Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e382e302f32342d3234203d3e20323632323136.roa
File:                     3230302e38302e382e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          65dKsAbntSFl1g/0z7UtRdgh4WnTKca3L+u/zUEWUaI=
Subject key identifier:   9E:91:0A:3D:C7:39:A3:04:F2:17:59:A1:E1:B1:59:95:3A:26:B9:CC
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       065EE9EB0C38C0775D3A7EE5E7F1B54D96733A55
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e382e302f32342d3234203d3e20323632323136.roa
Signing time:             Tue 05 Mar 2024 17:59:15 +0000
ROA not before:           Tue 05 Mar 2024 17:54:15 +0000
ROA not after:            Tue 04 Mar 2025 17:59:15 +0000
asID:                     262216
IP address blocks:        200.80.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5e:e9:eb:0c:38:c0:77:5d:3a:7e:e5:e7:f1:b5:4d:96:73:3a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:15 2024 GMT
            Not After : Mar  4 17:59:15 2025 GMT
        Subject: CN=9E910A3DC739A304F21759A1E1B159953A26B9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:4f:fc:e6:2f:00:ef:0e:dc:c3:86:cd:49:
                    84:1d:1a:c6:ad:e5:f9:f9:c3:71:7d:a2:3b:ef:50:
                    94:1d:3f:5b:b4:d0:9b:24:49:09:f3:2b:c3:f5:30:
                    79:af:bc:7a:a0:44:1f:9f:bd:3f:6a:05:3f:29:4e:
                    53:ea:b0:74:fb:8b:c1:0e:9a:5c:46:31:27:21:03:
                    09:7a:9f:82:72:cb:22:b5:f3:be:d4:98:a6:f7:3b:
                    84:20:3f:19:15:6c:8a:2f:c1:a6:03:25:1c:ea:3f:
                    21:c4:ea:0a:6e:a1:dc:a2:87:e0:46:28:38:9d:e0:
                    d3:5f:bb:38:8b:1e:0c:b3:98:e9:d2:0e:6b:89:e3:
                    00:03:7d:fa:ce:71:6a:35:24:64:88:92:77:9f:7d:
                    44:f9:fb:32:75:fd:1f:eb:3a:28:8c:6b:cd:1f:b4:
                    4c:e3:81:5c:32:92:93:74:31:6e:40:4b:18:39:e5:
                    ee:79:f4:9d:49:08:be:c9:7d:de:14:a9:7c:f2:b6:
                    6d:42:b6:50:88:20:d3:55:bb:dc:d8:a4:ce:6f:67:
                    a9:0b:17:30:30:9a:b4:2b:a0:38:4a:cc:a4:ec:89:
                    69:04:75:d4:01:92:8e:b9:b4:fd:30:57:45:67:44:
                    0c:95:ac:b9:86:6d:bc:62:ae:34:86:1e:01:f4:ba:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:91:0A:3D:C7:39:A3:04:F2:17:59:A1:E1:B1:59:95:3A:26:B9:CC
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e382e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:97:33:29:d8:48:3f:8f:d6:b7:f7:94:10:8b:29:eb:7a:93:
         06:9c:e6:34:e4:fd:76:da:6a:87:0f:20:31:6f:36:f0:22:7b:
         ef:76:6e:be:1f:b9:a5:1e:d8:ac:18:ed:dc:df:45:79:65:f3:
         5a:92:4b:23:b3:81:03:68:5a:c3:a5:41:82:d7:5d:44:42:e9:
         fc:69:50:20:f5:70:b8:2f:81:5b:52:aa:cc:49:80:0c:5f:b5:
         53:aa:08:85:96:83:95:fc:af:60:26:63:e4:44:a6:d8:65:c9:
         b0:04:11:da:f5:fb:b4:2e:df:93:56:fe:bc:8b:69:09:56:96:
         5f:a1:a5:27:dd:aa:55:ed:0e:cc:6f:4c:ad:cd:cf:49:88:6b:
         4e:4e:6d:d1:28:a9:84:a6:a9:73:24:ba:6c:8b:d3:95:73:62:
         71:29:dd:57:ad:2e:68:c6:fd:da:7b:e5:34:c2:ff:40:77:9b:
         de:95:f6:d9:8e:66:00:43:aa:65:cb:c3:cd:78:b9:1e:2d:b2:
         59:c4:62:f9:fe:90:57:f3:15:51:5c:68:17:fa:e5:27:b2:b8:
         9d:ee:ad:09:5b:4c:bc:96:25:56:39:4a:3e:43:24:ff:6e:9f:
         0c:9c:3e:34:02:43:57:d0:a5:25:e9:ff:3d:fa:3d:44:6f:e3:
         eb:6d:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:04:18 2024 by rpki-client on console-fra.rpki-client.org