Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32342d3234203d3e203332303938.roa
File:                     3230302e32332e3136382e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          Gp2iMDat6xDB62wWodlsF64N62bWvPeHe0DmnhFw1lw=
Subject key identifier:   25:51:68:7A:50:4F:D3:E3:1D:13:30:1E:4E:0E:9F:18:F6:81:BB:2E
Certificate issuer:       /CN=DA9CE332EEAB17EF6270B269990D948099DD5049
Certificate serial:       163DD0519E399920C32A8745EB1CA095058F46E9
Authority key identifier: DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 17:43:54 +0000
ROA not before:           Tue 05 Mar 2024 17:38:54 +0000
ROA not after:            Tue 04 Mar 2025 17:43:54 +0000
asID:                     32098
IP address blocks:        200.23.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3d:d0:51:9e:39:99:20:c3:2a:87:45:eb:1c:a0:95:05:8f:46:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9CE332EEAB17EF6270B269990D948099DD5049
        Validity
            Not Before: Mar  5 17:38:54 2024 GMT
            Not After : Mar  4 17:43:54 2025 GMT
        Subject: CN=2551687A504FD3E31D13301E4E0E9F18F681BB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:29:cc:65:81:b3:7f:2c:15:0f:b3:79:92:
                    f0:1f:b1:a6:6d:8c:ea:8f:dc:71:ed:18:3f:2b:cc:
                    c1:67:11:3b:8b:f3:75:90:1d:e7:51:3a:50:15:9a:
                    94:e8:51:37:1f:dd:b9:54:63:02:be:76:b8:35:0c:
                    8d:a1:e7:e1:f2:4d:6a:2c:3c:8b:1c:61:34:5d:50:
                    31:25:53:df:8c:5d:4d:9b:a8:b9:31:4b:1b:79:fc:
                    91:7a:a2:94:fa:b6:a5:7e:f3:05:84:dd:db:9c:f7:
                    fd:e9:db:fd:9b:8d:1e:25:87:ef:9e:b8:87:3d:9b:
                    35:86:cc:15:87:62:24:e4:cb:5f:3f:ab:b2:98:72:
                    43:f6:27:52:e5:5a:4f:aa:e2:82:ce:18:a9:ea:e3:
                    82:b3:25:56:75:42:82:44:ec:44:bc:31:44:46:58:
                    47:d4:10:27:c8:59:79:2a:dd:75:bd:bb:0f:ea:28:
                    5a:fc:87:10:f8:a5:7e:3e:cc:96:ed:74:fe:0b:0e:
                    7c:ec:81:97:8a:b9:98:f8:dc:82:b3:95:8d:46:d3:
                    a5:2c:a7:ac:f4:01:ee:83:8a:9f:9f:09:4f:af:66:
                    a3:09:38:5d:bf:60:8e:6a:e6:bd:68:87:5c:55:da:
                    b7:4a:5b:5e:f3:57:6e:3e:80:ef:c1:f6:0a:ef:be:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:68:7A:50:4F:D3:E3:1D:13:30:1E:4E:0E:9F:18:F6:81:BB:2E
            X509v3 Authority Key Identifier:
                keyid:DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:16:57:b3:fe:ec:7a:52:1d:5b:55:ad:98:98:c8:98:ed:7a:
         75:05:86:d0:9b:35:8e:9c:85:ec:fe:0c:a7:73:63:f0:22:20:
         ea:b1:4a:7e:88:80:4d:f1:6b:98:a9:0e:df:75:f9:91:53:d7:
         d2:19:76:53:37:ae:f1:a0:06:45:6e:e1:da:f2:41:9f:ee:c1:
         88:0a:4f:f7:d2:e8:fd:4b:27:df:66:04:e3:75:bf:7a:4d:e0:
         9a:38:82:df:8f:49:22:aa:33:a0:2d:8d:63:44:ea:35:60:af:
         7a:78:36:6a:7b:ba:2a:f7:91:62:f5:a9:53:e1:30:16:fd:80:
         61:53:0f:66:df:ef:5f:b2:c5:17:31:92:d6:61:09:83:36:e4:
         b1:12:e1:30:19:d8:26:1f:0f:c4:8d:89:d5:b7:50:bb:4c:1b:
         4f:c1:c4:25:5b:9d:5c:99:d3:62:83:90:57:75:76:20:ad:ba:
         d4:d8:14:ca:fe:f7:76:6d:9e:04:1f:44:a1:dc:df:bd:18:65:
         4c:4c:24:d0:af:36:c9:ca:ee:b7:a3:9f:32:ad:51:75:4a:1e:
         3d:7c:cd:33:7d:c6:bd:b5:59:a3:77:ed:4b:ac:e0:20:3f:70:
         cb:e9:ea:80:e6:1e:3a:96:80:cc:66:78:94:1b:45:1a:a2:dc:
         c1:a5:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:57:51 2024 by rpki-client on console-ams.rpki-client.org