Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e20323039323432.roa
File:                     3230302e37332e36372e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          kMNijMI9JE6kOmTBakZBqCvPBJ1ZBDPPa6ixWzVDbIY=
Subject key identifier:   3E:C4:4B:61:40:A0:EB:A9:C1:FC:25:8B:ED:6B:3B:AF:E6:78:26:DE
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       20B7FC682983FFDC3F60A15BC67749647EE372E2
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e20323039323432.roa
Signing time:             Wed 23 Oct 2024 19:10:00 +0000
ROA not before:           Wed 23 Oct 2024 19:05:00 +0000
ROA not after:            Wed 22 Oct 2025 19:10:00 +0000
asID:                     209242
IP address blocks:        200.73.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b7:fc:68:29:83:ff:dc:3f:60:a1:5b:c6:77:49:64:7e:e3:72:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Oct 23 19:05:00 2024 GMT
            Not After : Oct 22 19:10:00 2025 GMT
        Subject: CN=3EC44B6140A0EBA9C1FC258BED6B3BAFE67826DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:03:5a:25:00:2b:dc:3c:cc:24:4e:68:1f:
                    1e:1e:4a:5f:2d:f9:c5:d2:62:69:e1:08:0e:9c:27:
                    dc:68:34:e8:59:99:9a:ff:e8:30:36:b4:ae:e7:10:
                    01:b4:de:7c:56:b6:55:85:87:2e:01:18:2a:47:50:
                    f9:2b:b2:47:6b:02:a3:06:24:bf:74:56:99:e1:4c:
                    67:01:2a:a1:3a:71:a8:56:7d:ca:67:91:f5:b2:46:
                    a0:1a:a8:d6:3f:2c:69:57:af:14:73:13:0e:74:c8:
                    44:d8:52:1a:49:5d:08:d0:46:6c:8a:3c:a4:5b:32:
                    bc:1f:ee:94:05:02:7c:76:f3:56:7a:35:ab:20:13:
                    cd:c3:b0:a8:14:dd:3e:01:6d:61:6e:6f:77:73:6f:
                    fc:46:22:40:c0:ff:75:0a:d6:cf:82:f2:21:30:d1:
                    21:4e:24:6d:df:80:e3:ea:c8:e3:b9:40:bd:4e:22:
                    53:60:51:5b:f4:0e:36:53:5b:a6:e7:18:ae:f2:64:
                    ec:ff:9f:f1:04:96:b4:d8:70:fb:24:fe:06:68:e1:
                    76:ab:8f:f1:10:93:58:7b:85:f4:80:7b:78:b0:f4:
                    91:eb:0d:0b:cc:a5:25:e7:c1:d9:32:94:fa:8f:26:
                    01:bc:12:f5:61:de:c9:4e:af:6a:8f:80:b2:77:a4:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:4B:61:40:A0:EB:A9:C1:FC:25:8B:ED:6B:3B:AF:E6:78:26:DE
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:38:6f:77:f1:61:b7:de:0c:9f:a7:24:63:0a:32:63:a1:16:
         f5:c6:21:f2:33:e6:7e:88:28:ad:0c:5f:a9:c3:1c:75:46:b7:
         74:c6:40:86:5a:67:f7:d1:6f:78:47:69:0a:32:be:ea:2f:81:
         27:11:09:82:05:28:6d:76:26:64:14:55:ab:9b:d0:12:25:64:
         62:31:b9:7b:ab:40:1a:ef:b4:4a:ed:29:ce:c0:03:2b:69:fc:
         5e:3b:b8:6f:8e:23:3d:0b:4f:42:95:9c:01:87:71:c1:03:fa:
         38:b1:19:57:a1:65:64:ac:ab:cf:2b:df:99:fc:03:51:a5:12:
         17:74:6c:d1:33:8f:06:5e:56:03:5d:f3:18:53:fe:62:50:5c:
         24:93:e4:c3:8b:43:c0:67:c8:2b:79:01:d9:be:48:11:37:24:
         94:03:f3:3f:5d:f9:ae:ca:82:27:1a:28:d3:78:ec:cc:b2:bc:
         d3:fe:a0:5c:ab:98:d6:1b:d3:0c:2a:49:d2:53:ea:07:dc:42:
         db:83:ab:0f:07:7e:3b:c9:5e:da:9f:5b:7e:b3:8d:21:ab:8d:
         b0:ed:86:01:03:ee:b2:d9:11:1f:df:83:8f:5a:c9:aa:18:63:
         d4:96:64:97:59:dc:36:01:3f:15:20:c2:c3:41:79:b4:80:7c:
         92:31:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org