Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e302e302f31382d3234203d3e203138373437.roa
File:                     3230302e38302e302e302f31382d3234203d3e203138373437.roa (raw, json)
Hash identifier:          fwW2NIeTAuL2ZTG4OEoxwbPsweAYVATUCwhXbscW24M=
Subject key identifier:   4E:D1:A8:8E:D5:0B:25:A2:21:8C:95:64:6B:6F:AD:08:49:40:38:D4
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       5FD4D31900C6A4CB21427C9C9252C557E8BB5E18
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e302e302f31382d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:12 +0000
ROA not before:           Tue 05 Mar 2024 17:54:12 +0000
ROA not after:            Tue 04 Mar 2025 17:59:12 +0000
asID:                     18747
IP address blocks:        200.80.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d4:d3:19:00:c6:a4:cb:21:42:7c:9c:92:52:c5:57:e8:bb:5e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:12 2024 GMT
            Not After : Mar  4 17:59:12 2025 GMT
        Subject: CN=4ED1A88ED50B25A2218C95646B6FAD08494038D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:2a:35:59:b3:57:ee:8f:21:4d:ff:b3:a5:
                    06:a0:10:86:37:32:ab:6b:e1:04:37:62:f2:ab:18:
                    cb:67:9f:a5:c4:be:d6:0c:66:05:6c:f6:87:1e:2c:
                    23:b4:60:be:00:bf:d4:a8:b3:d4:8a:65:e8:31:da:
                    d0:65:e5:66:23:52:f3:b7:ba:ae:5e:1d:ac:62:d5:
                    91:92:9e:cc:a1:21:03:71:0f:fc:d7:2d:3e:a0:c4:
                    f9:7f:c9:63:67:bd:8d:8e:ee:a9:ce:aa:70:0b:8b:
                    ed:25:88:52:b9:e7:53:79:95:a8:c6:27:a4:97:b6:
                    88:fd:d9:70:0e:9a:8a:8f:a9:14:c5:d5:ba:4e:8d:
                    6f:8e:1d:e0:9b:f1:5c:fa:32:f1:c9:2d:f3:00:7a:
                    74:8b:64:0f:7a:d4:e3:28:43:68:6f:32:4b:58:81:
                    fb:31:1f:ee:98:09:5a:5f:4d:8a:95:ff:08:ae:02:
                    0f:b1:b8:6f:55:02:67:d3:b5:f4:72:26:08:ed:4a:
                    8e:38:db:42:a0:8b:f1:15:59:1d:e4:89:20:41:5a:
                    be:83:19:63:e4:f3:99:02:c4:99:44:58:5a:f5:42:
                    32:0e:77:03:9c:40:99:aa:59:16:41:12:0c:08:d8:
                    15:9e:a0:b6:94:fd:cd:b8:27:8e:6f:e5:44:75:18:
                    c5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D1:A8:8E:D5:0B:25:A2:21:8C:95:64:6B:6F:AD:08:49:40:38:D4
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e302e302f31382d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:85:76:4c:71:c5:67:65:5f:5e:50:a1:90:57:6a:66:9b:
         a6:06:5d:46:57:a2:93:a9:ac:e3:38:9f:45:b5:bc:a5:e5:0b:
         d7:e1:3f:2a:59:21:89:33:c4:f4:f3:b2:e2:1a:0e:e6:5a:b2:
         1d:52:af:d2:c6:e1:41:79:3e:29:66:22:10:bb:89:4c:9a:fd:
         5c:54:55:20:11:47:3c:8c:61:f5:b0:ab:41:46:43:24:28:ed:
         33:d0:6f:18:4f:91:bb:51:cf:a7:d3:97:10:af:cf:0d:36:ef:
         3a:b8:0b:ab:d8:1d:e5:e6:5b:c2:75:ef:93:7e:44:dc:0c:5e:
         fd:82:49:c9:41:6b:72:d6:91:cc:28:ef:a1:1a:cc:1f:f0:5b:
         22:bf:b0:c7:3a:7e:6d:cc:bb:35:87:68:9b:ba:db:5d:c5:ef:
         e7:56:0f:c3:ae:f0:6b:2d:3a:4a:0a:30:a1:58:2a:51:d9:cd:
         a9:3b:0a:07:bf:e1:4e:a7:b7:5c:0e:eb:26:37:5f:7d:e3:35:
         f6:a5:52:4a:70:60:65:24:a9:af:75:f6:90:ff:0e:e9:5b:33:
         76:1d:49:22:17:98:a8:0c:30:5f:27:b5:26:81:5a:2c:17:83:
         f0:3a:e0:43:a7:cd:31:eb:62:63:8f:7a:ad:03:5d:3f:e3:86:
         db:d3:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org