Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e34342e302f32342d3234203d3e203532343638.roa
File:                     3230302e38302e34342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Ts/EGUOrQBsn8ZoTqnPcOCS9zScUpRisoTrvh4hYqb4=
Subject key identifier:   1B:8D:57:4B:C6:32:CE:46:D8:08:7F:45:E5:0F:82:0D:CE:F0:FF:CB
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       73E31ABB7D8B93661D47F5E20A680998CBE44496
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e34342e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:59:10 +0000
ROA not before:           Tue 05 Mar 2024 17:54:10 +0000
ROA not after:            Tue 04 Mar 2025 17:59:10 +0000
asID:                     52468
IP address blocks:        200.80.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e3:1a:bb:7d:8b:93:66:1d:47:f5:e2:0a:68:09:98:cb:e4:44:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:10 2024 GMT
            Not After : Mar  4 17:59:10 2025 GMT
        Subject: CN=1B8D574BC632CE46D8087F45E50F820DCEF0FFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:57:f1:43:61:60:0b:13:7e:8d:f9:f8:e5:
                    f1:73:ae:5a:9a:a2:7b:9d:c3:a1:2e:e2:f7:c2:ff:
                    25:da:9d:6a:83:19:74:0e:62:a1:53:77:fd:69:c2:
                    c2:52:85:c4:33:29:35:69:c5:2f:ff:47:bc:89:a8:
                    51:46:7d:d2:d9:ce:38:ff:1f:bc:dc:b4:ce:53:24:
                    c6:10:b9:7f:24:13:ca:74:d6:56:61:1e:52:a6:d0:
                    4a:58:ed:fb:d9:7b:42:2a:94:ac:1c:3e:a5:a6:31:
                    b4:a3:d0:a4:0b:fa:13:29:e2:cd:33:f3:19:4d:c9:
                    4b:3c:0e:f8:3f:ed:5c:93:35:d7:2f:f8:99:c5:77:
                    41:fb:4e:3f:79:97:4f:f9:c5:e5:01:f1:b4:1e:7f:
                    0e:0b:60:91:74:7f:71:b7:95:b3:a7:c2:53:a7:7f:
                    c6:93:17:27:33:0c:1b:26:70:0e:42:4a:e4:9f:83:
                    58:7e:af:6b:e0:90:ba:12:3d:b1:c1:77:c5:0b:af:
                    73:5b:02:1d:d0:b8:d0:40:29:dc:41:d9:42:9e:16:
                    28:09:5d:2e:63:ce:4e:18:55:97:fc:aa:a7:26:14:
                    62:5c:75:ac:60:3a:e2:73:36:20:c2:8d:04:f5:f7:
                    42:b5:ea:8d:7e:11:60:eb:cf:24:53:89:1b:41:81:
                    4c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8D:57:4B:C6:32:CE:46:D8:08:7F:45:E5:0F:82:0D:CE:F0:FF:CB
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e34342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:c2:fb:18:01:a7:aa:b8:1f:85:d1:d3:c6:fb:f5:60:ae:7c:
         16:3b:c2:45:19:a5:f0:25:6a:41:53:1c:55:27:e1:49:d2:73:
         74:df:75:77:c2:b9:b7:3c:46:65:44:cf:2c:e0:79:fc:db:08:
         df:c4:35:fd:1b:dc:fe:0f:2d:f7:b5:b6:33:6c:1f:f7:f1:1a:
         f0:9e:27:a0:56:66:2a:3f:dd:dc:d5:ef:cc:20:2d:09:fd:af:
         9a:a0:d4:76:6c:bc:7a:d7:61:16:4a:4d:f1:df:81:f0:ae:30:
         26:c8:ff:7e:bf:4e:ef:e2:f1:1b:8d:5a:43:90:b8:42:f2:90:
         7a:55:bb:65:13:b1:0b:f6:22:fa:46:f1:3e:52:b1:f8:5e:ba:
         b0:13:12:a3:3a:59:56:3c:a6:43:72:4e:e6:fb:b1:72:9e:6f:
         85:cc:3f:e0:1e:4c:84:a2:db:49:c8:b3:4d:8e:61:d7:5d:4b:
         3f:7f:84:7a:92:da:7d:06:c6:ea:2f:bc:1d:4d:cb:7d:bb:8d:
         5d:5c:91:87:d2:48:d5:da:7f:77:e1:99:54:4d:08:d0:67:b3:
         03:34:32:d9:6c:eb:13:71:04:9c:65:93:fe:f4:0b:ee:e4:f0:
         a1:c5:3b:33:01:7c:3b:02:f7:c7:8b:bf:4b:38:e9:a2:1b:2e:
         b6:97:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:18 2024 by rpki-client on console-fra.rpki-client.org