Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233382e302f32342d3234203d3e203133393939.roa
File:                     3230302e39352e3233382e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          K8bbIUqyaYvyjCo5QfFmN+7LYRfivaqsGDnBaEXP8bE=
Subject key identifier:   03:A4:66:89:63:D0:91:82:49:98:63:93:37:27:A8:85:2D:A0:23:FB
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       15EC4F55D0057D4DFB78AFB0995CDF29F8E7B1B0
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233382e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 13 Aug 2024 16:40:06 +0000
ROA not before:           Tue 13 Aug 2024 16:35:06 +0000
ROA not after:            Tue 12 Aug 2025 16:40:06 +0000
asID:                     13999
IP address blocks:        200.95.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:4f:55:d0:05:7d:4d:fb:78:af:b0:99:5c:df:29:f8:e7:b1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Aug 13 16:35:06 2024 GMT
            Not After : Aug 12 16:40:06 2025 GMT
        Subject: CN=03A4668963D09182499863933727A8852DA023FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:c1:b9:36:7c:76:17:e6:74:fb:5b:7d:32:
                    fc:08:f2:69:e2:9c:81:9f:e9:52:6d:38:cb:c2:a6:
                    15:2d:70:42:1e:61:12:c2:ec:07:5d:77:e0:e6:1e:
                    56:2f:e4:8e:4b:1e:4c:47:57:97:46:54:27:b4:94:
                    52:12:b0:3d:a0:9f:45:61:d6:69:91:c0:09:0d:04:
                    96:61:58:9f:e6:70:bb:39:a5:99:38:ee:b5:9d:48:
                    ef:83:76:a6:62:29:93:9c:79:6e:30:7c:9f:1e:b9:
                    fa:87:18:0a:e2:54:3c:21:ae:c6:93:15:0d:21:5f:
                    2b:c3:34:f3:c8:5a:e9:ff:a9:99:c4:10:e0:37:b7:
                    f0:90:17:b7:21:0b:ef:b7:14:1f:1c:2b:c5:ae:15:
                    6b:e0:d5:b1:34:98:db:9a:12:67:f9:95:0b:39:41:
                    e3:69:53:53:5d:04:51:ee:3f:2b:40:7c:47:ba:df:
                    40:f5:a8:4b:b0:4a:fb:32:a3:4e:3e:bf:cc:54:8a:
                    2d:a4:9c:6d:9d:73:3a:a1:4b:d2:34:2b:b8:85:ab:
                    2a:27:a9:9f:bf:84:2a:65:58:d2:45:23:8d:2c:f3:
                    4b:ca:79:78:87:4d:e4:c1:b8:0f:64:1c:dd:51:59:
                    e0:91:14:b1:e1:ff:40:f2:44:d1:eb:be:a2:4d:ce:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A4:66:89:63:D0:91:82:49:98:63:93:37:27:A8:85:2D:A0:23:FB
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233382e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:2d:a0:af:e9:ca:1f:67:fa:dc:20:c6:ff:09:ce:5d:36:fb:
         f7:d0:d1:4d:99:ef:58:ef:e5:dc:e2:b3:27:32:4c:e5:51:19:
         4e:a4:df:3f:88:28:b8:46:53:a4:f5:e0:94:51:90:6c:8f:3f:
         85:fe:c3:ed:65:64:88:51:53:f3:80:1e:58:8e:99:e6:2b:64:
         ac:20:51:7a:fa:21:60:56:da:1b:b9:83:46:a7:08:25:be:13:
         e2:1f:2b:ee:a6:fe:51:bb:cf:5e:10:26:e7:4c:2a:60:a9:43:
         3f:44:42:03:1e:dc:da:7a:76:97:61:5e:12:4e:57:ec:10:b7:
         78:63:ab:3c:1e:6f:83:64:36:28:12:a4:9a:53:dc:85:19:47:
         83:8f:9e:08:a7:4c:ca:a5:47:3f:8d:5e:82:68:93:c9:46:87:
         4b:66:95:49:78:2a:af:21:ae:92:63:c9:15:0f:7e:5e:2d:65:
         8f:95:b1:4c:c1:71:3b:22:2a:09:3d:69:d5:af:c3:8f:7b:65:
         a0:30:2b:19:b1:0d:01:2b:73:db:3b:13:a0:05:71:04:f3:ac:
         e3:1d:7d:4c:1f:2c:fe:6a:26:a2:be:d9:f7:4a:50:9a:65:07:
         5d:1c:e5:7d:80:fe:19:d1:20:07:11:0e:a7:9f:98:e1:34:f3:
         f0:69:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org