Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e372e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e372e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          0djI1O7PTpDu5c4TxpCqpSHQp7LaeAIPIVF/7enhElk=
Subject key identifier:   2E:01:2E:3D:75:E4:C0:84:05:E5:08:0F:53:CB:BA:EC:EC:7B:F9:09
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       041CF7925B8EE8BCFF18490370F7D020AF2B4B25
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e372e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:09 +0000
ROA not before:           Tue 05 Mar 2024 17:54:09 +0000
ROA not after:            Tue 04 Mar 2025 17:59:09 +0000
asID:                     18747
IP address blocks:        200.73.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1c:f7:92:5b:8e:e8:bc:ff:18:49:03:70:f7:d0:20:af:2b:4b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:09 2024 GMT
            Not After : Mar  4 17:59:09 2025 GMT
        Subject: CN=2E012E3D75E4C08405E5080F53CBBAECEC7BF909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:05:40:e1:4e:cb:ac:3f:a4:e9:75:83:af:
                    ce:2e:bc:05:27:a7:b7:08:61:a2:ef:d5:c3:e1:35:
                    55:78:f2:d3:04:e8:7c:91:4a:c0:c2:ce:cc:1f:95:
                    a9:47:a6:60:f1:be:c6:b7:c5:b1:c4:69:02:5a:7f:
                    b2:81:cd:17:da:9c:16:00:ec:84:8b:74:6d:86:3c:
                    cf:ec:b2:6d:be:14:fe:56:10:9c:57:28:43:8d:a9:
                    0e:29:1e:4b:4f:8e:00:d8:39:2c:08:fe:12:84:2b:
                    cd:01:30:b7:ae:ca:b2:76:c9:9a:7f:15:d6:af:8d:
                    bb:ae:f2:ad:6c:49:c8:92:28:66:e9:9a:2a:42:b7:
                    80:1d:65:63:19:99:ab:fd:b4:0d:b7:0e:0b:36:ac:
                    ae:9e:3c:c6:9b:94:b7:06:38:7d:04:e6:1e:b8:1b:
                    a4:07:be:2d:7a:cd:05:18:0b:c1:6a:f9:41:18:fb:
                    7b:1f:72:da:99:db:ae:fa:35:59:ed:03:75:b0:7f:
                    d5:6e:91:11:8b:b2:45:be:e8:10:25:42:3f:a0:b2:
                    94:f3:64:e8:89:8d:45:ed:70:3c:53:b9:13:bf:cc:
                    90:19:ee:9a:51:81:2f:0a:a8:de:54:ac:50:5d:25:
                    f2:2b:ee:fb:fe:5d:da:31:db:65:6f:cf:94:a3:ce:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:01:2E:3D:75:E4:C0:84:05:E5:08:0F:53:CB:BA:EC:EC:7B:F9:09
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e372e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:d7:29:c7:41:c0:99:9c:0d:43:5e:1d:df:62:6e:2d:46:cf:
         ee:47:45:63:ec:9e:78:83:f3:fa:a1:1a:70:59:9a:2f:e7:d3:
         0a:51:6d:cc:6f:59:ec:04:28:6b:e9:73:a4:c9:1b:f4:e1:9a:
         72:8a:6f:30:ba:36:47:ff:68:2e:57:73:3e:dc:b0:cf:97:29:
         30:86:a4:17:90:7f:41:08:35:2a:73:ec:c5:be:3d:72:7f:38:
         3c:70:e6:7e:42:d8:dd:4c:f6:c5:85:45:5a:33:49:eb:67:d6:
         b7:f5:00:6d:1d:31:54:65:e1:ea:70:96:a3:43:ec:55:80:b5:
         f4:ff:e4:b1:de:08:c0:e9:21:b0:5f:3a:5b:61:28:60:aa:f0:
         ee:0c:da:cb:08:b8:4b:80:7a:92:1f:f6:1b:b9:b4:42:06:57:
         dc:f2:4d:2b:4c:fa:03:37:e0:95:e7:92:59:cd:26:ea:32:8b:
         02:eb:fc:fa:28:7d:dc:30:4f:ea:49:4e:60:85:fe:72:6a:12:
         f6:b3:b4:43:d9:b5:0c:bb:c1:58:9a:40:f5:1f:6d:48:50:dd:
         df:d7:51:bc:c7:f3:9e:78:e1:83:8a:05:d8:54:2a:28:52:d6:
         1f:ed:66:64:96:88:b2:67:8b:10:b6:71:2e:f9:7b:cc:47:31:
         ab:ae:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:30 2024 by rpki-client on console-ams.rpki-client.org