Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234312e302f32342d3234203d3e20323633313734.roa
File:                     3230302e32392e3234312e302f32342d3234203d3e20323633313734.roa (raw, json)
Hash identifier:          VNv1En/CmmtMiNoJbnVObp0eQb+pgHUb0LzJo2n86Fs=
Subject key identifier:   50:28:D1:7A:64:6B:DF:0D:03:92:22:34:59:77:0A:03:5E:4E:3F:A2
Certificate issuer:       /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial:       5AF174D6EB600EB999F4B0E27B0A67C16D0B2C30
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234312e302f32342d3234203d3e20323633313734.roa
Signing time:             Tue 05 Mar 2024 17:55:46 +0000
ROA not before:           Tue 05 Mar 2024 17:50:46 +0000
ROA not after:            Tue 04 Mar 2025 17:55:46 +0000
asID:                     263174
IP address blocks:        200.29.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f1:74:d6:eb:60:0e:b9:99:f4:b0:e2:7b:0a:67:c1:6d:0b:2c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
        Validity
            Not Before: Mar  5 17:50:46 2024 GMT
            Not After : Mar  4 17:55:46 2025 GMT
        Subject: CN=5028D17A646BDF0D0392223459770A035E4E3FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:7f:a7:6d:07:15:68:b5:dc:b2:71:bf:0a:
                    08:1a:13:5a:41:94:9c:56:45:21:93:57:50:93:dc:
                    fb:c5:3c:7a:9d:89:64:88:96:1b:af:c0:8d:97:6c:
                    72:11:69:c3:e9:f3:ce:5d:a3:04:38:ba:4c:10:05:
                    0e:72:ba:06:d5:5b:53:6c:e5:3a:06:a7:77:19:b8:
                    68:fc:14:5e:a7:12:ff:2a:ba:9f:cc:7f:d5:01:0d:
                    96:a7:2d:b3:2f:91:61:92:b3:75:b9:fb:37:0e:2c:
                    83:60:ba:1d:53:3f:8e:1a:6a:63:8c:6e:0a:29:26:
                    43:1d:f8:9a:fd:1d:5c:b8:f6:21:5c:ea:d8:c3:30:
                    d2:b8:11:02:d7:53:a2:c1:c3:58:c4:03:18:78:7c:
                    bd:73:08:92:63:3a:d2:a2:78:48:8b:cb:e8:03:31:
                    57:25:47:7e:16:d7:d8:a8:c1:43:44:eb:51:a6:6d:
                    c1:95:c9:61:fd:b5:57:95:0d:eb:46:ae:fd:e4:ab:
                    bb:74:2f:74:05:4e:1e:bb:81:ca:6c:4a:49:fc:a2:
                    02:39:d6:36:a0:af:28:30:2c:d4:8f:43:db:31:8e:
                    16:b2:72:f4:1b:92:75:c6:2f:22:78:75:e9:bc:91:
                    da:65:96:a2:15:e4:39:06:5d:c3:81:9f:5b:f8:9a:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:28:D1:7A:64:6B:DF:0D:03:92:22:34:59:77:0A:03:5E:4E:3F:A2
            X509v3 Authority Key Identifier:
                keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234312e302f32342d3234203d3e20323633313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:81:f0:60:9b:62:ca:9b:b4:32:d8:2d:3f:05:54:4a:38:
         3e:a3:81:bb:c9:ff:21:a9:f3:0c:25:d6:99:a9:8d:63:62:c6:
         e5:ba:07:a6:10:d8:e2:5b:89:c7:e3:31:81:17:2f:f4:53:8b:
         b3:e8:7b:32:f1:52:4b:94:8c:5b:12:93:ad:82:37:ad:ae:5b:
         c1:11:3d:22:db:9f:9b:03:41:93:4e:79:db:1b:2a:d7:b6:0d:
         f2:48:3c:52:af:80:34:09:59:08:93:bb:8c:ff:0f:94:c2:d5:
         ed:42:f7:db:f9:5f:a5:57:95:aa:22:36:d8:69:ec:13:5e:36:
         2d:d1:82:a5:03:ea:ae:7b:0d:0c:87:8d:05:7b:bb:73:a0:80:
         c4:d1:13:24:4b:8a:bb:55:76:f8:6b:ca:70:fc:f2:29:9f:47:
         46:f5:a2:0b:06:2a:e4:1d:4e:5a:ed:b7:86:31:8c:1d:be:aa:
         45:26:e0:d5:a4:d5:e2:4e:14:1a:57:b6:a9:aa:88:aa:b7:77:
         d9:48:6f:81:93:2b:07:1b:7c:8a:07:e1:19:de:60:7f:22:94:
         75:3a:21:91:a2:27:65:dc:30:30:c9:77:55:03:88:a5:d2:ac:
         a5:23:16:ea:23:3d:98:04:35:4b:b2:95:6a:ec:8a:09:70:fa:
         48:ca:d5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org