Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e203237373335.roa
File:                     3230302e37332e36372e302f32342d3234203d3e203237373335.roa (raw, json)
Hash identifier:          cKYVvuUaeVKioxftiKIE+y4hgyCE6g71ix5WSoasm4I=
Subject key identifier:   37:1F:F8:47:1B:C3:9C:AC:58:0F:48:BD:EB:DB:0E:21:1C:53:24:2C
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       3A9E9DE29DD8FBDAE626CDEC5A3BF9A6927EDFED
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e203237373335.roa
Signing time:             Tue 05 Mar 2024 17:59:17 +0000
ROA not before:           Tue 05 Mar 2024 17:54:17 +0000
ROA not after:            Tue 04 Mar 2025 17:59:17 +0000
asID:                     27735
IP address blocks:        200.73.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9e:9d:e2:9d:d8:fb:da:e6:26:cd:ec:5a:3b:f9:a6:92:7e:df:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:17 2024 GMT
            Not After : Mar  4 17:59:17 2025 GMT
        Subject: CN=371FF8471BC39CAC580F48BDEBDB0E211C53242C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:b6:ea:84:6c:7e:f7:82:e6:34:f5:4b:77:
                    59:a9:0e:c5:f4:a0:96:80:2c:65:ea:95:03:7d:b4:
                    bb:b2:a0:7f:81:b8:96:c8:20:14:c6:44:b5:8b:56:
                    ab:5b:39:6e:c2:fa:a6:11:57:27:32:fa:73:ec:85:
                    01:18:ac:7f:56:58:ff:8e:cf:8a:3b:fb:7b:13:0c:
                    71:73:10:c4:41:16:26:82:a0:c2:db:ba:35:3c:2c:
                    32:f2:af:55:cc:5f:81:c3:f3:25:cd:e5:bc:dc:3e:
                    46:64:22:a3:71:4f:4b:04:46:0c:d3:f6:5d:37:14:
                    4f:f4:a5:85:fe:af:26:03:cc:c0:21:b8:c0:85:d0:
                    1a:29:63:14:5c:97:53:73:6e:9f:c2:09:b5:8b:b1:
                    30:12:8a:f2:74:14:01:1f:9b:86:60:6e:fc:8c:9a:
                    d7:16:2f:d1:56:2f:55:20:eb:d6:a8:ef:c8:d4:ef:
                    87:94:3d:65:b8:ec:ec:38:69:35:57:fa:d9:17:24:
                    a6:9d:1a:ff:58:85:2a:fb:06:e7:50:bd:3c:1a:d2:
                    09:e1:ab:58:ea:3e:14:4b:8f:5c:66:47:ba:4f:fa:
                    5e:73:5e:b4:6f:ac:02:c2:34:54:5a:bb:eb:1e:54:
                    9e:2c:ef:19:7c:6b:f8:a1:f9:8a:8f:60:4a:50:cc:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1F:F8:47:1B:C3:9C:AC:58:0F:48:BD:EB:DB:0E:21:1C:53:24:2C
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e203237373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:8e:ef:c1:75:df:f1:b2:85:f7:b5:1c:84:9a:3a:7a:d8:3c:
         ae:9b:7f:e3:c4:e8:09:03:8a:7b:c7:fe:30:34:5e:34:89:f2:
         05:68:66:31:10:80:39:cd:d8:71:21:ed:e3:48:68:eb:2d:af:
         d3:27:93:bd:a2:66:cc:5c:0d:94:f9:41:a6:98:39:ae:f7:62:
         b1:46:6c:6f:09:66:ce:88:14:a5:b0:26:bc:19:c1:c3:64:e7:
         48:54:43:ef:f2:ad:be:98:24:c0:f0:8f:71:fa:19:79:35:a0:
         fa:15:1a:c5:cd:9e:80:f7:c0:bb:72:b6:85:67:1e:11:e0:4e:
         56:8c:b0:b3:b3:90:eb:d8:d0:7f:65:cc:fe:0a:b6:42:94:6b:
         39:f7:7f:ef:f4:22:fe:80:3c:1b:c8:5c:2c:24:1b:1c:f2:36:
         1c:ee:18:7b:ea:df:58:22:f6:dd:94:a7:9b:4d:c5:a8:cb:85:
         56:87:f3:51:23:12:fd:77:2d:50:c7:c2:b2:a7:cb:be:36:99:
         ef:e9:ca:cc:f3:47:c6:b5:04:7e:f7:f2:b6:8b:70:5b:f5:b8:
         be:ec:41:ad:5d:5c:c9:22:e2:a1:ac:39:71:5c:0c:23:b2:63:
         b7:a9:b5:51:9f:ce:94:f5:72:8a:f1:8b:0a:76:40:83:e3:96:
         d2:88:97:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org