Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e392e302f32342d3234203d3e20323632323136.roa
File:                     3230302e38302e392e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          bppU1UIxZVqx68RzT9OezlESPHjoLBvN34MbgcyhuaQ=
Subject key identifier:   0C:DE:25:E4:8E:A2:5A:8B:E6:1E:CE:73:73:41:D4:94:DE:E2:4C:68
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       0FC9715591AC75625F187AC2C1A422085EFFF1D2
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e392e302f32342d3234203d3e20323632323136.roa
Signing time:             Tue 05 Mar 2024 17:59:02 +0000
ROA not before:           Tue 05 Mar 2024 17:54:02 +0000
ROA not after:            Tue 04 Mar 2025 17:59:02 +0000
asID:                     262216
IP address blocks:        200.80.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c9:71:55:91:ac:75:62:5f:18:7a:c2:c1:a4:22:08:5e:ff:f1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:02 2024 GMT
            Not After : Mar  4 17:59:02 2025 GMT
        Subject: CN=0CDE25E48EA25A8BE61ECE737341D494DEE24C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:77:5c:4e:7a:90:11:2a:33:fb:55:1e:4e:
                    fa:e4:77:b9:07:aa:43:f9:23:97:cf:cf:2d:06:43:
                    75:aa:f4:9d:59:1d:0a:60:c7:c8:58:87:04:a1:3f:
                    18:6a:a8:76:9c:6a:b5:10:7f:d5:7c:43:52:a1:64:
                    71:c8:ad:da:3d:0d:99:b4:a0:a1:63:86:77:95:46:
                    6e:7a:ff:b8:b8:bb:06:19:bb:1c:ca:2b:cb:9f:0b:
                    22:ef:3b:7e:33:2e:54:88:d9:65:0c:31:55:2e:76:
                    6a:2a:32:4c:b3:92:bd:8b:6a:ea:71:16:0b:ce:2d:
                    e6:10:80:ee:44:0d:f8:70:46:5d:22:9c:72:8b:5d:
                    da:87:e2:0b:a9:f2:37:05:ac:7e:39:36:44:4b:9b:
                    51:c5:d5:36:9a:18:39:f3:7d:eb:a1:ac:ae:2f:af:
                    cc:02:84:63:c2:e8:89:0e:58:23:f3:8c:54:1e:88:
                    d3:ac:e8:ec:41:14:da:83:a0:f0:73:a3:53:6d:04:
                    b0:e3:ee:1b:89:96:ed:15:ef:ae:da:40:e7:38:8a:
                    e2:8a:68:b2:17:fa:d9:73:23:83:d5:da:c7:3e:11:
                    85:f4:e5:95:d3:ab:26:55:4a:dc:a9:43:db:6e:11:
                    0b:fe:90:79:95:df:9c:fc:2e:50:49:ef:a1:4e:3f:
                    a3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DE:25:E4:8E:A2:5A:8B:E6:1E:CE:73:73:41:D4:94:DE:E2:4C:68
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e392e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:21:11:43:52:e8:da:28:91:84:3e:d4:12:c9:7e:86:0d:
         4b:37:f4:ad:9f:68:e9:22:9b:cb:e2:11:5e:f4:78:d6:fc:08:
         89:c6:86:51:4d:e9:4e:ce:0c:ec:de:34:a8:d7:b6:1d:d6:d6:
         3d:17:d3:02:41:50:d8:53:87:e7:e5:9c:28:aa:c1:d4:ca:b6:
         52:07:45:58:1a:23:bd:14:a4:25:b2:b6:04:16:e8:76:19:a9:
         02:40:90:e6:46:19:26:95:f1:78:21:2c:aa:41:26:4d:a4:a3:
         51:f1:d3:4b:3e:9f:98:59:c3:d4:20:92:a1:d2:ba:94:85:ae:
         73:a1:5f:3c:12:37:a1:cd:05:40:6e:41:bb:e2:8c:48:58:14:
         9c:57:67:91:1d:cf:cc:0f:47:d2:11:a6:ee:98:f2:77:f6:99:
         18:e2:25:2f:1e:22:28:a3:b8:35:df:30:79:6a:b8:d6:4a:00:
         0a:47:53:36:41:8c:6d:d7:71:3a:ba:6f:7d:6c:53:fb:3a:b5:
         e3:b1:aa:fd:01:3a:9d:3d:03:65:11:a8:fe:1b:ba:56:66:61:
         c3:76:74:9d:d7:ac:2b:38:b9:fb:81:1b:2a:e7:d2:06:95:24:
         55:e2:a3:cb:f2:f8:1f:c5:7b:6e:cc:bc:a7:c5:48:6b:16:87:
         24:e7:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:04:18 2024 by rpki-client on console-fra.rpki-client.org