Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/3230302e3130382e3138342e302f32322d3234203d3e20323635363234.roa
File:                     3230302e3130382e3138342e302f32322d3234203d3e20323635363234.roa (raw, json)
Hash identifier:          cB6xFg3YjPaDTlWgReBiRUNxDhsDdkFM0sgNqH7U90Q=
Subject key identifier:   AD:2E:A6:A5:28:0B:99:62:C5:8C:88:26:0E:E6:22:1E:7A:7D:71:50
Certificate issuer:       /CN=E64124DC2B81A9F0A514E13F350481140958F195
Certificate serial:       2FF1649CECE6EE648C693497B10C2968A29427F6
Authority key identifier: E6:41:24:DC:2B:81:A9:F0:A5:14:E1:3F:35:04:81:14:09:58:F1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64124DC2B81A9F0A514E13F350481140958F195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/3230302e3130382e3138342e302f32322d3234203d3e20323635363234.roa
Signing time:             Tue 05 Mar 2024 18:04:15 +0000
ROA not before:           Tue 05 Mar 2024 17:59:15 +0000
ROA not after:            Tue 04 Mar 2025 18:04:15 +0000
asID:                     265624
IP address blocks:        200.108.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/E64124DC2B81A9F0A514E13F350481140958F195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/E64124DC2B81A9F0A514E13F350481140958F195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64124DC2B81A9F0A514E13F350481140958F195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f1:64:9c:ec:e6:ee:64:8c:69:34:97:b1:0c:29:68:a2:94:27:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E64124DC2B81A9F0A514E13F350481140958F195
        Validity
            Not Before: Mar  5 17:59:15 2024 GMT
            Not After : Mar  4 18:04:15 2025 GMT
        Subject: CN=AD2EA6A5280B9962C58C88260EE6221E7A7D7150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f4:35:0d:d0:ae:70:bc:69:dc:82:36:90:30:
                    8a:12:84:3d:6a:6e:52:03:b9:fc:85:2d:1a:a6:88:
                    20:fc:8a:aa:1b:9b:1c:01:be:bd:98:7e:3b:51:c9:
                    ab:8f:d7:ca:41:7f:22:a4:86:05:69:62:52:52:4f:
                    4f:db:1c:d1:e4:14:cd:dc:13:57:35:30:e6:64:b3:
                    4c:b0:7b:60:39:23:86:98:17:f4:dc:07:ab:70:72:
                    62:c7:a0:a7:d5:26:d9:ba:b6:5c:65:2c:d3:5f:8b:
                    dd:69:66:26:78:2b:d6:56:be:9d:05:e0:20:41:21:
                    ff:91:cc:61:b8:b9:cc:b3:f6:2a:43:e4:3c:c7:d0:
                    db:35:6e:53:8a:08:83:43:e8:f7:20:85:17:ab:82:
                    6f:7b:c0:af:d5:c1:2b:68:11:7d:ef:7b:dd:5e:18:
                    4a:3c:9c:5f:ad:60:2e:84:96:8f:67:e3:28:18:e0:
                    4d:d2:71:ea:af:60:f8:52:b1:3a:62:ac:b1:c3:93:
                    a1:87:c4:0d:e8:c8:85:e3:6f:32:6f:64:68:f6:7c:
                    d1:4b:dd:1d:41:72:fe:73:13:1c:d2:fc:3d:47:4e:
                    ad:a9:5c:33:5e:44:20:f8:89:0f:1c:d6:60:ca:52:
                    6b:8f:0e:e3:01:fe:53:90:86:54:67:e7:c4:e8:88:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2E:A6:A5:28:0B:99:62:C5:8C:88:26:0E:E6:22:1E:7A:7D:71:50
            X509v3 Authority Key Identifier:
                keyid:E6:41:24:DC:2B:81:A9:F0:A5:14:E1:3F:35:04:81:14:09:58:F1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/E64124DC2B81A9F0A514E13F350481140958F195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64124DC2B81A9F0A514E13F350481140958F195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/3230302e3130382e3138342e302f32322d3234203d3e20323635363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:1a:f3:18:e6:4a:57:1c:40:79:b7:b9:0f:39:c0:54:0f:90:
         ed:af:62:9a:93:92:34:0c:63:cd:67:3b:26:ba:b9:95:52:4a:
         e7:8c:3a:df:ef:5b:3f:2f:bb:19:a1:67:d9:16:ac:cf:9f:7c:
         1d:02:23:6f:54:91:5a:5f:93:d6:9b:0c:4f:7d:bf:22:a6:3f:
         e6:2b:9e:49:11:36:dd:37:bb:8c:0f:ff:e0:5d:40:09:b7:2b:
         c2:14:f2:27:5a:f2:bc:79:5e:04:a0:43:67:2e:19:2d:c7:7b:
         d1:f7:4a:bb:e6:e4:86:15:99:7d:6b:fd:10:fc:c2:26:bc:aa:
         bb:f0:62:6e:d7:30:61:5e:75:17:d8:8c:82:c1:9e:7a:6c:58:
         72:89:1a:82:21:02:be:db:6f:ae:e9:ac:41:29:8a:2b:2d:dd:
         97:32:2c:67:8e:1e:08:26:9f:6f:f2:a5:56:46:84:c8:13:3a:
         c3:93:f9:ef:74:29:6e:59:3d:83:7a:b0:db:44:ba:2c:05:06:
         b6:da:9f:2f:9c:a0:2b:77:51:1a:5f:06:44:d3:ba:da:b1:3e:
         73:02:14:ec:ef:52:54:6c:fa:de:15:63:b6:53:ed:0e:21:f5:
         fa:c1:85:ff:6f:00:a7:12:0a:04:24:8d:34:ca:e2:fd:7c:33:
         c2:8b:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:02 2024 by rpki-client on console-ams.rpki-client.org