Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e203136363239.roa
File:                     3230302e39302e3230382e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          RV/JwKfjnu3ASIvMhX/iIBkWE46Hj3P+WvcJrs/wZEc=
Subject key identifier:   A0:20:88:CC:6B:36:85:C8:4C:38:F6:53:56:B3:23:DD:93:05:FA:F7
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       5E29D4BB613AA184E76D491912B7AD99E219A538
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:21 +0000
ROA not before:           Tue 05 Mar 2024 17:47:21 +0000
ROA not after:            Tue 04 Mar 2025 17:52:21 +0000
asID:                     16629
IP address blocks:        200.90.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:29:d4:bb:61:3a:a1:84:e7:6d:49:19:12:b7:ad:99:e2:19:a5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:21 2024 GMT
            Not After : Mar  4 17:52:21 2025 GMT
        Subject: CN=A02088CC6B3685C84C38F65356B323DD9305FAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:96:0b:16:ba:ad:ff:15:f5:28:17:f6:f3:
                    11:8d:7a:a5:e5:8e:f2:59:6e:4d:b6:eb:3c:22:06:
                    30:66:18:86:91:3c:cd:90:7c:e1:fd:2a:c6:07:dc:
                    90:1a:f4:9c:4c:b6:9d:7d:3a:9b:82:a9:a6:70:72:
                    48:3d:e2:dd:b7:be:1a:82:41:f6:f2:55:3d:f4:d3:
                    f8:f6:99:77:46:e1:59:22:4d:c3:d2:ba:e6:30:3e:
                    a7:d3:8a:d6:55:fd:ce:10:ff:68:f3:2d:e0:45:3d:
                    bc:65:e5:e6:cb:c8:28:17:2e:6d:ee:fc:88:c2:4c:
                    68:05:dc:98:87:64:9a:b8:89:7a:bc:43:fa:63:61:
                    df:88:da:2c:e1:56:69:ae:34:2c:14:14:cb:6a:02:
                    0f:0f:a0:fe:6b:1f:9a:9e:e0:81:05:bd:ff:02:c1:
                    cd:fa:29:ad:0a:3c:d7:d7:81:52:08:8b:2e:6c:bf:
                    ab:59:23:51:10:ed:c8:f9:47:67:7d:91:3c:e9:6b:
                    72:cf:63:0e:2f:97:82:3e:15:81:83:cb:dc:e2:df:
                    24:ea:c7:7b:69:dc:20:c8:56:b6:4a:a5:b6:80:e7:
                    ef:82:bd:02:0c:47:b4:e9:0c:75:30:d0:19:2d:67:
                    e8:5f:42:0b:d5:03:aa:3a:7e:04:a4:de:01:30:45:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:20:88:CC:6B:36:85:C8:4C:38:F6:53:56:B3:23:DD:93:05:FA:F7
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:a2:97:ac:9b:59:c7:74:6c:69:70:05:ab:28:02:12:50:fb:
         17:1e:d6:29:8d:df:f0:67:f2:f3:85:d3:d3:55:3f:06:db:79:
         41:15:b9:14:63:f2:27:fd:6c:fa:83:17:16:c1:ac:aa:aa:a9:
         ff:99:e9:52:c0:71:b3:8d:d5:51:42:b9:60:c6:11:db:44:da:
         29:6c:36:2a:42:5d:8f:9e:21:88:10:c4:4c:9d:2b:24:87:86:
         e7:85:5b:b8:bf:17:f9:cd:53:be:a1:fc:b3:39:11:53:58:16:
         47:5c:43:9c:fa:3c:80:3a:fc:2d:02:94:36:12:50:25:2b:29:
         b8:dd:60:ad:dc:3f:d2:c5:8d:ee:71:ea:bb:f6:dc:a7:ef:d3:
         67:58:3e:24:c4:c3:8a:3b:46:ed:75:36:76:6b:3d:6d:91:0f:
         b7:62:ab:02:c6:3b:16:72:d2:7f:39:28:d1:a0:3c:7d:33:7f:
         94:55:e7:43:74:09:b2:e5:b0:e4:d2:b7:5e:0f:f3:14:a2:89:
         c0:5c:11:4e:14:f2:ea:a7:e4:d5:cd:d8:a9:de:8a:74:a5:c2:
         86:6b:11:ca:3d:e0:b3:bd:63:d0:61:f7:00:03:ec:c6:6e:cb:
         71:de:62:04:b7:f0:ee:72:09:81:fe:af:05:db:a6:b8:59:92:
         da:80:69:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org