Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31302e302f32342d3234203d3e203237393635.roa
File:                     3230302e37332e31302e302f32342d3234203d3e203237393635.roa (raw, json)
Hash identifier:          PX2L3yWQybYSZ/rUJzAtcYBpzYVQGYu+ZVqpJ48Sc+U=
Subject key identifier:   A6:30:24:53:1A:75:CC:93:60:03:2E:69:5B:AA:97:33:0F:9A:D0:57
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       5BEDB2652933EB9CDC8CF0C1D160EEC77E5AF69A
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31302e302f32342d3234203d3e203237393635.roa
Signing time:             Tue 05 Mar 2024 17:58:59 +0000
ROA not before:           Tue 05 Mar 2024 17:53:59 +0000
ROA not after:            Tue 04 Mar 2025 17:58:59 +0000
asID:                     27965
IP address blocks:        200.73.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ed:b2:65:29:33:eb:9c:dc:8c:f0:c1:d1:60:ee:c7:7e:5a:f6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:53:59 2024 GMT
            Not After : Mar  4 17:58:59 2025 GMT
        Subject: CN=A63024531A75CC9360032E695BAA97330F9AD057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:37:ef:74:04:38:f1:43:9e:db:9a:5a:7a:
                    a1:7d:6b:17:42:bb:44:81:88:0f:05:49:b0:03:f5:
                    84:36:6c:02:47:31:c0:dd:ec:f8:2b:7c:fb:53:47:
                    b9:ef:ba:f7:a6:ef:f7:9b:7c:7b:7b:8f:cc:d6:6b:
                    8f:b9:bc:2d:36:58:46:85:27:52:42:ce:be:eb:33:
                    5e:f1:e4:83:95:7d:14:9f:8c:24:08:bb:90:53:18:
                    ca:6a:ab:91:b8:f6:6d:a0:95:d5:7d:ea:a1:ab:23:
                    1e:ec:ff:bb:0d:85:ce:6e:1f:ee:e7:4d:ee:e5:ac:
                    4d:eb:b6:2c:f5:53:25:fc:51:82:68:5e:8c:3d:86:
                    8d:69:36:54:00:cd:fb:61:0c:4b:51:ad:a1:f6:66:
                    7b:e8:95:7f:c8:cc:eb:31:82:9e:45:f1:20:52:c3:
                    6a:14:df:7a:9e:a7:c6:87:e3:bd:17:62:6b:21:1e:
                    f2:73:b8:c3:a1:b6:5b:a6:94:5a:02:39:95:74:8b:
                    b5:f7:ce:a3:92:b0:1c:93:94:f3:6b:ab:d8:c1:61:
                    58:f3:6e:8d:0e:58:f5:a6:01:7a:ce:97:aa:e0:31:
                    e1:94:94:94:1c:11:76:27:f9:4a:22:8b:a1:b4:23:
                    c8:a7:77:c1:58:0d:00:74:55:b8:72:3a:46:f3:1e:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:30:24:53:1A:75:CC:93:60:03:2E:69:5B:AA:97:33:0F:9A:D0:57
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31302e302f32342d3234203d3e203237393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d4:5d:9e:f9:4d:e4:bc:63:1f:7f:5e:4b:89:e1:0c:25:8b:
         cb:dd:77:6e:8c:6d:49:81:26:09:5c:59:fe:23:a5:52:dc:e4:
         23:36:2e:e8:a5:38:a9:87:b4:01:58:c6:0b:57:56:88:cd:2f:
         e5:66:db:f5:64:9b:6e:90:e7:dc:ac:59:bb:19:43:bc:3a:b9:
         14:f8:eb:4b:9e:ec:7e:60:d5:dc:86:ca:d3:bd:20:51:53:67:
         8f:f8:ee:65:42:ea:98:5c:80:e6:e9:dd:aa:d7:61:06:c5:2a:
         93:71:30:a2:61:04:76:17:8e:a6:5f:05:93:92:03:ab:54:ac:
         5b:25:d8:10:ff:7b:f2:98:83:1c:21:92:91:97:c2:67:3d:78:
         e7:7e:39:e9:6d:74:fa:7c:b0:11:78:33:45:13:07:1f:28:1c:
         45:bb:a1:e3:1e:c0:14:62:48:ec:77:3a:d4:c8:27:15:c9:77:
         3e:c0:a7:42:64:d9:3c:d4:ca:08:65:9c:fe:8a:c8:79:2a:b7:
         1b:d2:f8:51:24:6c:07:5b:39:d1:c7:ce:28:32:a6:64:08:fe:
         7e:92:e9:9a:a4:96:07:ca:f3:d1:36:ec:3f:23:65:5d:42:66:
         d6:14:ca:df:cb:6a:7b:f0:a3:ce:fa:65:96:9b:e1:36:c2:94:
         29:de:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org