Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/3230302e31302e3230352e302f32342d3234203d3e203237393939.roa
File:                     3230302e31302e3230352e302f32342d3234203d3e203237393939.roa (raw, json)
Hash identifier:          qk4OMtCL/oV4EkFi9gTRtxRaPEZK9jv/JqBr3h/FD64=
Subject key identifier:   1A:B1:44:F4:3F:61:24:51:38:00:C8:DC:54:EC:CB:A9:33:19:5B:28
Certificate issuer:       /CN=808AC600DE5D9C23D41119CA28DB82C3DB3F6E49
Certificate serial:       62FE6608B25F17FAA971A1386A39D77E3C46C1D5
Authority key identifier: 80:8A:C6:00:DE:5D:9C:23:D4:11:19:CA:28:DB:82:C3:DB:3F:6E:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/3230302e31302e3230352e302f32342d3234203d3e203237393939.roa
Signing time:             Tue 05 Mar 2024 17:48:18 +0000
ROA not before:           Tue 05 Mar 2024 17:43:18 +0000
ROA not after:            Tue 04 Mar 2025 17:48:18 +0000
asID:                     27999
IP address blocks:        200.10.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fe:66:08:b2:5f:17:fa:a9:71:a1:38:6a:39:d7:7e:3c:46:c1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808AC600DE5D9C23D41119CA28DB82C3DB3F6E49
        Validity
            Not Before: Mar  5 17:43:18 2024 GMT
            Not After : Mar  4 17:48:18 2025 GMT
        Subject: CN=1AB144F43F6124513800C8DC54ECCBA933195B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:81:73:5e:2e:9b:28:eb:bb:29:1e:3e:15:
                    25:25:d8:e8:49:d9:f4:44:a5:eb:b1:86:a4:43:d8:
                    50:65:cc:d1:83:28:91:ae:aa:79:ce:90:d7:fa:3f:
                    86:b7:e2:73:cf:9c:94:de:b8:c9:6c:49:d8:97:03:
                    86:93:fd:73:55:8c:4f:de:9d:8d:0a:a6:db:04:ac:
                    c8:da:84:89:da:49:b2:b2:55:89:a0:0d:f9:56:b3:
                    30:3c:33:66:97:62:67:51:54:27:3f:8f:8e:6f:37:
                    cc:73:ce:cf:8a:19:b5:ba:79:00:41:e0:37:01:06:
                    13:79:98:f6:60:62:4c:74:29:6d:36:cb:0e:23:c0:
                    19:59:2e:ef:f4:13:87:f5:d1:91:5c:8b:df:90:f3:
                    40:f4:05:8a:7f:c3:4a:c8:b1:ed:6d:95:fe:81:f8:
                    fc:13:e4:59:03:79:36:d2:08:7f:7e:0e:26:0e:45:
                    33:d0:20:c0:66:50:a6:94:cb:53:c4:ba:33:cd:c2:
                    bb:00:3f:aa:84:0f:35:84:76:fb:da:36:6b:00:7f:
                    97:70:1e:c7:48:15:ea:0f:0e:7c:1a:f1:5f:07:f1:
                    81:32:e5:ac:99:c4:5c:01:58:a3:4d:0a:32:df:6b:
                    e0:33:0c:53:0d:a3:2d:1d:35:24:42:2e:8b:ee:d4:
                    53:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B1:44:F4:3F:61:24:51:38:00:C8:DC:54:EC:CB:A9:33:19:5B:28
            X509v3 Authority Key Identifier:
                keyid:80:8A:C6:00:DE:5D:9C:23:D4:11:19:CA:28:DB:82:C3:DB:3F:6E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/3230302e31302e3230352e302f32342d3234203d3e203237393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:11:b2:29:35:69:9f:af:70:f8:26:b9:7f:cc:c5:04:1e:20:
         9b:e9:87:95:9f:48:be:4d:5b:9b:5b:19:55:bd:27:8b:02:a3:
         ea:e4:e7:19:b5:94:53:34:17:3e:73:29:48:a8:7a:4b:3a:00:
         db:59:05:bc:69:05:5a:47:4b:a7:12:a9:74:7e:ce:cc:71:30:
         a8:8c:7d:89:30:d5:e1:18:ff:aa:67:02:41:4a:de:12:2a:b2:
         0f:e2:85:49:89:72:0d:af:8e:05:9e:a3:c0:7b:a2:94:2c:43:
         6e:21:8d:fb:b9:e6:5c:3e:77:d7:e4:49:be:19:29:75:bc:ab:
         62:33:a0:5c:bb:20:4a:21:e0:a1:b7:49:56:93:c9:a3:dd:a4:
         df:af:89:75:2a:b2:57:50:ea:9f:4f:b2:ec:c2:e3:f7:98:66:
         b5:98:22:99:04:77:d1:9a:70:d5:d0:ef:70:c9:06:14:62:3d:
         7d:c6:81:bb:94:31:3b:5b:78:5c:62:ab:8c:c4:e2:29:7b:7c:
         db:d0:0d:7a:0f:de:61:0d:bf:dc:d3:4a:a6:e4:ce:8e:e4:7e:
         15:fe:8e:16:11:a6:dd:78:e9:e0:1c:f3:a6:ae:bb:a6:d3:74:
         e0:34:e8:a0:6b:9f:00:6c:64:e5:39:15:a3:66:29:89:64:cd:
         1c:b1:8b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:50 2024 by rpki-client on console-ams.rpki-client.org