Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e32332e302f32342d3234203d3e20323632323136.roa
File:                     3230302e38302e32332e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          GuN+kGUMHUSpNwZrXfOHYmioGSWjyKVTxxTKpzTIafI=
Subject key identifier:   72:8A:E3:21:3B:30:28:61:F1:CE:ED:14:55:1A:4F:5F:23:76:2D:C5
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       49D18A90A659C539BA122A2B7ECE088BA79471A3
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e32332e302f32342d3234203d3e20323632323136.roa
Signing time:             Tue 05 Mar 2024 17:59:14 +0000
ROA not before:           Tue 05 Mar 2024 17:54:14 +0000
ROA not after:            Tue 04 Mar 2025 17:59:14 +0000
asID:                     262216
IP address blocks:        200.80.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d1:8a:90:a6:59:c5:39:ba:12:2a:2b:7e:ce:08:8b:a7:94:71:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:14 2024 GMT
            Not After : Mar  4 17:59:14 2025 GMT
        Subject: CN=728AE3213B302861F1CEED14551A4F5F23762DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:ec:3b:ef:ef:6c:f4:d2:46:e3:7a:ad:27:
                    8f:a6:07:48:3b:ad:e9:7d:ed:e4:e5:ab:01:25:d9:
                    5f:ec:8c:d5:4d:83:69:d6:b5:bf:a3:5d:e0:cb:91:
                    a2:62:06:9a:24:eb:7c:78:a4:4f:34:10:85:69:a9:
                    41:ff:f1:1a:06:3b:45:6a:9f:8e:ee:20:f2:1e:98:
                    d9:df:e8:ec:c6:96:29:d4:9e:30:18:95:70:6e:e0:
                    02:92:1b:3e:a6:c6:46:6f:d5:96:e2:da:4a:db:18:
                    39:e9:48:24:78:b8:70:34:37:8e:e3:9a:a1:6d:0d:
                    c5:bf:4e:68:66:68:89:5e:c1:91:0d:47:f6:e2:c1:
                    7c:66:cb:b1:89:9b:30:2e:dc:38:dd:7d:e3:47:eb:
                    b1:dc:3a:7a:5a:12:91:f1:a4:21:f7:87:30:3e:55:
                    65:48:c8:55:b1:59:10:97:c6:b9:f7:8f:1f:7f:52:
                    a2:c5:7c:b3:aa:90:78:f5:db:f7:ec:e5:59:89:c0:
                    01:01:c2:c7:01:c3:1a:4b:7a:c3:67:36:f6:c6:34:
                    dd:61:1e:7c:84:49:bf:3d:07:5f:23:a4:82:51:cf:
                    7b:7e:82:eb:a6:22:81:cc:30:e5:cb:aa:cb:d3:be:
                    8a:38:c8:0d:3f:d8:04:41:0f:3c:92:38:b5:b2:60:
                    6c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:E3:21:3B:30:28:61:F1:CE:ED:14:55:1A:4F:5F:23:76:2D:C5
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e32332e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:f2:e7:e2:58:79:a2:cd:24:f7:25:36:3b:84:2e:dc:fe:
         8e:6e:3a:59:94:7a:a5:d5:43:53:ab:4f:24:ed:dd:e0:f3:21:
         70:46:34:84:41:a2:89:09:1f:d0:eb:f1:fa:75:01:c8:3a:28:
         da:8e:b6:87:7e:6b:67:5a:c2:52:56:e6:91:83:bd:94:7f:b3:
         3f:e3:56:26:b9:58:db:08:b9:e8:57:9e:85:e2:37:55:a7:f8:
         a3:37:40:49:c4:8d:f0:e4:15:c2:b0:27:92:8d:7f:51:6b:d6:
         9a:d7:3d:5d:7c:76:43:ec:f7:f7:4b:50:d3:ba:6f:4e:25:14:
         e4:7e:69:b1:0f:7f:5f:ce:92:a9:b2:d0:35:03:e7:32:be:5f:
         46:99:04:6c:e2:4b:84:2a:72:4c:e5:0d:16:1f:eb:53:0c:4f:
         13:28:04:b3:0b:d4:29:26:bc:2d:b6:a9:21:32:b5:25:68:6c:
         89:d7:21:c5:79:75:b8:d1:89:a3:f8:83:08:4f:2c:85:62:02:
         a4:fe:6d:bb:08:a6:1e:42:c2:b1:3e:0b:1f:3f:e9:da:1b:18:
         93:02:e1:b1:38:2d:14:b5:0e:ca:3d:09:1a:f1:24:be:d1:62:
         87:f5:09:18:ed:98:18:c7:e0:b8:86:d5:90:63:9b:d2:5f:31:
         ff:b2:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:39:58 2024 by rpki-client on console-ams.rpki-client.org