Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E308336EA40C71279221408A5564CCAC3B8E8AC5D627B96EE6993AB792966F3B/0/3230302e392e3138332e302f32342d3234203d3e203238333936.roa
File:                     3230302e392e3138332e302f32342d3234203d3e203238333936.roa (raw, json)
Hash identifier:          kPRJPmAQcMNhdQD7Vy2MDOQA7+a2lEV+QhtsndAEV70=
Subject key identifier:   7A:A1:84:B1:70:B2:D9:8C:78:E6:D6:2F:8A:AE:CF:71:DE:5E:12:EC
Certificate issuer:       /CN=4757544F4D08DF62C9ADCBFE6BA8FED1F550A69C
Certificate serial:       6D8A5D1324181E2C31A2075A1AFE110841BD6CCA
Authority key identifier: 47:57:54:4F:4D:08:DF:62:C9:AD:CB:FE:6B:A8:FE:D1:F5:50:A6:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4757544F4D08DF62C9ADCBFE6BA8FED1F550A69C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E308336EA40C71279221408A5564CCAC3B8E8AC5D627B96EE6993AB792966F3B/0/3230302e392e3138332e302f32342d3234203d3e203238333936.roa
Signing time:             Tue 05 Mar 2024 18:03:46 +0000
ROA not before:           Tue 05 Mar 2024 17:58:46 +0000
ROA not after:            Tue 04 Mar 2025 18:03:46 +0000
asID:                     28396
IP address blocks:        200.9.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E308336EA40C71279221408A5564CCAC3B8E8AC5D627B96EE6993AB792966F3B/0/4757544F4D08DF62C9ADCBFE6BA8FED1F550A69C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E308336EA40C71279221408A5564CCAC3B8E8AC5D627B96EE6993AB792966F3B/0/4757544F4D08DF62C9ADCBFE6BA8FED1F550A69C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4757544F4D08DF62C9ADCBFE6BA8FED1F550A69C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8a:5d:13:24:18:1e:2c:31:a2:07:5a:1a:fe:11:08:41:bd:6c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4757544F4D08DF62C9ADCBFE6BA8FED1F550A69C
        Validity
            Not Before: Mar  5 17:58:46 2024 GMT
            Not After : Mar  4 18:03:46 2025 GMT
        Subject: CN=7AA184B170B2D98C78E6D62F8AAECF71DE5E12EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:57:c4:9c:4a:dd:e7:e2:b4:f2:bd:35:17:
                    0c:55:43:f5:a6:5b:3d:e2:89:a0:d4:ef:63:b5:2e:
                    3b:63:4b:ea:2a:c1:6c:13:7a:a8:1b:50:fa:5a:54:
                    2c:5f:3b:5b:aa:ba:41:e2:b7:7d:ae:c1:2c:f6:76:
                    fd:75:da:00:f8:d1:9e:c4:ff:36:48:24:65:21:12:
                    70:c4:26:33:86:31:3b:5c:c2:7c:4a:37:54:0a:93:
                    cf:2a:5b:00:9d:13:04:ee:96:4a:ea:da:ec:5e:a6:
                    a6:69:98:bc:2d:50:bc:86:ae:bd:03:c6:da:e2:28:
                    9f:83:03:60:b4:e2:d1:51:6a:e7:b1:ca:1a:c1:95:
                    9d:89:7a:02:3d:aa:55:a2:da:4d:20:cd:6e:32:7a:
                    08:36:85:39:63:71:ac:64:43:be:e5:88:2b:6e:01:
                    b9:7e:46:26:09:8b:ca:3c:8c:ea:e3:4a:16:e3:86:
                    5c:41:35:cc:cf:c9:be:c4:98:cf:84:ca:71:5a:9c:
                    8c:ff:7a:ff:b2:18:43:5b:b2:5e:65:46:bf:8d:6c:
                    2c:1a:5f:28:9a:09:54:07:21:1e:1c:a9:69:ea:94:
                    6a:33:8d:fb:82:be:01:f7:1e:02:0e:6e:cb:ff:fe:
                    52:2c:3b:78:25:f5:e2:30:f0:ae:9f:3b:5c:17:99:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A1:84:B1:70:B2:D9:8C:78:E6:D6:2F:8A:AE:CF:71:DE:5E:12:EC
            X509v3 Authority Key Identifier:
                keyid:47:57:54:4F:4D:08:DF:62:C9:AD:CB:FE:6B:A8:FE:D1:F5:50:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E308336EA40C71279221408A5564CCAC3B8E8AC5D627B96EE6993AB792966F3B/0/4757544F4D08DF62C9ADCBFE6BA8FED1F550A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4757544F4D08DF62C9ADCBFE6BA8FED1F550A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E308336EA40C71279221408A5564CCAC3B8E8AC5D627B96EE6993AB792966F3B/0/3230302e392e3138332e302f32342d3234203d3e203238333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:53:32:cc:57:e4:ef:03:d1:1d:80:a0:83:2d:4a:91:66:42:
         67:dc:2d:20:ea:eb:61:bb:b0:b7:19:73:10:30:10:49:25:f5:
         d3:b3:08:d0:3b:8e:e5:9d:cd:5a:01:8c:a0:42:5c:29:ff:62:
         fd:1f:d7:f2:38:4b:71:df:2a:18:86:09:1b:99:86:6d:02:8a:
         c5:e7:ba:cb:cb:c1:50:24:05:22:98:1f:9a:89:55:8a:0e:36:
         68:cf:aa:38:93:cd:cb:5a:7c:60:94:c5:2b:fa:aa:a4:62:72:
         6a:7e:c6:94:be:bf:a0:54:fc:00:62:cb:19:05:b7:7b:62:ef:
         e2:ef:58:25:34:a2:7d:d0:89:95:9d:f3:ce:22:1a:14:1a:eb:
         3b:47:68:d8:f7:c2:ef:08:d7:3a:6d:ea:ee:99:6c:e6:c6:dc:
         9d:9e:f4:7d:dd:c0:b5:2a:7d:d6:60:ea:9c:52:f4:3c:82:7f:
         82:10:7b:63:6c:1c:a0:10:bc:70:e9:c6:ec:3c:26:89:98:a0:
         d7:d3:a5:c7:f3:c7:c4:43:26:f7:2c:c6:8a:0b:b3:c5:7c:96:
         46:b7:3f:61:80:a2:14:4c:3f:4c:96:16:60:68:9e:9d:f9:3d:
         92:30:e3:42:94:70:9d:be:a8:06:dd:92:49:53:18:45:2d:d9:
         86:92:97:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org