Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e32382e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e32382e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          FQliFK2haZ+5u4nFsWwfc+XXFSPPWc7e032F7MhOU4E=
Subject key identifier:   42:6D:DB:9A:B4:A4:F7:68:0F:FD:BA:FE:F8:BB:CA:5C:49:46:64:31
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       6658FB43B9D2BE642C65AE7F874DD8EF2AFDB695
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e32382e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:14 +0000
ROA not before:           Tue 05 Mar 2024 17:54:14 +0000
ROA not after:            Tue 04 Mar 2025 17:59:14 +0000
asID:                     18747
IP address blocks:        200.73.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:58:fb:43:b9:d2:be:64:2c:65:ae:7f:87:4d:d8:ef:2a:fd:b6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:14 2024 GMT
            Not After : Mar  4 17:59:14 2025 GMT
        Subject: CN=426DDB9AB4A4F7680FFDBAFEF8BBCA5C49466431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:19:98:1f:17:67:95:45:57:6e:30:20:b6:
                    8c:77:8d:c1:1a:c8:03:7c:66:6f:09:a6:4f:7f:85:
                    16:c8:8a:91:88:c0:01:5a:d7:af:97:9d:4c:d9:c7:
                    ac:e7:cd:cf:b7:fd:0d:19:ea:e0:eb:16:57:37:65:
                    71:e4:38:79:21:2c:99:91:5f:8e:e3:65:1b:5f:02:
                    8d:42:6c:67:2f:ff:47:1b:ef:74:3d:4f:3a:06:13:
                    1d:35:eb:e4:fb:4e:ba:cf:3e:27:0d:8f:24:58:4e:
                    3e:90:c0:7e:20:9b:f0:86:9b:e4:b1:16:01:e9:3b:
                    90:99:97:cc:d7:ed:c9:8a:bd:7a:8b:dc:88:5b:48:
                    ad:eb:7f:9e:62:9b:dd:e2:0d:b0:dc:6c:95:17:8b:
                    7c:2b:c2:5f:01:b5:07:70:4d:ce:1a:d2:1e:bd:8f:
                    f8:7c:aa:ed:26:a7:42:de:b3:cc:44:0d:3d:e7:9c:
                    6f:16:99:1b:8d:2f:da:04:76:27:ae:64:7e:d9:dd:
                    71:38:db:56:2f:4a:21:ae:e6:fd:76:60:91:69:c0:
                    0c:8e:4c:ad:d3:59:cc:53:45:e6:ef:10:a5:51:b9:
                    31:29:f6:57:cd:b3:a8:4c:ea:ec:b4:e0:3c:ca:19:
                    53:3e:84:a5:f8:e2:ef:87:21:49:a2:7e:15:f0:be:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6D:DB:9A:B4:A4:F7:68:0F:FD:BA:FE:F8:BB:CA:5C:49:46:64:31
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e32382e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:1f:06:c7:16:ab:fb:34:1f:74:30:31:fd:4f:38:5a:12:
         bf:7d:a9:ae:a0:75:22:b2:27:7b:f4:a9:c3:a7:25:d4:26:ac:
         2f:8f:fd:78:b2:f2:6d:9f:e2:e8:d5:6c:09:da:70:d5:78:2a:
         bf:f3:c0:42:1a:55:52:ca:d1:bb:8d:96:1b:f7:af:74:c0:10:
         8d:6b:d5:6a:0b:bd:ad:15:05:3d:a5:9a:5b:f4:d9:55:e9:d3:
         cf:3a:0e:de:83:35:3c:44:98:bd:b2:96:91:cf:0e:4f:71:4d:
         7a:14:b6:3a:4a:d3:c2:0a:9d:29:b9:cc:80:cf:b9:c6:72:6e:
         2b:77:fd:ea:7f:fe:c7:64:3f:1b:1f:bf:bc:4a:e6:83:52:1f:
         b6:7a:b7:83:d1:54:67:8e:4c:bb:3c:d5:2e:f9:ad:12:e4:26:
         e3:17:c8:74:fd:17:41:21:c3:e0:00:18:f5:ce:28:6b:d4:93:
         36:5c:4e:2c:01:73:16:bc:a1:61:85:09:47:fd:9c:90:6e:d3:
         61:9b:ad:80:af:a4:84:0f:f2:4f:2d:35:b7:2d:2c:31:09:eb:
         4c:f6:d4:2e:e2:1a:38:6b:b2:01:62:e4:b8:5c:9e:aa:7c:e2:
         a5:3a:8a:5c:19:6b:1f:4d:41:31:81:14:fc:28:88:ea:a2:5b:
         08:4c:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org