Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31332e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e31332e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          A0W9jmfQjQkqKSb/mSh8qwrbyM5+OD3VrAovbhaopko=
Subject key identifier:   55:54:9C:F3:39:35:79:C2:74:0A:76:4E:16:F0:76:30:3D:BE:E6:EE
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       6A6798E0BB10687342390030A40070ECBA5BE99B
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31332e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:13 +0000
ROA not before:           Tue 05 Mar 2024 17:54:13 +0000
ROA not after:            Tue 04 Mar 2025 17:59:13 +0000
asID:                     18747
IP address blocks:        200.73.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:67:98:e0:bb:10:68:73:42:39:00:30:a4:00:70:ec:ba:5b:e9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:13 2024 GMT
            Not After : Mar  4 17:59:13 2025 GMT
        Subject: CN=55549CF3393579C2740A764E16F076303DBEE6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:f2:79:55:df:63:c8:fd:cb:40:53:d7:a9:
                    e5:9d:03:3b:75:41:e4:69:73:b1:23:24:a0:69:24:
                    60:92:61:96:32:fd:65:8b:2b:d9:1a:97:6a:8b:a8:
                    a7:36:f5:4a:8c:c3:09:6e:59:9f:f5:2c:7d:52:f5:
                    05:c4:74:e9:b8:84:95:2c:02:42:81:98:3f:22:be:
                    5d:e1:5f:71:d7:ad:b7:1d:c2:4b:47:63:01:b0:4a:
                    77:00:db:7a:a0:e4:fe:33:ef:ee:ff:95:f2:56:3e:
                    59:de:25:80:13:14:37:49:d9:10:34:1a:cd:0e:05:
                    61:11:0a:d2:29:a5:61:8e:32:79:51:15:20:4d:4a:
                    c2:0a:da:06:93:79:9b:17:26:52:ae:fa:61:f4:90:
                    37:5b:8e:25:34:ba:25:a5:4d:ed:96:6e:66:d5:bc:
                    1a:46:5e:90:0a:91:6f:4c:4a:86:50:52:43:58:c0:
                    e3:06:35:6b:1b:0a:98:51:f9:31:3c:9c:20:5b:e5:
                    ce:bd:80:45:dd:78:9c:21:f4:19:8a:15:7e:21:cc:
                    3f:05:1a:31:fd:ab:32:b5:c4:4a:11:83:b5:d3:88:
                    1a:c7:81:cc:3e:4f:3a:71:32:fb:97:f1:88:25:7e:
                    1e:0d:ec:53:b2:ac:14:43:47:81:7e:4a:05:1c:cd:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:54:9C:F3:39:35:79:C2:74:0A:76:4E:16:F0:76:30:3D:BE:E6:EE
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31332e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:b2:41:25:0b:8a:64:03:d4:da:72:15:44:5e:56:80:80:dd:
         aa:ce:6f:78:9e:7f:3a:c1:9f:96:16:f6:5c:ca:63:c7:41:ac:
         9a:c2:a3:6c:50:48:aa:01:e3:90:99:c2:75:32:70:ab:60:da:
         23:5b:9e:96:0e:47:72:d2:06:bf:31:9e:e8:ec:1c:33:8a:c3:
         2a:2a:e4:37:81:35:46:60:e2:d7:aa:cd:1d:57:ba:6a:b3:5f:
         8e:38:db:c1:ee:c1:9e:db:27:1c:0f:d5:f8:7f:dc:34:96:6d:
         9f:38:d0:a7:cc:ed:20:19:7c:02:0f:28:64:22:69:8b:eb:89:
         11:61:f0:14:39:3a:00:b9:85:59:39:1d:c0:e5:9a:c9:86:40:
         74:b0:2d:8e:f6:4a:de:a2:46:77:41:24:38:2b:00:0f:fe:94:
         94:da:6b:44:c6:b9:0b:16:1e:86:c8:d3:9d:7a:81:87:af:35:
         42:e9:3e:18:ab:2c:0f:98:3d:32:e0:4e:47:3c:81:79:4e:25:
         87:05:d9:5c:b5:0b:85:79:ab:32:26:f3:2e:dc:a8:e0:bb:f5:
         82:39:de:37:87:61:ff:e3:2a:a0:82:9d:02:ed:69:d6:5e:e7:
         80:62:aa:d5:23:d4:28:fc:9b:c3:ac:fc:aa:3e:2c:f3:21:21:
         26:fe:be:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:30 2024 by rpki-client on console-ams.rpki-client.org