Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36342e302f31392d3234203d3e203138373437.roa
File:                     3230302e37332e36342e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          aNLrKDUHQQRBPPxC25CiCXWAg+YboQr5n83x8VWYzdE=
Subject key identifier:   BC:6C:E3:BA:59:1D:56:0C:76:68:09:25:6D:79:A8:13:F6:A3:C7:20
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       416D93B5910C9E2E7A31ABD73A8B88F39AA5CFC2
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36342e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:08 +0000
ROA not before:           Tue 05 Mar 2024 17:54:08 +0000
ROA not after:            Tue 04 Mar 2025 17:59:08 +0000
asID:                     18747
IP address blocks:        200.73.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6d:93:b5:91:0c:9e:2e:7a:31:ab:d7:3a:8b:88:f3:9a:a5:cf:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:08 2024 GMT
            Not After : Mar  4 17:59:08 2025 GMT
        Subject: CN=BC6CE3BA591D560C766809256D79A813F6A3C720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:81:b2:4b:6f:3f:65:96:b6:5f:bb:7a:dc:
                    31:1a:69:70:15:3d:d8:13:91:74:99:07:b7:33:fe:
                    b6:94:a7:a3:fa:bd:0a:d9:dc:a7:32:c8:42:33:e3:
                    31:bf:4f:d5:90:34:2e:32:2f:4e:2c:ae:ee:30:d8:
                    ab:20:36:1f:1e:32:39:b0:30:2b:0f:32:74:22:6b:
                    7d:8a:49:f6:9f:b8:f5:3d:af:9c:0a:9a:6a:ee:40:
                    07:23:83:76:60:e6:1b:b3:57:55:01:24:d6:d1:2b:
                    63:95:c4:a5:e1:26:68:78:82:fb:a2:d0:41:76:0e:
                    af:a7:ce:64:86:d8:24:30:72:e0:2c:ae:7f:c1:9c:
                    81:4c:a3:73:14:15:e6:dd:7a:88:e4:30:59:cd:88:
                    b3:4b:41:b5:fd:a8:0c:2a:da:5b:e6:55:06:43:20:
                    7e:c7:98:3b:5b:98:46:3b:ff:b5:86:00:e9:80:b0:
                    45:a9:5c:89:22:42:23:ad:82:5f:65:f0:ee:77:81:
                    90:07:bf:81:00:21:43:b5:7e:70:4c:67:e6:25:ac:
                    de:ea:71:c8:d1:7b:95:bb:02:9d:b7:15:be:e8:b3:
                    62:e9:1f:28:57:77:aa:e1:85:64:45:fe:61:e3:d4:
                    b7:96:48:cd:52:f1:c4:ee:4a:5a:3b:17:26:36:1f:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6C:E3:BA:59:1D:56:0C:76:68:09:25:6D:79:A8:13:F6:A3:C7:20
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36342e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:99:5e:df:a9:61:be:f8:c8:e8:93:af:0d:68:8b:89:4f:bb:
         ac:61:ab:ec:4a:9c:9f:fc:ca:19:e3:3b:52:99:5a:3d:2a:7c:
         80:be:e2:a4:08:e3:7d:b8:20:e9:56:b3:2c:96:89:1d:4c:88:
         4e:e2:4e:4a:76:c7:c7:79:a3:75:ee:31:d6:41:97:93:f3:49:
         da:c9:80:2e:37:4d:3a:25:52:03:0c:fc:c9:5c:73:9c:7d:08:
         53:0b:a8:01:98:e9:22:6c:99:98:d9:08:5d:dc:9d:99:88:ac:
         d4:5d:62:c4:d8:57:e2:8b:cf:88:3f:29:ba:24:7f:fd:af:f4:
         39:6c:f9:58:38:24:d0:fc:3e:b8:9d:53:17:d5:66:35:4b:70:
         3e:7c:73:42:4b:ac:2f:18:ef:26:64:ad:e7:e0:b1:80:e8:fe:
         7e:92:32:f8:c9:f5:f3:9e:2a:e4:2f:2c:c6:3f:4c:9d:d9:81:
         0f:59:ea:65:6e:fa:8a:e2:8c:38:39:d7:be:33:12:da:1c:13:
         eb:de:09:93:65:74:bf:04:92:a8:35:a1:26:f4:09:bf:2d:eb:
         66:0e:0c:f9:f2:11:61:b9:03:aa:e9:26:0d:1f:a6:06:41:20:
         fc:4c:24:e9:06:4e:0b:8f:5e:48:5d:ad:99:08:f4:19:ef:79:
         6c:d1:ff:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org