Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/3230302e3130362e3138342e302f32322d3234203d3e20323731373739.roa
File:                     3230302e3130362e3138342e302f32322d3234203d3e20323731373739.roa (raw, json)
Hash identifier:          bJwXHxutLfLR7cXQsCfTDtoyatpvV+hUSVaxTygL6Ho=
Subject key identifier:   F5:03:47:FE:E7:E6:EC:BF:36:4D:DE:40:AA:E5:2E:DE:BE:AB:62:7A
Certificate issuer:       /CN=6947D5FD9ADEAB385611F86AE68248A0E982D6D5
Certificate serial:       77D9CAB7AD62E97F014687BD22B113AA35244AF9
Authority key identifier: 69:47:D5:FD:9A:DE:AB:38:56:11:F8:6A:E6:82:48:A0:E9:82:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/3230302e3130362e3138342e302f32322d3234203d3e20323731373739.roa
Signing time:             Tue 05 Mar 2024 17:43:39 +0000
ROA not before:           Tue 05 Mar 2024 17:38:39 +0000
ROA not after:            Tue 04 Mar 2025 17:43:39 +0000
asID:                     271779
IP address blocks:        200.106.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d9:ca:b7:ad:62:e9:7f:01:46:87:bd:22:b1:13:aa:35:24:4a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6947D5FD9ADEAB385611F86AE68248A0E982D6D5
        Validity
            Not Before: Mar  5 17:38:39 2024 GMT
            Not After : Mar  4 17:43:39 2025 GMT
        Subject: CN=F50347FEE7E6ECBF364DDE40AAE52EDEBEAB627A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:6f:a7:9f:27:fa:31:53:8a:86:98:27:e2:
                    ca:c0:bf:8d:a2:a9:14:fb:93:3f:28:fb:8a:f7:ca:
                    cf:7f:84:7d:c2:2e:b1:04:13:44:7d:61:c5:bf:43:
                    6a:4c:0a:74:58:59:c2:48:dd:7e:5b:97:00:9d:94:
                    8b:4b:6a:87:00:87:3b:fe:38:7b:a2:9f:2a:d2:82:
                    17:f4:a7:03:f0:f6:f3:6e:91:44:11:da:bc:7e:00:
                    74:f9:a6:84:8e:92:58:65:19:4b:29:a2:9b:31:88:
                    f1:7a:e9:7b:2d:a9:e3:79:31:33:91:55:40:93:e0:
                    2b:b0:5d:62:51:32:be:76:dc:e9:f4:42:82:2b:b0:
                    d8:f8:6a:1f:77:08:de:a4:f4:1a:d0:8e:96:02:b7:
                    03:27:03:18:26:24:d8:e5:8f:9b:24:9f:e4:e1:d0:
                    9c:6c:b7:e3:19:0c:cd:91:e1:f0:87:00:b0:47:10:
                    d8:e7:08:2f:37:79:16:f4:ff:9d:9a:67:ff:fd:34:
                    6d:d0:6b:dd:72:b0:d5:6a:99:18:85:65:c8:31:d6:
                    ed:a8:11:a9:62:b8:af:e4:3a:05:1d:c0:84:49:4b:
                    3f:77:4f:c9:cd:b9:81:4f:33:81:78:c4:f3:1f:9a:
                    6f:65:ee:69:33:86:95:d1:60:c2:5d:03:30:f4:73:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:03:47:FE:E7:E6:EC:BF:36:4D:DE:40:AA:E5:2E:DE:BE:AB:62:7A
            X509v3 Authority Key Identifier:
                keyid:69:47:D5:FD:9A:DE:AB:38:56:11:F8:6A:E6:82:48:A0:E9:82:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/3230302e3130362e3138342e302f32322d3234203d3e20323731373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:a7:33:4b:e3:ac:f1:61:d6:46:bd:85:b1:15:3c:02:b1:e1:
         59:d1:a7:a2:83:3f:73:b6:84:15:36:ec:6f:f1:00:9c:59:ea:
         85:7e:c1:ca:e9:46:29:8c:3f:ba:2b:5c:b2:09:90:28:af:18:
         35:a1:d9:5b:c7:71:8a:63:8b:0b:ae:00:91:90:fd:75:c4:31:
         86:af:0a:98:78:83:3e:ff:fc:4e:ad:c2:54:f1:c1:0c:ef:2c:
         3e:e4:22:45:57:62:9d:76:70:1f:97:29:f5:58:ca:2a:bd:63:
         25:85:d1:59:28:33:17:01:67:9a:01:8a:19:3f:4e:35:da:a2:
         1f:4c:1e:64:a7:dd:b8:c9:03:5b:d5:da:03:b8:f3:93:a7:82:
         4a:74:c3:ed:ec:57:ca:15:72:d0:cc:d9:7d:ad:90:82:ab:a5:
         c3:e2:d9:d9:12:35:46:9f:1d:03:ac:04:66:2e:b1:5d:6b:80:
         6e:68:5d:7b:98:8b:7f:d6:52:2b:e5:e5:a1:58:4a:f0:4d:48:
         ff:1d:f8:41:dc:87:6e:39:47:32:d0:3b:29:aa:25:db:4d:a9:
         8f:ee:80:ac:d6:8c:16:d0:0b:c5:77:b7:39:34:79:04:60:e9:
         68:66:50:22:c7:ef:1e:42:24:fe:a3:27:45:75:6e:e9:29:9b:
         c7:cc:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 23:06:01 2024 by rpki-client on console-fra.rpki-client.org