Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31322e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e31322e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          T3ISLwx3OucO6z4Xbv/2qIbPXAfwnScDF2vSaRdcRo4=
Subject key identifier:   62:D5:35:BA:7B:5C:0C:0C:9C:5F:88:BC:EE:DF:DA:83:3B:9F:AD:AA
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       5299B1E7A6C5A1DF228178B3EB7E78F5CFE04284
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31322e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:03 +0000
ROA not before:           Tue 05 Mar 2024 17:54:03 +0000
ROA not after:            Tue 04 Mar 2025 17:59:03 +0000
asID:                     18747
IP address blocks:        200.73.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:99:b1:e7:a6:c5:a1:df:22:81:78:b3:eb:7e:78:f5:cf:e0:42:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:03 2024 GMT
            Not After : Mar  4 17:59:03 2025 GMT
        Subject: CN=62D535BA7B5C0C0C9C5F88BCEEDFDA833B9FADAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:74:9c:8c:aa:a9:31:cc:f9:03:d4:de:f6:
                    6e:58:ce:bd:e7:d7:35:63:3f:1b:07:be:b8:67:bb:
                    25:4b:68:47:b7:bf:b4:04:ec:bf:92:d4:2e:74:ee:
                    90:a2:72:9a:fe:c2:dd:e4:8d:9c:23:e6:cb:c6:e1:
                    8c:46:b5:3f:36:e3:16:6d:c2:e8:3e:63:06:e2:09:
                    79:df:53:02:34:53:24:e0:ad:c4:56:1a:7e:45:51:
                    1c:6c:34:09:7c:a7:d5:cc:27:97:e8:f7:c5:35:72:
                    42:2a:ff:c3:43:f6:5e:5f:b9:1e:98:1c:7f:33:0b:
                    0c:e4:b1:53:7e:ea:d7:d0:c1:04:eb:75:fe:2b:c2:
                    f6:3b:e8:9b:ae:3b:58:26:10:70:3e:02:c1:51:49:
                    6b:d6:3f:bf:a5:f5:33:c4:d3:90:f7:9b:d4:6c:58:
                    a4:6d:07:ee:71:8d:30:3c:f5:a7:b6:97:14:a6:6c:
                    26:21:85:f3:d5:84:35:ad:df:06:39:59:8d:94:ef:
                    70:be:68:0c:1b:1b:8b:96:a9:19:23:78:64:be:12:
                    fe:28:5e:f7:14:c1:dc:38:af:73:ca:c4:d8:bf:ef:
                    04:e8:5d:d8:37:e3:ff:4e:1b:b3:d7:be:7d:e4:cd:
                    2a:41:76:3d:fd:d1:3e:dc:7f:a6:f9:4c:3d:72:79:
                    74:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D5:35:BA:7B:5C:0C:0C:9C:5F:88:BC:EE:DF:DA:83:3B:9F:AD:AA
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31322e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:1e:59:e8:e2:ba:79:90:26:a5:50:d6:b7:28:3a:1f:cb:e5:
         36:29:33:ee:f6:cf:69:7d:7a:aa:87:c9:6e:72:ba:dd:fc:d7:
         9d:75:37:e0:c8:f2:76:d9:31:72:c6:24:d4:d2:a3:aa:a3:04:
         9a:d7:90:e9:65:5d:09:df:3f:fd:6c:29:8b:a0:31:10:5b:f3:
         b1:9a:c0:de:17:58:14:9a:34:e1:85:e9:a2:5b:72:d3:14:19:
         0b:9e:ad:bb:17:bf:9e:c5:07:3b:57:d3:a7:9a:14:54:b1:f6:
         54:8e:b9:e0:fc:7d:e1:9a:55:37:2c:5b:7b:71:51:2e:9b:0a:
         1a:05:f6:5a:fc:fb:e6:be:ef:27:73:d7:6d:55:62:70:fb:f5:
         55:6b:a7:3a:0b:63:a7:3b:09:0d:b9:74:cf:22:0a:5d:70:c7:
         1a:8e:15:9b:15:10:fd:22:a1:b1:d9:12:e0:9e:60:1e:17:bc:
         a7:7f:f5:db:ac:12:b4:33:40:33:d5:bd:b6:05:90:3a:e4:3c:
         86:34:77:26:db:32:85:89:61:63:58:a6:86:67:4d:08:06:e6:
         7e:49:66:7d:9b:c0:86:fa:ef:4e:2c:8e:f1:ba:4f:13:b4:50:
         c1:8a:ab:80:2f:c7:58:81:29:3f:93:51:99:24:0b:3a:12:31:
         bd:a5:55:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org