Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e362e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e362e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          Phc0OBrUliLM/JMVWmOPlgxO3rgDfqXfu4+L4wPuS5E=
Subject key identifier:   CB:44:65:EA:16:B1:FD:94:B1:02:5E:41:90:29:1D:B1:1C:40:AB:7A
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       0AA853A5BADEE0A6501E4D6CD235434634D9F8B4
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e362e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:06 +0000
ROA not before:           Tue 05 Mar 2024 17:54:06 +0000
ROA not after:            Tue 04 Mar 2025 17:59:06 +0000
asID:                     18747
IP address blocks:        200.73.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a8:53:a5:ba:de:e0:a6:50:1e:4d:6c:d2:35:43:46:34:d9:f8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:06 2024 GMT
            Not After : Mar  4 17:59:06 2025 GMT
        Subject: CN=CB4465EA16B1FD94B1025E4190291DB11C40AB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:f5:42:c9:48:33:47:5d:be:f9:e5:0a:17:
                    19:dd:80:d5:1b:ab:76:92:66:90:1b:9e:bb:10:72:
                    12:fe:8b:d9:89:4f:eb:98:cd:53:9c:94:91:a7:5e:
                    c3:30:2b:87:ea:d8:77:ae:91:73:91:0d:5b:15:63:
                    53:7f:92:90:a0:4f:19:2b:71:44:53:32:b4:ae:c2:
                    04:33:ca:49:b9:80:31:b5:6e:43:0f:30:ec:04:59:
                    d0:3e:c0:b1:c3:94:8e:ce:61:8c:f4:e3:73:db:27:
                    db:da:e1:2c:ca:fe:47:1a:99:82:74:03:60:d9:24:
                    c1:1e:6f:be:15:84:ae:f6:aa:6d:3d:fa:ea:d5:a2:
                    25:a6:5e:2a:e1:42:c7:ca:56:04:eb:9f:8a:95:c5:
                    e3:0c:7d:9e:5d:c5:64:ce:b0:10:74:60:7c:5e:28:
                    7d:f6:ee:f3:8f:63:97:8c:e2:30:dc:b8:17:07:46:
                    f6:61:44:b2:b4:ed:cc:04:54:6f:3d:08:bb:40:91:
                    93:5a:51:fd:8b:e2:52:fe:28:5b:7e:6d:4c:1e:9a:
                    ca:f6:de:4f:0e:8d:84:36:dd:af:43:84:92:d9:0d:
                    87:bd:01:6b:4d:6e:49:08:b2:1d:d8:73:c3:3c:d3:
                    50:6a:d8:ee:f9:d3:3e:ff:8d:28:4d:53:0a:d6:6b:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:44:65:EA:16:B1:FD:94:B1:02:5E:41:90:29:1D:B1:1C:40:AB:7A
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e362e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:07:74:c2:f5:76:48:3b:14:bc:85:7f:9c:12:35:c0:9b:6c:
         b7:d2:c8:39:ff:ad:08:4f:da:5d:68:fe:75:a9:92:cb:32:2f:
         b0:10:5c:00:c3:7f:f0:63:2a:a1:97:2f:35:b9:75:a4:44:af:
         73:2b:9b:d4:c4:c3:45:ad:1f:f4:6b:fa:b4:6f:e9:ce:56:7c:
         23:9f:ab:6e:35:a2:65:23:76:9f:66:ad:f2:ed:56:6a:64:c5:
         62:ea:e2:38:d1:64:1f:dc:14:37:78:de:ce:fc:0a:3a:5d:ae:
         6d:df:04:c7:83:57:32:f6:53:6e:12:d9:db:f9:14:ab:a9:b0:
         b3:fd:ac:9e:0e:e0:75:3a:e6:e7:53:f6:27:5c:5d:5b:a7:88:
         7f:3b:a6:e6:85:16:a3:53:c4:c2:4b:5a:1c:b4:a1:f8:84:18:
         53:66:da:9c:81:f8:15:19:7c:0e:78:81:11:c1:e8:04:3b:6e:
         f2:d9:43:02:92:6d:e5:d7:41:7f:af:91:94:12:24:ff:f9:ed:
         77:a5:f3:21:07:bc:9c:2d:e7:8a:5b:65:bd:fd:05:0c:b6:5c:
         77:d6:5c:51:90:8e:e3:84:54:fd:e4:2a:23:6b:85:ab:62:e4:
         84:ae:cb:b0:82:0f:95:ec:35:6c:dc:1c:dc:85:a9:6a:18:f2:
         56:ac:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:30 2024 by rpki-client on console-ams.rpki-client.org