Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3234372e302f32342d3234203d3e203133393939.roa
File:                     3230302e39352e3234372e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          1x8y9LHrXD7Hsu7KYm1+ETLYkNn69P3Z6E4XPNqN3W8=
Subject key identifier:   25:8D:01:CB:D6:01:C3:22:5D:B6:A7:18:FC:BE:F2:5D:E9:68:B2:F5
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       022910B5E7B49F92A1E2B4C54D6EFB9310FF655C
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3234372e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 13 Aug 2024 16:40:05 +0000
ROA not before:           Tue 13 Aug 2024 16:35:05 +0000
ROA not after:            Tue 12 Aug 2025 16:40:05 +0000
asID:                     13999
IP address blocks:        200.95.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:29:10:b5:e7:b4:9f:92:a1:e2:b4:c5:4d:6e:fb:93:10:ff:65:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Aug 13 16:35:05 2024 GMT
            Not After : Aug 12 16:40:05 2025 GMT
        Subject: CN=258D01CBD601C3225DB6A718FCBEF25DE968B2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:f1:2f:b0:d1:a4:10:17:42:02:c8:cf:97:
                    0f:90:74:6f:31:39:5e:eb:53:85:1f:69:26:2e:88:
                    34:bc:04:36:ef:78:7e:dd:e0:7d:41:0c:13:d9:0a:
                    87:41:70:97:2d:70:fe:9f:40:e1:34:ad:32:bf:36:
                    60:34:c4:3b:ef:5a:b5:e8:85:3e:3e:55:1e:d8:83:
                    0e:e4:7c:4a:4a:7a:09:ee:00:e9:4e:70:14:4c:2b:
                    6a:94:33:f9:55:70:4c:47:17:f7:0d:ea:9e:c5:31:
                    91:24:4e:59:77:d3:6f:8e:6c:74:96:40:fa:f7:5b:
                    07:76:15:50:45:ad:35:04:1e:4d:ab:83:28:9c:6f:
                    42:0b:c8:31:67:ac:f8:46:7d:5a:bd:1a:73:ef:2d:
                    43:7a:8b:b7:52:a0:36:a8:f6:0e:b1:a5:ae:54:57:
                    13:fb:7a:77:bd:d6:d8:cb:77:98:62:b7:7b:df:4b:
                    c7:ec:b9:d2:25:7e:d4:2a:5b:0d:a5:0d:88:a7:16:
                    33:20:47:a0:41:0a:88:fa:0f:f3:a0:fb:70:d2:56:
                    ad:cd:cc:f4:9f:d8:18:6c:ef:66:07:4f:4f:96:53:
                    12:84:27:83:8d:62:8d:eb:5d:3a:c6:4f:5d:43:5f:
                    1f:dc:65:e2:fe:ad:b2:5a:8e:89:e6:6b:e6:37:cb:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8D:01:CB:D6:01:C3:22:5D:B6:A7:18:FC:BE:F2:5D:E9:68:B2:F5
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3234372e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:86:25:9d:6e:a9:42:28:dd:1e:7a:ea:7c:6e:8f:f2:62:77:
         57:d9:de:32:81:b9:40:33:8d:e7:bf:b1:9b:27:01:cb:e3:78:
         35:a6:9d:7c:4c:56:2e:13:39:88:17:f1:ac:0f:3f:65:c6:e7:
         cc:14:62:cc:2a:8e:e9:79:0b:fb:36:d6:4b:c8:48:64:0f:27:
         13:5b:da:e9:5e:3c:e1:10:cf:a1:87:c6:64:7a:62:d3:6b:e0:
         8d:09:2a:58:95:b1:d5:e5:b1:07:cb:73:6a:d9:4b:e5:e7:c7:
         bf:7d:a8:3a:45:ca:60:bd:91:cc:8d:a5:ec:d4:8f:df:41:25:
         56:80:99:76:3e:22:0d:8c:23:6e:b7:39:c6:dc:de:4f:7e:2b:
         0b:e7:ed:68:41:f3:03:7e:04:6b:aa:c4:2f:0d:de:58:5f:42:
         7e:59:98:72:98:34:0b:4b:7f:c0:53:b0:37:be:a3:37:29:17:
         d5:c8:22:9d:19:80:fa:ae:fc:61:a7:99:b4:aa:93:15:95:33:
         5c:17:ca:6a:1a:e1:d6:ce:bc:8a:74:96:d0:8d:0b:9e:93:8d:
         cd:fa:fd:c8:68:f4:c8:94:bd:dd:55:39:cf:b0:47:66:62:e2:
         a4:a9:be:98:ed:9f:aa:5e:46:fa:f3:49:2b:66:f0:31:7c:20:
         ef:bc:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:48 2024 by rpki-client on console-fra.rpki-client.org