Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e203131313732.roa
File:                     3230302e37362e3132382e302f31382d3234203d3e203131313732.roa (raw, json)
Hash identifier:          Z1BgWk50XV6bzrqzmUHHtadEZnl0FGRRvQnEf1NUk4Q=
Subject key identifier:   81:16:39:9C:E9:A0:44:D0:10:AA:88:62:A5:E7:81:CC:E9:2C:1B:3B
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       458BCC51FB9E92300EBD03A5D508D5C96F8DCCBE
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:36 +0000
ROA not before:           Tue 05 Mar 2024 17:49:36 +0000
ROA not after:            Tue 04 Mar 2025 17:54:36 +0000
asID:                     11172
IP address blocks:        200.76.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8b:cc:51:fb:9e:92:30:0e:bd:03:a5:d5:08:d5:c9:6f:8d:cc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:36 2024 GMT
            Not After : Mar  4 17:54:36 2025 GMT
        Subject: CN=8116399CE9A044D010AA8862A5E781CCE92C1B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:32:02:05:88:8a:d1:c8:01:a0:70:c6:2d:69:
                    50:2e:9f:24:73:31:31:47:ca:fc:31:09:2a:f9:df:
                    bd:d7:22:e3:c7:ad:5f:16:e7:3f:c0:0a:a5:49:6f:
                    86:fe:e0:6d:a0:57:66:21:b5:8c:2a:0b:fc:4c:3d:
                    a1:13:aa:d5:f7:da:52:ed:26:16:ae:19:ae:f0:04:
                    9e:37:04:39:ee:84:1c:49:85:35:d7:90:75:6b:01:
                    74:d8:64:24:56:dc:e4:3f:1e:8d:7d:76:1c:df:8d:
                    74:7a:7f:17:8c:ae:83:a4:cc:0e:fd:0c:c7:31:e7:
                    3c:eb:aa:33:2d:70:d3:79:5b:af:07:2f:31:64:28:
                    03:bb:11:8b:59:1c:67:7e:ce:86:57:11:83:a1:3b:
                    09:b4:28:70:34:e4:fa:f7:c0:19:65:ec:59:84:b7:
                    f5:2d:fb:6e:52:f0:ab:ef:65:0a:ea:b6:3b:f8:fa:
                    cd:5b:dd:b7:27:02:10:b1:c5:f3:bb:6e:1b:f5:f2:
                    03:85:a8:0d:e3:13:3a:fc:4f:81:ae:a0:31:e6:7e:
                    db:6e:32:6d:9a:48:9d:91:cc:c8:90:31:eb:cc:7e:
                    60:3f:c6:d6:f7:32:ce:76:96:a4:d6:ce:fd:90:02:
                    8e:f7:f9:bc:e9:25:5e:33:e2:d3:f8:9f:5b:3c:19:
                    be:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:16:39:9C:E9:A0:44:D0:10:AA:88:62:A5:E7:81:CC:E9:2C:1B:3B
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:1f:5b:5c:3a:c3:ea:11:62:71:2d:66:ad:ac:55:97:57:
         69:34:5f:ea:3a:5d:60:0d:3c:9c:c3:b3:a1:ee:12:59:fb:3c:
         20:37:23:55:2e:1c:4e:fc:34:4c:b8:60:c1:ba:48:27:7b:aa:
         fb:e0:0f:38:81:08:be:ff:cd:05:1b:1b:6c:21:50:24:a1:69:
         a3:a9:ad:33:fa:7c:98:8c:d2:7c:4e:53:55:79:d9:4a:19:85:
         b8:5c:4b:1d:66:89:51:e0:e0:14:7d:da:73:a2:b1:2d:22:b6:
         be:d5:07:77:99:0a:0b:45:be:6c:6c:51:c6:92:fa:60:58:90:
         37:9f:16:21:bd:b3:33:51:23:ee:e9:96:92:fd:1c:91:42:fe:
         67:e1:e9:5d:3a:4b:fa:57:1b:38:79:f6:85:1f:ee:74:c5:25:
         19:15:07:6c:c2:22:52:8d:2c:98:79:35:42:bb:1b:ee:90:c2:
         ab:d9:2a:3d:29:e0:27:ff:71:6e:21:fb:24:08:ab:c5:02:69:
         71:92:f5:e9:41:2c:84:52:84:57:1f:b2:64:01:a8:71:b2:f6:
         49:27:bf:39:59:57:96:51:cb:34:d2:f7:2c:c4:17:97:a1:df:
         01:69:7b:a7:3d:d7:8c:c4:ac:33:d0:6a:84:ec:19:54:8f:49:
         77:dc:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org