02:92:6c:18:61:e9:48:39:
         a3:a5:66:00:ad:46:2e:30:e0:72:2e:84:3b:71:3e:79:64:8e:
         5e:1a:e4:cd:f9:e3:cb:11:5d:54:3e:5d:d6:84:2a:4c:87:61:
         e5:3e:a2:04:18:9c:4f:c9:72:25:84:8d:51:b2:63:fc:8c:ec:
         2c:c0:3e:1a:cb:c9:ae:9c:86:e4:5c:13:4a:be:4c:fe:99:2c:
         0a:00:b0:32:44:4e:2b:d9:68:d8:6c:6f:8b:8c:e3:26:dc:06:
         e9:ab:eb:7e:14:dc:6c:44:7c:d0:a4:9b:86:f5:9c:b4:44:62:
         e2:79:d4:8f:c4:23:a2:2b:19:e4:ff:3d:ab:8d:5b:f1:49:fa:
         e1:7c:29:59:db:e5:3f:ab:65:4e:94:6f:a0:e6:c0:e4:f3:60:
         d0:20:8e:7c:67:3c:c0:ac:b2:cd:75:12:83:5b:82:d1:6b:eb:
         7d:a0:60:f5:da:94:a5:93:8f:28:9a:cd:9c:77:35:52:6d:a5:
         2c:db:04:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org