Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134352e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3134352e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          aBTfcN7bT+LfdDQzh9s1KUBOnrUBEspILt6esZXpoDg=
Subject key identifier:   69:58:FD:C9:A1:CE:CD:3D:30:CF:3C:FF:7F:99:16:47:70:CB:30:31
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       74BDEFDB9DC0CF2D5854BDB1056EDC9660CAC840
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134352e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 13 Aug 2024 16:40:04 +0000
ROA not before:           Tue 13 Aug 2024 16:35:04 +0000
ROA not after:            Tue 12 Aug 2025 16:40:04 +0000
asID:                     13999
IP address blocks:        200.77.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bd:ef:db:9d:c0:cf:2d:58:54:bd:b1:05:6e:dc:96:60:ca:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Aug 13 16:35:04 2024 GMT
            Not After : Aug 12 16:40:04 2025 GMT
        Subject: CN=6958FDC9A1CECD3D30CF3CFF7F99164770CB3031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:2d:a1:a4:bd:3b:ef:f2:e8:fa:9e:6f:35:
                    9e:fb:50:f6:34:79:aa:92:76:c8:61:7f:13:72:6f:
                    20:ad:67:90:ba:96:3a:8e:7d:4a:c7:14:b3:4e:68:
                    64:49:5e:16:6b:e2:d3:53:ff:e2:70:4e:de:b7:61:
                    9e:4e:26:b2:b7:f6:fc:9d:0a:c6:73:7b:4b:3c:89:
                    6e:9d:d8:dd:c6:e5:b9:60:b4:9f:bc:f7:8e:91:8c:
                    36:51:3d:10:b5:01:68:89:b2:f9:40:cc:84:b8:13:
                    75:48:28:44:54:51:bc:73:c8:61:e0:31:13:26:6a:
                    c7:8e:d3:56:7b:8d:62:72:b1:98:6a:60:a4:aa:84:
                    ff:b3:d1:d5:12:88:74:e6:43:26:d4:4c:19:c8:68:
                    74:2e:eb:47:70:72:12:23:23:a4:37:7d:8b:9e:85:
                    b3:81:2e:8a:01:19:a7:4a:f5:0a:10:81:5b:04:73:
                    5b:ce:ef:0f:f9:71:86:42:8e:ea:f9:a5:da:ea:b6:
                    76:9a:59:38:d3:71:34:2a:88:1a:7b:c6:81:bb:d6:
                    83:c6:e0:61:07:67:2d:45:b1:f0:66:fd:2e:de:9e:
                    f4:ff:67:2c:bd:6c:0f:06:62:77:8e:b6:54:7d:43:
                    b2:2b:bd:a9:23:b9:d4:d9:5d:63:44:02:69:33:24:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:58:FD:C9:A1:CE:CD:3D:30:CF:3C:FF:7F:99:16:47:70:CB:30:31
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134352e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:d0:b2:e4:c2:6f:cd:d7:14:39:e2:3f:dc:82:d8:ad:7e:30:
         61:e2:50:59:f4:7f:78:d4:0b:cd:fe:e9:5c:34:46:b9:46:6e:
         62:ad:c8:b2:0d:ee:5b:a9:02:a5:36:41:7b:93:16:86:88:e6:
         58:9e:a4:06:63:3a:51:25:ff:f8:28:3b:43:fc:d4:74:5b:93:
         5b:05:33:e3:1d:65:03:51:92:10:4b:d6:59:ba:ff:69:1c:ca:
         65:6a:38:68:67:16:7d:3f:e2:3e:b2:ac:af:fb:ca:9e:17:de:
         97:c2:2f:58:e0:0f:24:96:f9:5d:e9:96:9e:82:b1:36:b4:2a:
         04:e8:40:5e:0a:3d:a5:97:f1:ff:d9:ca:30:29:fd:75:d6:59:
         9b:1e:b0:2c:da:ef:06:98:46:a6:e6:a2:83:c0:00:9c:18:d2:
         65:28:65:c4:d9:ac:27:9e:98:d7:80:59:06:18:d4:29:13:95:
         92:a6:90:d9:d0:16:c3:2d:2f:e0:c2:30:3d:b1:22:c7:99:01:
         cf:b9:23:14:3c:9d:8b:45:d3:13:bb:2c:4e:c6:b4:7d:ec:0d:
         ea:b8:79:d1:77:bd:d9:2f:5b:89:7c:e9:db:70:71:57:e9:35:
         e1:3c:5e:e8:7d:07:f0:1b:ee:d8:99:be:0a:58:4b:cf:fe:3d:
         39:4c:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org