Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203134363138.roa
File:                     3230302e33332e372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          aF3p71qpwtbwr0MsDUknqTgQ+b92hMZGBPoT3NvdorM=
Subject key identifier:   93:0F:B0:C5:78:FD:96:19:9C:B0:A3:95:60:51:F4:2D:6A:98:C7:F0
Certificate issuer:       /CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Certificate serial:       5D85C62C08419011B990E6A56803E84B15CFAC09
Authority key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 05 Mar 2024 18:06:30 +0000
ROA not before:           Tue 05 Mar 2024 18:01:30 +0000
ROA not after:            Tue 04 Mar 2025 18:06:30 +0000
asID:                     14618
IP address blocks:        200.33.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:85:c6:2c:08:41:90:11:b9:90:e6:a5:68:03:e8:4b:15:cf:ac:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
        Validity
            Not Before: Mar  5 18:01:30 2024 GMT
            Not After : Mar  4 18:06:30 2025 GMT
        Subject: CN=930FB0C578FD96199CB0A3956051F42D6A98C7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:31:dd:db:83:2e:10:29:28:e3:2a:7e:93:
                    52:51:3a:f3:8c:a2:a1:0a:7e:aa:1b:13:46:b7:fc:
                    c4:df:42:d9:90:b6:99:d8:64:61:70:f4:31:86:79:
                    71:42:9d:00:7d:48:d1:4c:f3:8a:fd:67:31:e0:c6:
                    9a:b6:a7:b4:14:ba:be:03:d9:c3:90:e5:78:b6:07:
                    c4:e9:53:09:2a:42:d0:64:f8:a1:37:e1:e0:41:59:
                    f4:3b:b9:10:0f:c1:7e:d3:7f:c7:ef:14:97:89:71:
                    15:e9:c5:5d:8c:44:6e:c6:d0:bb:53:ea:3c:59:06:
                    16:23:7d:37:86:28:9a:73:95:ed:77:a8:3b:59:47:
                    00:8a:72:34:84:be:c9:36:eb:b9:b5:23:c4:36:04:
                    2a:e8:41:28:a5:47:15:0d:69:2e:0e:69:3b:ee:a1:
                    16:84:4d:61:41:ee:f4:b6:3a:9a:6e:3c:c2:94:4a:
                    1a:36:87:9b:70:c8:7d:f5:39:d0:46:57:fa:a5:9b:
                    cb:de:13:ba:7e:49:95:5c:87:41:81:67:52:33:06:
                    7f:8e:75:06:2c:78:0b:c2:63:7f:64:10:dc:fa:bc:
                    38:e6:84:86:76:80:65:f2:f7:40:2e:1d:9e:c8:1d:
                    3b:f2:c2:04:04:5d:60:35:10:e1:fa:80:0d:c0:51:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0F:B0:C5:78:FD:96:19:9C:B0:A3:95:60:51:F4:2D:6A:98:C7:F0
            X509v3 Authority Key Identifier:
                keyid:B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:93:64:02:66:ec:a9:66:72:81:36:62:cc:4e:78:23:2c:a0:
         3e:b3:f4:0e:40:44:bf:b8:7e:93:88:07:4c:ce:49:50:27:01:
         0f:33:4b:2a:db:15:7b:2c:58:74:4c:09:5d:44:02:79:c8:8c:
         b1:56:33:6b:0f:41:0a:7b:c7:25:7d:a0:59:cd:a1:04:cf:22:
         46:eb:b2:32:9d:24:12:44:53:66:4c:e5:65:ae:87:f1:26:9b:
         a1:95:4d:4c:79:5f:65:76:66:35:42:08:dc:80:56:11:e7:75:
         f2:cf:73:f4:8e:3d:ff:76:54:26:9f:07:82:7e:f9:3b:e0:70:
         72:6c:12:86:f1:00:5c:70:8a:69:4c:27:9e:e9:1e:c5:30:d9:
         75:3c:cd:56:4b:9c:75:3c:13:13:dc:4e:25:88:da:d2:98:f6:
         25:58:51:46:a0:c2:9b:84:ba:75:e8:2e:83:06:df:8b:2e:5c:
         1e:67:e1:07:12:9a:3c:4f:a8:7a:2a:d9:ef:41:3d:14:9f:d2:
         0d:35:0f:97:a6:35:e1:cf:21:11:b4:6d:0f:ba:1c:8f:45:55:
         c4:f9:21:a2:e9:a0:fa:07:31:c9:96:40:cc:45:c6:29:ed:30:
         e6:c3:9c:bf:87:3a:df:aa:ec:69:ce:a4:af:33:f1:65:90:fc:
         7b:71:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 10:45:30 2024 by rpki-client on console-ams.rpki-client.org