Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3230302e39332e3234382e302f32312d3234203d3e203237393032.roa
File:                     3230302e39332e3234382e302f32312d3234203d3e203237393032.roa (raw, json)
Hash identifier:          nrISGVVb6FTdNP0so2vKbp/85Eh+AcZPYkQQ35ODsak=
Subject key identifier:   9E:54:57:0E:A7:28:0F:96:5E:17:5E:4F:E7:61:F7:B0:7A:BD:99:D1
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       165F2024BB1EBA8131E7C7DECFC588EFDE5F4700
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3230302e39332e3234382e302f32312d3234203d3e203237393032.roa
Signing time:             Tue 05 Mar 2024 17:57:01 +0000
ROA not before:           Tue 05 Mar 2024 17:52:01 +0000
ROA not after:            Tue 04 Mar 2025 17:57:01 +0000
asID:                     27902
IP address blocks:        200.93.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5f:20:24:bb:1e:ba:81:31:e7:c7:de:cf:c5:88:ef:de:5f:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Mar  5 17:52:01 2024 GMT
            Not After : Mar  4 17:57:01 2025 GMT
        Subject: CN=9E54570EA7280F965E175E4FE761F7B07ABD99D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:8e:51:40:cd:a9:5f:60:3c:01:f5:e5:9b:
                    a2:c0:2e:ab:78:2d:58:5e:57:8c:b5:f2:e2:d3:94:
                    ec:e7:d2:c8:45:00:fe:86:94:ef:28:f0:53:75:4e:
                    97:15:59:29:9f:b5:6d:e1:aa:24:1a:45:c3:f0:58:
                    12:85:eb:c4:78:48:d4:de:71:d1:58:09:10:88:85:
                    91:15:2b:b6:03:4d:4b:4f:36:6c:42:c1:08:88:50:
                    b3:3a:22:37:e7:c9:7a:74:3f:c3:b0:6d:8d:1f:d6:
                    52:1a:a1:f0:68:4c:d7:24:82:9c:bc:5d:84:8e:2b:
                    11:8b:74:25:4e:26:d9:42:2a:df:ef:ab:65:1a:59:
                    74:54:7b:24:80:d2:c2:05:12:40:8e:bb:a1:c9:4b:
                    ad:97:ca:63:d8:f0:1e:22:3e:f0:26:ca:a2:5b:04:
                    51:76:8e:0b:9b:9b:ed:c7:14:62:8c:79:04:88:0b:
                    f6:c5:6c:cb:6f:dc:aa:c5:b4:20:0f:bd:ea:b4:05:
                    f6:b3:9e:c7:aa:ad:0e:15:e0:fa:a2:c6:90:fa:1f:
                    81:8c:70:bf:4c:5b:6b:6f:16:c5:67:e3:1a:ae:d3:
                    f3:a8:e4:70:7b:0f:23:b8:7a:f7:70:96:85:69:86:
                    da:b3:fc:17:14:f8:f3:8d:30:37:36:1b:ca:f0:5d:
                    b0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:54:57:0E:A7:28:0F:96:5E:17:5E:4F:E7:61:F7:B0:7A:BD:99:D1
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3230302e39332e3234382e302f32312d3234203d3e203237393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:e2:de:35:a1:cf:71:f4:ff:96:02:d5:ff:e7:55:91:12:
         4b:dd:22:62:52:dd:d8:2f:4b:0d:37:b9:42:cc:1d:79:45:5b:
         27:78:d3:9e:9e:5c:9a:55:08:28:ab:4c:8f:e6:34:2f:1c:e5:
         8a:0f:9c:8c:14:00:25:75:cb:3e:58:56:64:e3:93:2b:69:72:
         4d:d3:05:dd:1e:de:36:99:e3:a5:7a:b2:66:84:62:ba:2d:f1:
         78:22:5e:cc:e2:e4:27:a0:04:f7:63:58:0b:8d:de:32:5a:01:
         fc:3f:67:8c:c7:0d:ad:d8:ac:57:8f:13:f2:38:b5:4a:c0:e4:
         1d:51:f2:a9:ad:56:70:b6:a2:f6:78:a0:c4:a0:dc:04:36:bf:
         3c:f0:02:93:d7:87:ed:69:2d:8a:c5:ac:4b:b3:72:42:1c:41:
         9c:31:f5:ab:59:e6:3e:47:47:e7:4f:6c:32:8e:5c:5c:01:d1:
         bb:df:3d:2f:ba:78:a9:4a:78:7a:36:78:d5:45:4f:c0:d0:b6:
         53:a9:46:be:a8:ab:b9:ec:a2:eb:6d:7a:d4:c6:d3:7a:48:17:
         db:4c:4b:72:3a:a2:5f:65:98:51:e8:3e:68:af:45:68:ac:7b:
         f6:a3:d3:e0:56:96:cb:59:29:89:3f:09:e7:2e:b0:b3:19:58:
         92:fc:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:00 2024 by rpki-client on console-fra.rpki-client.org