Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e37362e302f32342d3234203d3e203138373437.roa
File:                     3230302e37332e37362e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          P8RwmL1niFiZxq/ExVw6lY9Djd1/67EkGxvtGKzUns8=
Subject key identifier:   93:60:2D:C6:03:F4:2D:44:4C:0A:0C:02:DB:67:79:90:35:F5:EE:07
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       08AE2B5B1CD17D3A9A5BA848013BF78424C79A60
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e37362e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:09 +0000
ROA not before:           Tue 05 Mar 2024 17:54:09 +0000
ROA not after:            Tue 04 Mar 2025 17:59:09 +0000
asID:                     18747
IP address blocks:        200.73.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ae:2b:5b:1c:d1:7d:3a:9a:5b:a8:48:01:3b:f7:84:24:c7:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:09 2024 GMT
            Not After : Mar  4 17:59:09 2025 GMT
        Subject: CN=93602DC603F42D444C0A0C02DB67799035F5EE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:f5:08:c0:8a:3b:cb:4e:9c:93:f6:5b:ca:
                    0d:41:c6:f1:b2:cb:a8:1c:ed:bb:73:30:55:a8:b7:
                    c6:04:6f:55:53:e9:e7:6c:7a:d7:f3:4e:3b:7e:33:
                    49:f7:0d:a2:8d:0c:86:59:6b:31:a7:27:36:81:17:
                    ea:70:83:91:43:0c:90:7b:b8:58:f8:b9:7d:02:3c:
                    a8:1b:7d:6f:34:8b:5d:60:7d:87:24:7e:64:88:da:
                    0c:1a:d0:50:c1:71:22:4e:f0:81:5c:fd:1f:6f:ab:
                    31:9b:a8:44:8b:3b:49:76:3d:45:5c:60:b8:78:47:
                    00:88:69:3c:41:76:36:89:8e:5e:15:02:42:d2:87:
                    18:5e:8f:99:0f:68:3d:18:57:54:87:e7:50:fc:91:
                    0e:45:27:99:60:df:40:fb:53:f8:5e:bb:2a:a1:f2:
                    92:f9:0d:4c:b6:58:a6:81:fd:4b:90:d8:18:12:4d:
                    72:f4:a1:10:23:d4:57:07:65:87:7a:48:90:50:55:
                    cf:a4:15:fb:ef:23:77:13:cc:c3:7e:3e:33:23:e7:
                    0c:eb:e9:c0:f5:b8:94:3e:dc:4e:ea:bb:5e:5f:6c:
                    ee:b3:5b:36:67:d0:a4:84:55:34:30:ba:63:f8:46:
                    9a:fc:29:19:5f:e5:4e:7f:b6:57:25:f5:9f:36:0a:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:2D:C6:03:F4:2D:44:4C:0A:0C:02:DB:67:79:90:35:F5:EE:07
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e37362e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:32:53:92:04:14:bd:ae:0c:b1:30:8b:77:43:fc:19:cf:c4:
         b8:b0:05:4c:9c:90:7d:44:13:ab:8b:5e:b8:cd:92:7c:24:7a:
         b4:98:6f:62:fc:37:13:a9:d6:11:2c:fe:17:f3:e1:e7:f5:b6:
         94:41:b4:6c:3e:6e:49:59:98:96:ab:4e:c1:f5:63:cc:4e:d3:
         19:4a:d4:c4:e5:f3:d5:36:f1:8b:a2:12:59:a7:ec:94:ee:72:
         7d:d3:98:10:f4:95:5b:f9:92:80:cf:f7:b9:1d:3d:b6:72:4f:
         31:65:1d:64:a4:42:ea:e4:70:8f:de:e7:e4:e7:10:bf:fa:16:
         d7:94:ac:b9:71:e4:93:62:6d:72:ad:16:09:9b:ca:6d:16:fd:
         53:60:21:0b:fb:2b:43:7e:6b:0d:fe:d1:52:2a:5f:b4:00:86:
         89:d9:6e:05:6a:2d:8f:01:04:63:54:8c:be:bc:d6:13:1c:7f:
         4f:9b:1b:08:5b:57:10:83:59:18:6a:e8:06:e9:89:51:6b:5a:
         09:b0:d1:99:05:3d:59:0e:16:20:7d:c6:44:b5:92:aa:33:94:
         65:36:1d:fb:22:04:ce:81:6b:e3:10:c2:8d:14:eb:f0:83:90:
         46:bc:d4:e3:f2:52:07:bf:37:5c:29:bf:d7:4b:bb:73:9b:09:
         bd:42:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:30 2024 by rpki-client on console-ams.rpki-client.org