Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234342e302f32342d3234203d3e20323633313734.roa
File:                     3230302e32392e3234342e302f32342d3234203d3e20323633313734.roa (raw, json)
Hash identifier:          ymC6sLgAPM6xlSO4QHsUEyt1U03+whugfedFNlDJ8kE=
Subject key identifier:   36:44:A8:98:BA:5F:F0:A8:E2:DB:03:88:13:02:EE:05:43:03:1A:C7
Certificate issuer:       /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial:       5AF390F5A8CF119BC2B04C308F747576CA800F47
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234342e302f32342d3234203d3e20323633313734.roa
Signing time:             Tue 05 Mar 2024 17:55:46 +0000
ROA not before:           Tue 05 Mar 2024 17:50:46 +0000
ROA not after:            Tue 04 Mar 2025 17:55:46 +0000
asID:                     263174
IP address blocks:        200.29.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f3:90:f5:a8:cf:11:9b:c2:b0:4c:30:8f:74:75:76:ca:80:0f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
        Validity
            Not Before: Mar  5 17:50:46 2024 GMT
            Not After : Mar  4 17:55:46 2025 GMT
        Subject: CN=3644A898BA5FF0A8E2DB03881302EE0543031AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:f1:df:f7:15:35:dd:7a:da:f5:47:d6:2b:
                    c6:55:46:a9:9a:f9:a6:2e:a6:a1:03:1c:0c:2a:a0:
                    79:1e:02:e1:98:61:5d:a8:ea:83:c6:3b:f2:f3:92:
                    aa:41:b0:2c:74:fd:b2:a0:00:10:a1:26:a1:c6:19:
                    e2:df:79:1c:72:cd:88:5f:4b:49:08:a9:0a:48:c9:
                    99:88:d1:6e:88:55:9e:69:8b:df:35:95:dd:f7:3b:
                    3c:9e:24:0c:c5:7b:8b:c2:a0:41:9a:50:e0:f2:74:
                    68:7f:e6:6b:54:9c:f2:e0:cc:12:e5:fd:29:b0:b7:
                    23:40:1b:b7:ff:60:6e:60:da:6e:1e:d6:1e:bf:1b:
                    61:a8:20:a0:c1:4a:b9:b5:48:7e:8f:de:84:39:93:
                    f3:08:9f:4c:40:aa:5c:2c:10:0a:b8:1f:d6:20:72:
                    1e:b4:e3:db:c1:b6:8e:32:94:dc:ea:ae:07:7e:0e:
                    97:ce:1a:6a:bd:a9:20:54:d4:a2:a3:2b:57:c8:1a:
                    2b:2d:9d:7b:20:4b:01:3b:af:a6:ec:09:35:a3:8d:
                    d5:71:f5:bb:d2:f6:63:8e:36:23:e0:be:ce:5c:2a:
                    30:45:f0:ff:a5:f1:05:1b:7c:63:66:03:0b:88:b1:
                    97:e5:e5:dc:4f:5d:11:fb:4a:97:f4:ef:ef:d1:e5:
                    60:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:44:A8:98:BA:5F:F0:A8:E2:DB:03:88:13:02:EE:05:43:03:1A:C7
            X509v3 Authority Key Identifier:
                keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234342e302f32342d3234203d3e20323633313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:1a:0e:3f:1d:76:2d:15:34:57:79:be:51:01:bd:ad:eb:72:
         14:26:d3:04:3b:e6:7c:7b:a3:43:05:04:94:68:79:07:e1:cb:
         57:ab:ff:8e:2f:97:b6:44:0d:77:c1:0c:cf:ab:e1:f6:d4:3f:
         17:4f:01:6a:db:3a:b9:38:7a:57:6e:b1:ba:e4:81:5e:0e:b4:
         10:58:dd:9b:dc:24:27:39:c8:24:98:6b:5e:ef:77:06:96:39:
         a4:01:2d:33:cb:8d:91:e3:0f:1c:72:68:24:07:f8:2e:4c:9f:
         1f:91:ee:ad:df:13:bc:8d:96:37:de:8f:d9:a9:f2:c0:b4:05:
         6c:1d:6c:be:db:fd:73:75:f6:21:87:cf:f8:ca:61:35:43:02:
         4f:99:61:17:b5:90:57:9b:fc:77:df:66:d0:35:73:08:e1:fc:
         24:b7:af:56:cc:85:d5:f0:08:7a:72:c1:90:a9:fb:fb:81:bf:
         80:4f:fd:cb:30:60:33:cb:5b:52:81:65:bc:8a:0d:16:0f:a7:
         7b:f0:28:5a:3a:76:01:67:db:f7:1f:16:b1:bc:01:39:d0:d1:
         6f:13:60:ea:8b:8d:a9:4e:aa:fe:c9:da:09:f3:4e:8c:1e:34:
         cb:34:4e:81:68:92:a0:4c:c5:c2:0f:7f:ce:df:61:0e:6a:34:
         3c:1f:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:46:00 2024 by rpki-client on console-fra.rpki-client.org