Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3230302e33312e3234302e302f32302d3234203d3e203532343139.roa
File:                     3230302e33312e3234302e302f32302d3234203d3e203532343139.roa (raw, json)
Hash identifier:          3gNhX5rLEAr7mcA6WDZ7Mchp/ziOPvu4lzjf4HLahJA=
Subject key identifier:   99:10:64:C9:E8:54:D2:6D:0A:F7:DD:09:57:0A:EE:88:66:4B:42:93
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       7E309E8DDD1480EB9A6D13E1B5CCB99808153577
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3230302e33312e3234302e302f32302d3234203d3e203532343139.roa
Signing time:             Tue 05 Mar 2024 18:01:18 +0000
ROA not before:           Tue 05 Mar 2024 17:56:18 +0000
ROA not after:            Tue 04 Mar 2025 18:01:18 +0000
asID:                     52419
IP address blocks:        200.31.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:30:9e:8d:dd:14:80:eb:9a:6d:13:e1:b5:cc:b9:98:08:15:35:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Mar  5 17:56:18 2024 GMT
            Not After : Mar  4 18:01:18 2025 GMT
        Subject: CN=991064C9E854D26D0AF7DD09570AEE88664B4293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:a3:15:89:5e:73:e2:4c:52:9d:5a:36:33:
                    c1:9c:16:47:8d:36:d4:2b:3a:dd:b6:06:53:6c:94:
                    73:16:73:7d:93:65:2b:c8:50:06:ef:d4:5f:eb:fe:
                    b4:43:bf:63:4c:e9:58:40:ac:c9:11:8b:97:00:95:
                    48:1b:80:86:5a:65:8a:30:4a:78:3a:6b:48:ed:56:
                    9f:de:04:7b:49:69:4d:b5:c6:9d:04:a1:d6:17:09:
                    14:e1:57:2c:bd:76:91:34:23:fd:87:8e:70:a8:15:
                    24:06:cd:a6:99:eb:d8:26:70:da:0f:fe:ef:e3:32:
                    64:f5:80:91:8a:fc:c0:66:71:87:88:91:85:73:cc:
                    d1:44:d1:f0:78:e1:af:bb:99:89:eb:d4:46:d2:9b:
                    ae:dd:d4:15:a8:e5:2f:d3:da:eb:de:66:69:9b:bc:
                    c6:09:6e:5f:f7:12:35:f1:29:6b:19:58:a4:44:f8:
                    70:3f:e8:59:92:29:57:fb:75:d2:3d:af:19:e5:0d:
                    93:4d:fc:f0:99:e8:24:1b:36:c2:43:71:15:d6:a4:
                    ec:f4:59:0c:81:df:10:d6:e2:a6:41:50:3f:22:49:
                    23:93:10:8a:03:d9:b7:4d:16:6f:da:76:14:3a:89:
                    e7:8d:5c:e0:0c:cb:b4:e7:3c:23:c3:6a:da:5a:e9:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:10:64:C9:E8:54:D2:6D:0A:F7:DD:09:57:0A:EE:88:66:4B:42:93
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3230302e33312e3234302e302f32302d3234203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:27:00:d2:e9:16:7c:96:89:47:51:b3:4b:fc:39:43:40:3c:
         15:fc:94:f2:6f:32:e8:2a:47:28:28:f8:8c:58:a1:c1:3f:15:
         cd:23:ea:ca:13:d7:d6:02:cb:c2:6b:33:60:16:51:00:ec:7a:
         42:53:7e:e8:25:20:92:4d:fb:68:b0:e1:fd:b1:09:9e:2c:9c:
         d9:5f:65:db:08:1e:f5:5b:18:91:85:a6:a7:c8:c1:4b:e8:4b:
         83:c1:d2:b1:dc:0d:05:08:53:00:12:35:a0:2b:ae:01:52:7f:
         f4:11:15:ad:2a:60:84:7f:d5:59:f7:41:4b:79:b8:b7:8a:70:
         a7:0a:d3:e9:08:57:25:f8:2a:24:83:e0:e8:08:2b:05:da:2b:
         ad:17:b3:50:a5:30:f1:ef:b1:38:0d:79:d7:c4:8d:33:33:7e:
         00:dd:56:2d:14:d1:81:0e:b8:4f:a5:20:78:59:47:4c:a8:dc:
         0f:77:8e:da:6d:60:a4:11:fc:fd:86:5d:49:e3:f1:d6:ee:10:
         87:6c:65:37:fc:e0:fd:29:74:ee:08:fe:c7:fd:c0:87:99:33:
         29:c4:a7:55:34:21:e0:ce:1e:2c:33:a5:53:f9:ec:1a:3d:b2:
         9d:47:05:c5:44:e4:e4:24:43:fe:cc:c5:6f:18:3e:53:02:02:
         e8:05:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 02:22:19 2024 by rpki-client on console-fra.rpki-client.org