Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233322e302f32322d3233203d3e203133393939.roa
File:                     3230302e39352e3233322e302f32322d3233203d3e203133393939.roa (raw, json)
Hash identifier:          jN+Dy3dVPx5S2qvoHV7nSsJOJmjDLkPfVE1n1R7/b8I=
Subject key identifier:   51:5A:CA:83:5B:A7:60:53:A7:BC:8C:0C:9C:3F:DF:3B:9A:3A:70:51
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       4C0BF9836AE64C5D90FC977C2B41F430EC97C8B4
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233322e302f32322d3233203d3e203133393939.roa
Signing time:             Tue 13 Aug 2024 16:40:02 +0000
ROA not before:           Tue 13 Aug 2024 16:35:02 +0000
ROA not after:            Tue 12 Aug 2025 16:40:02 +0000
asID:                     13999
IP address blocks:        200.95.232.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0b:f9:83:6a:e6:4c:5d:90:fc:97:7c:2b:41:f4:30:ec:97:c8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Aug 13 16:35:02 2024 GMT
            Not After : Aug 12 16:40:02 2025 GMT
        Subject: CN=515ACA835BA76053A7BC8C0C9C3FDF3B9A3A7051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:9a:57:b0:c8:3a:d1:f9:39:f5:08:47:89:
                    ec:91:0c:d8:f3:81:7f:27:8c:0c:59:f4:5f:88:5a:
                    04:34:cf:bc:e7:4a:76:b0:2a:92:97:2c:4b:57:8f:
                    1b:0d:3f:64:f4:92:b7:df:7e:90:81:d8:42:e4:a9:
                    c9:96:57:ef:96:e3:fe:f1:56:05:f5:b6:c5:d7:15:
                    b5:c7:62:44:48:1e:70:91:09:10:9a:15:e8:27:aa:
                    47:70:2e:ef:36:b2:bc:e4:fa:d9:8c:fb:38:05:0a:
                    bc:45:94:e1:e3:4a:73:09:17:df:b1:65:f9:17:90:
                    79:ea:a3:0e:c2:68:c9:88:34:29:b0:fc:58:0b:bd:
                    61:e6:d9:9d:13:fa:da:00:d9:26:a7:82:20:36:8b:
                    da:bc:e5:42:3e:58:cd:17:de:9a:6c:92:00:15:56:
                    f6:7a:3c:a5:9b:72:43:01:f8:64:ed:37:a2:00:fb:
                    f1:98:50:54:36:83:ec:8d:0b:e2:71:ae:08:90:f2:
                    4f:de:79:49:f3:eb:ce:45:12:a1:d1:8f:30:05:7f:
                    99:fe:6f:18:6b:c3:95:5d:b0:07:01:1b:40:f2:bf:
                    11:7f:80:56:3e:39:0e:42:07:f4:97:93:01:2d:dd:
                    3c:12:6a:cc:8e:b5:d7:84:74:56:ca:26:17:73:b9:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:CA:83:5B:A7:60:53:A7:BC:8C:0C:9C:3F:DF:3B:9A:3A:70:51
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233322e302f32322d3233203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:54:3a:38:1b:7e:95:f0:b0:ce:59:5d:c2:80:3d:27:cb:27:
         ca:66:f4:96:08:6f:ec:11:04:ac:93:ad:ca:84:9e:69:4b:fe:
         98:33:76:ae:91:dd:6d:3e:08:61:80:43:61:15:dd:0f:d6:89:
         28:cd:06:b0:79:41:81:8e:c5:eb:a4:dd:b5:a2:7c:23:e4:d0:
         73:d2:31:38:33:e1:46:54:4f:ad:7d:a2:12:d1:d3:58:45:b8:
         0f:cc:81:b7:2e:15:65:6e:d0:5d:46:a9:17:5e:ef:0b:f0:8e:
         97:25:70:dc:06:22:61:f5:5d:61:a6:2c:f0:5b:1c:ea:8d:55:
         6b:e2:83:d7:6d:b1:61:f8:32:57:d8:39:f4:c7:48:4e:28:30:
         e2:ec:fd:69:04:db:77:78:cd:dd:e9:6d:c3:bd:ef:56:bf:86:
         1c:32:b6:17:d8:68:12:41:9b:7d:8c:07:10:77:3a:e0:08:0e:
         e6:e8:fc:5b:a1:dc:05:be:c2:d4:c3:58:c2:09:c5:ea:0d:b4:
         9d:46:c7:ab:7e:25:76:6a:c7:8b:2a:ad:bb:54:b1:89:d0:97:
         73:a9:cc:ac:1c:a5:6b:75:2b:d2:c1:0a:bd:bf:a2:cb:51:9f:
         5c:b0:d1:50:a3:4c:f2:c6:04:03:f3:84:95:2d:95:0f:89:04:
         c6:e5:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:32 2024 by rpki-client on console-ams.rpki-client.org