Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e302e302f31382d3234203d3e203131313732.roa
File:                     3230302e37362e302e302f31382d3234203d3e203131313732.roa (raw, json)
Hash identifier:          15OlOYspsS7IoqcalZHlvfuBGNezUlLyxjHt9Ib8QYk=
Subject key identifier:   00:DF:26:47:70:CC:20:02:41:A6:1F:99:20:80:13:46:BD:F3:7D:60
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       380AA90CE65B91C1FFDF4AC076AB4751443175EE
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e302e302f31382d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:31 +0000
ROA not before:           Tue 05 Mar 2024 17:49:31 +0000
ROA not after:            Tue 04 Mar 2025 17:54:31 +0000
asID:                     11172
IP address blocks:        200.76.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0a:a9:0c:e6:5b:91:c1:ff:df:4a:c0:76:ab:47:51:44:31:75:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:31 2024 GMT
            Not After : Mar  4 17:54:31 2025 GMT
        Subject: CN=00DF264770CC200241A61F9920801346BDF37D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:d3:be:c5:e2:56:5e:f0:1a:e9:64:e8:bf:
                    97:aa:74:4c:e7:0e:64:aa:7b:fa:62:6b:95:8e:e4:
                    e3:f4:f6:f5:dc:b5:34:81:60:8d:97:e1:a9:1e:24:
                    4d:74:95:9e:41:00:2b:af:53:be:c1:33:7d:66:44:
                    56:23:ee:2a:e3:67:36:bd:a3:c3:c7:9b:62:28:ad:
                    b5:5e:a8:c8:42:2b:0c:40:2b:e4:fb:de:93:35:6a:
                    39:44:de:f0:e0:8e:7a:55:85:0f:0b:ca:d7:cc:d7:
                    56:0d:77:e0:88:76:98:7b:86:38:74:cb:54:e2:5a:
                    1b:c0:a4:21:4f:eb:13:4e:35:2b:31:d9:29:d0:fd:
                    1b:d3:6f:e7:ba:c0:bb:20:4a:32:57:6a:04:40:f3:
                    cd:af:fb:1d:c1:38:e8:54:96:97:a3:86:9e:4e:8b:
                    e2:10:c1:b4:ac:45:c8:67:eb:29:5f:25:c3:6d:09:
                    43:ff:1f:bb:a1:aa:8b:a9:69:e5:78:a2:7a:84:37:
                    29:26:55:db:ae:a7:4b:ae:cf:86:35:6a:8f:55:79:
                    e4:27:d6:67:e7:fd:84:e0:f2:68:20:86:54:06:93:
                    39:03:c5:4f:6d:9a:f3:d7:7e:0e:dc:db:7e:52:28:
                    7d:d6:74:ba:4c:ff:ee:9f:52:77:f4:25:4c:16:4e:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DF:26:47:70:CC:20:02:41:A6:1F:99:20:80:13:46:BD:F3:7D:60
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e302e302f31382d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         65:d2:5a:64:c3:fd:ea:98:bf:3c:6c:0c:5c:85:58:c9:b2:2f:
         39:d6:8f:87:a0:f6:92:9e:5b:fb:78:ce:47:bb:aa:6b:45:1f:
         e3:22:36:ad:f3:22:2a:93:a9:f0:70:39:d2:51:76:97:ae:15:
         b7:8a:88:89:d9:1f:c7:1f:be:08:d8:54:58:5d:2e:ee:28:48:
         b7:0b:78:24:2f:0e:70:2f:b0:1e:ed:eb:0b:f0:cd:0a:54:45:
         b1:07:76:46:b7:47:b6:8b:8a:c4:55:4d:e1:0f:6f:73:21:e1:
         d3:d2:99:47:8c:fa:4b:3e:b2:46:a2:64:2f:08:d1:33:56:57:
         36:d7:bd:90:2d:cf:7d:70:dc:fe:43:1b:db:ab:15:ea:da:99:
         a1:bc:47:23:52:dd:9d:41:df:42:45:23:53:02:d0:8a:ea:cf:
         be:85:05:1b:5b:6b:a4:5c:7a:eb:05:36:6d:e1:68:1b:12:46:
         cd:90:75:f7:42:c3:b8:e3:25:34:57:a0:d3:05:ea:82:1c:8d:
         37:68:c0:ef:84:2d:f1:e4:c7:1b:24:28:04:3b:cc:41:90:0d:
         47:cc:0e:0b:57:f5:8d:20:aa:73:eb:cd:34:ab:cd:4d:2b:54:
         8b:d3:e7:e8:3c:9a:45:93:5e:fa:bc:75:7a:e6:20:a1:bd:6f:
         23:08:9e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org