Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e37312e302f32342d3234203d3e2036353037.roa
File:                     3230302e37332e37312e302f32342d3234203d3e2036353037.roa (raw, json)
Hash identifier:          9w/J7iDG/qobDImrF/iWy97MvSSyr/ae2Ha+aRDWEY0=
Subject key identifier:   42:2C:28:73:C0:6A:8F:7A:90:9F:8B:C9:4E:50:C6:31:D0:1D:81:8E
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       4FCDE61D2B36261D3A2661C3E3433723E406CBCC
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e37312e302f32342d3234203d3e2036353037.roa
Signing time:             Tue 05 Mar 2024 17:58:57 +0000
ROA not before:           Tue 05 Mar 2024 17:53:57 +0000
ROA not after:            Tue 04 Mar 2025 17:58:57 +0000
asID:                     6507
IP address blocks:        200.73.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cd:e6:1d:2b:36:26:1d:3a:26:61:c3:e3:43:37:23:e4:06:cb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:53:57 2024 GMT
            Not After : Mar  4 17:58:57 2025 GMT
        Subject: CN=422C2873C06A8F7A909F8BC94E50C631D01D818E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:ba:a9:01:0b:16:bf:58:19:56:ad:d1:0f:
                    8d:2f:1f:ff:53:fa:aa:84:55:ed:c3:c6:21:f2:2f:
                    24:90:55:4f:a6:ce:d4:65:29:46:8e:37:bc:ac:e8:
                    2e:f2:1e:26:9c:1b:0b:07:0f:0f:57:c8:73:70:a8:
                    4f:7d:08:66:e6:ab:6a:3a:bc:ef:b4:f6:ef:4f:a6:
                    ed:0a:ea:00:3c:e4:1e:41:38:24:e4:e6:bd:b6:ac:
                    1c:e2:4c:5c:15:fb:7f:3c:2b:ba:84:c6:b6:59:5c:
                    c2:e5:51:d2:de:0d:e1:a0:28:0d:b4:fa:80:32:51:
                    5d:0f:48:19:d9:cb:72:db:9e:f8:54:f9:d4:16:a1:
                    7b:92:1f:5e:1a:b9:50:5b:63:99:2b:79:21:65:1f:
                    1a:45:07:16:31:9b:63:ab:0a:47:de:9b:ca:e2:8e:
                    85:2a:ce:52:24:8c:df:9a:c1:2f:68:ff:be:8c:7f:
                    59:10:ac:51:34:13:03:16:c7:f6:28:74:f2:17:b0:
                    b9:23:f4:fc:f2:39:49:2f:5e:c8:34:a1:52:fa:a6:
                    b0:1c:36:78:a6:56:10:20:40:d4:6b:91:d4:05:ac:
                    7b:6c:38:5b:61:e7:33:00:d1:19:1a:88:e2:c3:08:
                    66:eb:85:21:1a:7d:59:f1:a6:60:8e:19:15:f6:10:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2C:28:73:C0:6A:8F:7A:90:9F:8B:C9:4E:50:C6:31:D0:1D:81:8E
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e37312e302f32342d3234203d3e2036353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:b5:0e:b2:0a:89:6c:9c:8b:69:7d:a2:52:47:2c:9e:07:
         96:e6:f2:1c:0e:e4:de:cc:fb:d6:fb:81:5f:4a:73:48:9f:d6:
         80:36:10:0b:f1:55:69:ad:be:43:e0:9c:93:7e:0b:0e:1d:d9:
         56:ab:5a:54:0e:32:be:cc:41:4e:c2:11:d4:78:13:45:e5:b9:
         c4:55:1a:e1:bf:a9:38:f0:95:0d:d5:4f:ff:20:ac:f0:50:08:
         28:28:1a:79:9b:61:b4:5e:82:70:33:fb:d8:55:b8:8b:e3:38:
         42:f2:f9:8b:ec:f3:56:59:f0:37:9f:c2:27:09:47:16:09:d1:
         f2:5b:15:8a:88:70:b1:fe:28:54:90:c3:12:b0:46:58:d0:5f:
         cb:9e:dc:aa:01:e1:04:0a:8f:15:a2:92:75:06:e2:69:64:16:
         99:7f:f1:e7:20:7d:57:ab:44:8c:b3:94:42:e3:f9:28:63:f0:
         3d:92:7a:b5:8f:fd:92:ae:c4:ac:e6:04:f4:b1:74:5c:46:28:
         80:df:eb:9e:dd:70:46:43:c5:2c:2d:2b:a8:6f:53:55:f7:66:
         9e:ff:93:c4:7a:4a:bc:de:39:d2:37:2c:e3:db:cb:5d:55:f4:
         4b:2e:57:94:af:be:8b:eb:17:97:2f:7e:66:93:d9:46:3b:4e:
         85:43:e3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org