Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e3132382e302f31392d3234203d3e2036353033.roa
File:                     3230302e39342e3132382e302f31392d3234203d3e2036353033.roa (raw, json)
Hash identifier:          Ku4obLUQnz/vB9XN1mLtERLpxyAEo5YfYXlnIIAV8yw=
Subject key identifier:   31:9E:31:6B:C7:DE:08:1D:2B:31:40:AA:D6:A5:51:A7:85:45:BC:F7
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       709345F8DB2CEE72A3694BE97F987AE2C67091C6
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e3132382e302f31392d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:35 +0000
ROA not before:           Tue 05 Mar 2024 17:49:35 +0000
ROA not after:            Tue 04 Mar 2025 17:54:35 +0000
asID:                     6503
IP address blocks:        200.94.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:93:45:f8:db:2c:ee:72:a3:69:4b:e9:7f:98:7a:e2:c6:70:91:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:35 2024 GMT
            Not After : Mar  4 17:54:35 2025 GMT
        Subject: CN=319E316BC7DE081D2B3140AAD6A551A78545BCF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:61:9e:ca:99:bb:a6:01:3d:6e:dd:fd:04:
                    a4:7d:2c:2f:50:de:21:19:c4:90:14:60:39:19:f9:
                    16:5f:64:09:11:66:57:c4:69:c9:34:64:13:f1:66:
                    26:74:8b:c3:be:d3:ef:d7:bf:a9:99:88:31:5c:c2:
                    3d:3c:80:d6:e4:bb:66:32:1a:61:d2:b6:49:d4:48:
                    98:50:2a:9f:ca:cb:a2:43:38:1a:aa:f0:bb:7c:b1:
                    ff:5e:f4:8a:b9:46:60:5d:5c:31:74:cb:50:4d:16:
                    5a:59:bf:d1:b3:0f:73:b2:89:56:9c:5f:10:cf:8f:
                    32:47:63:ee:5f:d3:4a:8a:f0:ac:96:07:66:cc:3e:
                    06:dd:f1:88:a4:93:b3:d8:34:cc:33:74:b9:79:b9:
                    9a:61:03:cc:84:05:0a:a2:b7:83:ee:ff:90:34:82:
                    e8:93:f0:38:de:df:f8:d7:59:ce:2e:8c:b2:71:df:
                    1f:b1:a9:f9:df:1a:39:48:55:b5:19:01:6e:20:6b:
                    a4:da:01:33:af:37:e4:46:a1:06:53:d7:c8:7d:27:
                    c5:49:55:a4:63:4d:98:50:c2:ed:18:39:d9:6d:a5:
                    17:9f:4d:3f:9d:e2:cd:42:69:31:58:88:b2:ef:88:
                    97:ea:ca:de:de:a2:c4:8f:bb:c0:92:05:00:95:8e:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9E:31:6B:C7:DE:08:1D:2B:31:40:AA:D6:A5:51:A7:85:45:BC:F7
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e3132382e302f31392d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:f4:83:5b:76:41:7f:af:5e:4b:58:de:2a:6f:26:02:bc:a8:
         69:77:90:5a:ff:9c:e7:26:fe:80:fa:87:57:6e:12:dd:56:d6:
         33:f1:ea:1a:07:0c:76:eb:1d:bf:3e:d9:67:ab:c6:e1:16:2b:
         ee:3e:57:8f:38:40:13:7d:27:42:b2:43:4a:14:19:8d:21:46:
         83:14:e4:09:fa:88:3e:36:9c:ba:28:3e:df:2a:4a:bb:20:6b:
         99:5a:f5:72:f2:3f:5b:99:bc:eb:d9:d1:50:d4:66:a3:06:08:
         e1:72:ba:62:6a:4c:ce:57:55:ba:0b:3d:13:b5:71:ea:3c:a8:
         7b:ba:90:da:c9:ce:b6:aa:c5:74:2a:8d:e0:e6:d2:56:39:d7:
         7a:b9:9a:9f:b4:2e:93:23:1d:4b:43:1b:f0:3a:f4:80:2e:4a:
         27:66:ef:af:24:ec:9e:4e:6a:85:bb:73:7e:d4:be:cb:ef:5d:
         80:b4:63:23:63:76:1a:26:e6:1d:57:78:11:96:ad:9f:d9:6d:
         bc:e6:3e:27:41:d4:19:9b:e0:ad:6e:97:40:18:18:59:64:23:
         6d:90:54:5b:d6:ee:8d:20:20:a3:68:b1:cb:8f:ca:19:88:00:
         de:10:cc:16:4f:52:aa:fd:45:01:68:e9:99:73:3c:8d:36:88:
         ce:02:d1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org