Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f31392d3139203d3e203133393939.roa
File:                     3230302e39352e3232342e302f31392d3139203d3e203133393939.roa (raw, json)
Hash identifier:          qGYl4TLwACot8kM4L10kmpkMbg54sHyYvT2uDU0ywmc=
Subject key identifier:   9C:AB:5E:BF:F4:2C:B7:EC:1F:33:89:47:FA:96:DB:6E:D9:A7:A4:10
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       758BBA103254A52D1DDE277959E5E1F06D8C9134
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f31392d3139203d3e203133393939.roa
Signing time:             Tue 22 Oct 2024 10:40:00 +0000
ROA not before:           Tue 22 Oct 2024 10:35:00 +0000
ROA not after:            Tue 21 Oct 2025 10:40:00 +0000
asID:                     13999
IP address blocks:        200.95.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8b:ba:10:32:54:a5:2d:1d:de:27:79:59:e5:e1:f0:6d:8c:91:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Oct 22 10:35:00 2024 GMT
            Not After : Oct 21 10:40:00 2025 GMT
        Subject: CN=9CAB5EBFF42CB7EC1F338947FA96DB6ED9A7A410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:06:24:eb:cb:d4:6f:69:5f:13:7b:27:bb:53:
                    9f:e8:63:e1:c5:b6:67:c3:6d:d0:87:40:bc:bb:8f:
                    b0:32:7d:d2:34:45:e4:f4:0f:e9:1c:f9:d0:b4:7b:
                    90:ae:ce:91:f3:38:86:38:55:c9:3e:cd:06:82:84:
                    92:43:be:29:d5:c9:58:13:61:58:30:30:6f:e7:a0:
                    ba:3c:90:92:9f:f9:69:ec:63:3e:01:82:d8:bf:89:
                    89:56:88:5a:72:62:19:2a:95:a6:6e:94:1b:4d:63:
                    85:8f:53:bd:99:18:0a:6c:aa:bc:ba:20:42:b1:e0:
                    80:2f:3e:aa:f9:b5:7a:a7:a6:05:01:fd:26:47:5c:
                    75:27:fa:29:8a:d6:45:ae:08:01:23:77:7d:c1:7a:
                    1e:3b:33:a1:2c:35:19:89:b3:90:d5:84:8f:93:16:
                    40:b0:48:e1:3c:86:f3:57:cf:72:47:b7:92:38:6d:
                    9c:b3:fe:d3:a7:e1:df:c1:31:57:a5:fb:53:c0:17:
                    9b:2e:e1:d4:dd:f7:6b:79:94:f6:4b:8f:05:09:ab:
                    83:c0:5e:3f:d0:07:e6:07:a9:82:c6:7e:93:ad:15:
                    9b:0f:ab:b2:ec:be:fa:af:72:b4:a8:b4:c7:40:83:
                    f8:93:fd:1a:bd:4e:29:3e:e2:cd:e8:dc:e0:c6:5f:
                    26:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AB:5E:BF:F4:2C:B7:EC:1F:33:89:47:FA:96:DB:6E:D9:A7:A4:10
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f31392d3139203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:81:a8:20:67:05:a8:ad:8e:9f:4a:6e:ed:da:ba:6e:66:86:
         b9:c0:dd:1b:6f:e4:6c:28:03:04:51:1d:6c:5a:e6:f1:d9:66:
         fb:88:9f:5f:7e:48:72:c9:96:1b:f3:06:c7:cd:09:8f:b9:76:
         a0:66:d0:75:c7:74:b2:2c:4c:b7:18:38:96:6f:96:78:a0:09:
         de:34:8a:a5:7b:ad:0e:ba:31:11:47:ee:13:95:ba:6e:6f:64:
         89:8e:87:b4:5d:55:bc:25:3e:24:dc:5a:62:e7:25:c4:d4:53:
         ef:6b:37:b5:48:6b:68:17:cf:ea:33:02:ba:ef:61:88:ab:d6:
         d7:c9:b2:53:e6:95:e9:0f:70:df:c9:ba:0c:cc:88:72:b4:23:
         49:6e:e6:d3:4f:69:56:a8:68:6e:b9:aa:99:ad:84:63:ad:2b:
         82:dc:4c:0e:29:d8:c4:66:24:84:4d:d2:9c:f5:10:81:9c:03:
         7d:4d:cc:a8:88:55:95:6a:e4:b6:89:fb:6e:af:bd:b3:e9:e9:
         0d:53:e0:59:fe:7f:14:03:57:48:df:19:09:c4:d8:89:c7:80:
         90:e1:45:b7:65:2c:a7:3d:8f:b2:4d:7c:87:45:89:c0:c7:a0:
         1e:1e:b3:9e:05:3a:0e:f4:b0:67:de:08:95:3f:a4:2d:ec:3a:
         7b:3b:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org