Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3230302e37332e39362e302f32312d3234203d3e203237383832.roa
File:                     3230302e37332e39362e302f32312d3234203d3e203237383832.roa (raw, json)
Hash identifier:          qWD6ReF2bgQ+BF6G9MV+cO+MylqDZ8M1gLovIN3qwBQ=
Subject key identifier:   06:91:F6:F5:BD:89:FE:ED:D3:F9:CF:D4:7D:29:5B:E5:30:CA:24:B8
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       73A4EF8C4D9EA91B0B7097B29DC63A19BDFF1097
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3230302e37332e39362e302f32312d3234203d3e203237383832.roa
Signing time:             Tue 05 Mar 2024 18:09:37 +0000
ROA not before:           Tue 05 Mar 2024 18:04:37 +0000
ROA not after:            Tue 04 Mar 2025 18:09:37 +0000
asID:                     27882
IP address blocks:        200.73.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a4:ef:8c:4d:9e:a9:1b:0b:70:97:b2:9d:c6:3a:19:bd:ff:10:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Mar  5 18:04:37 2024 GMT
            Not After : Mar  4 18:09:37 2025 GMT
        Subject: CN=0691F6F5BD89FEEDD3F9CFD47D295BE530CA24B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:a0:ba:df:90:b5:6a:3c:3c:b5:4f:72:09:
                    2c:5c:85:78:e9:23:b0:e6:bd:46:22:d6:45:07:6e:
                    08:3f:65:62:3d:23:5c:1e:ac:db:8a:c0:74:7f:b6:
                    5e:8e:e7:77:a4:da:85:4a:ca:b8:a5:a3:e1:9a:66:
                    70:da:af:67:62:8f:45:c9:a6:97:84:fc:dc:ee:47:
                    e2:b8:34:42:03:8b:d3:0f:df:4b:60:c9:41:46:8c:
                    f5:a8:51:bd:69:91:90:b3:36:ad:b5:77:b6:96:70:
                    c4:d6:38:c0:81:8f:b5:e4:b6:5e:7f:60:e0:e1:a6:
                    af:54:fb:13:13:01:e0:56:58:03:70:26:af:fb:7b:
                    ed:c4:b8:49:97:63:20:05:cf:84:64:54:6b:ef:bd:
                    6b:29:53:1f:df:c5:1f:bb:80:e4:7d:74:a8:ef:65:
                    2f:de:10:f4:cb:e9:c4:29:8f:43:b6:ed:0f:27:ee:
                    8a:29:ae:d3:86:8f:79:f0:48:61:51:24:97:5a:e9:
                    1e:47:a1:68:c1:08:4d:47:0e:82:fb:16:6e:f0:50:
                    99:e9:33:ce:4d:23:04:ba:6f:54:60:d1:d2:e2:1c:
                    d9:3e:5a:61:52:f0:ac:30:a9:7d:84:c3:0b:14:83:
                    e4:01:e6:b9:d7:1b:eb:b1:0c:55:c9:c3:52:f8:8c:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:91:F6:F5:BD:89:FE:ED:D3:F9:CF:D4:7D:29:5B:E5:30:CA:24:B8
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3230302e37332e39362e302f32312d3234203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:89:8b:52:c8:b5:c6:b3:f8:e2:e5:a1:12:62:fb:df:74:0c:
         c5:e3:d0:c7:d0:5a:a3:6e:2f:b7:71:6f:07:b9:3b:94:e0:94:
         48:94:4c:78:5a:48:41:0d:b7:78:bc:a3:10:8c:12:c2:f4:b9:
         f7:43:2f:11:30:e5:09:1e:d7:76:82:91:d1:38:62:6a:b9:c0:
         57:60:23:5e:9d:58:6f:9d:56:52:08:61:e2:90:35:ce:aa:6a:
         85:90:ba:31:8b:1d:72:fd:5b:19:5a:be:06:36:10:0f:a1:4c:
         d0:a0:f3:cc:7d:df:a7:8f:70:e2:45:ed:0b:a5:62:05:ee:64:
         17:81:37:4b:8f:ef:b5:d8:8c:ee:14:22:51:87:31:5d:1a:76:
         4d:06:84:c4:a3:98:d4:bd:4f:5b:18:db:e3:04:0c:f4:68:bb:
         b4:fe:d3:b2:2c:d7:bd:6f:f1:d6:1a:8b:05:6c:ff:64:72:49:
         42:45:c1:11:fb:b0:a4:10:e2:9e:d8:a6:e5:19:71:55:f0:24:
         fa:91:d4:5d:bf:32:79:4e:49:df:94:e4:39:51:48:12:3a:03:
         aa:6c:1d:e9:7d:8a:07:1f:a8:14:6d:00:81:8d:a0:4e:61:e7:
         c5:da:ea:95:8f:fd:49:e1:a4:6c:20:6b:a6:d2:55:80:ac:3f:
         49:40:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org