Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3234342e302f32332d3234203d3e203133393939.roa
File:                     3230302e39352e3234342e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          oa46YvEffW2KwpeFRQyf+ia1YA+WppG/lKuuQdnHAhU=
Subject key identifier:   A3:B0:22:93:3F:6D:3C:6E:64:A8:94:EA:BC:2D:55:05:A6:B4:21:47
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       03FDBD4EB25FAC397FE3B542AD622F42873E28D2
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3234342e302f32332d3234203d3e203133393939.roa
Signing time:             Tue 13 Aug 2024 16:40:02 +0000
ROA not before:           Tue 13 Aug 2024 16:35:02 +0000
ROA not after:            Tue 12 Aug 2025 16:40:02 +0000
asID:                     13999
IP address blocks:        200.95.244.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fd:bd:4e:b2:5f:ac:39:7f:e3:b5:42:ad:62:2f:42:87:3e:28:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Aug 13 16:35:02 2024 GMT
            Not After : Aug 12 16:40:02 2025 GMT
        Subject: CN=A3B022933F6D3C6E64A894EABC2D5505A6B42147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:6f:be:7c:9b:fe:97:59:9b:ce:a3:54:00:
                    24:69:80:00:a3:b3:ed:04:c1:b8:2f:29:44:16:33:
                    1a:1c:2d:db:99:fb:cd:ae:d8:ff:93:a3:ae:67:e2:
                    9f:51:4b:3e:09:c0:84:4b:4d:ca:16:5b:2c:40:7c:
                    42:eb:ba:83:64:38:3e:60:20:3e:48:cc:15:e3:04:
                    9d:8f:56:c0:78:40:25:37:15:4f:13:66:75:10:5b:
                    15:db:88:80:59:a6:4c:ab:a4:9b:f5:41:3d:86:6b:
                    3b:e7:24:dd:e8:28:f3:1d:c3:2a:71:b9:10:4e:f4:
                    d0:48:d4:f3:fd:00:ba:a5:a3:60:7b:82:65:03:bd:
                    ac:62:41:4c:28:ce:00:d2:21:f7:35:dc:70:c5:55:
                    78:29:7f:b4:53:0c:07:9f:79:df:d3:8b:7d:c6:08:
                    f6:bb:35:44:ea:6f:29:90:2e:78:28:75:ad:d8:ed:
                    30:d4:94:e4:7c:06:6e:cc:57:6a:3e:2f:e9:ce:dc:
                    36:af:29:78:22:44:9a:38:3f:5e:a6:16:fe:b5:44:
                    f3:fb:8c:4e:19:1b:5a:45:01:98:2e:0c:91:44:85:
                    6c:2a:20:fe:b1:d4:a4:48:80:38:29:3c:fd:2d:cf:
                    dd:47:fa:55:52:bd:f4:ac:1c:0e:6d:a2:5f:75:70:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B0:22:93:3F:6D:3C:6E:64:A8:94:EA:BC:2D:55:05:A6:B4:21:47
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3234342e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:11:c3:87:3c:3a:b7:f8:c0:0b:e0:2c:4c:e5:bf:a6:8f:a6:
         0b:4d:8a:65:fc:7e:5f:2f:7f:52:19:f8:62:23:03:05:b4:fd:
         48:41:2d:14:dc:d0:8f:98:d4:5a:59:44:03:35:72:d3:bd:d3:
         e7:81:54:2d:45:0b:48:d5:5d:83:1b:32:79:26:ca:e2:2b:f8:
         53:93:ce:a3:a6:30:ee:69:97:79:c9:24:72:61:23:26:6e:8a:
         6d:ee:0e:0b:44:be:0e:a7:51:f5:de:a5:52:7d:a4:36:30:0f:
         59:09:02:f3:0f:58:af:c7:4e:54:5d:f6:fa:da:c6:c0:5b:7a:
         da:68:bd:ee:56:72:8c:71:87:e9:51:52:b8:3a:d1:2f:8b:88:
         1e:93:27:de:78:80:d9:22:2a:90:60:8a:6e:c2:bf:44:fd:9d:
         ab:c1:6e:9d:2a:46:e3:f4:cd:92:ce:5b:a9:88:31:39:c9:3e:
         ce:61:33:99:fc:2b:98:0c:53:cd:b7:47:a9:ff:87:bb:67:e8:
         e6:2e:38:a4:81:92:15:c5:8b:d7:84:64:76:7f:a2:25:8e:d0:
         d8:e7:b0:30:39:39:14:5f:cd:ba:1d:d5:3d:c6:46:78:49:ae:
         df:df:78:0b:66:db:0a:ff:0e:ff:b3:02:70:a0:1a:df:92:c9:
         c4:c8:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:48 2024 by rpki-client on console-fra.rpki-client.org