Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e3131302e36342e302f31392d3234203d3e203237393437.roa
File:                     3230302e3131302e36342e302f31392d3234203d3e203237393437.roa (raw, json)
Hash identifier:          Yhjvu8h2lKQ/+DCGK8LDj/BNVJdpESz2M9NPfcB9vMg=
Subject key identifier:   6B:42:6F:44:9C:18:1F:0B:DC:E9:3D:7A:34:F2:6E:50:E4:FB:B9:B0
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       65AD3EF5E9899AC5B65FB7D34C115E509015EA64
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e3131302e36342e302f31392d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:28 +0000
ROA not before:           Tue 05 Mar 2024 18:05:28 +0000
ROA not after:            Tue 04 Mar 2025 18:10:28 +0000
asID:                     27947
IP address blocks:        200.110.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ad:3e:f5:e9:89:9a:c5:b6:5f:b7:d3:4c:11:5e:50:90:15:ea:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:28 2024 GMT
            Not After : Mar  4 18:10:28 2025 GMT
        Subject: CN=6B426F449C181F0BDCE93D7A34F26E50E4FBB9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:89:36:26:f9:01:87:50:cb:0d:1a:37:d1:
                    cb:13:48:36:d7:12:6d:61:b1:bc:68:77:b7:8e:55:
                    ac:25:62:dd:8f:40:37:5a:74:8b:e8:f8:c1:e1:f1:
                    bc:68:66:e5:1e:78:f6:4f:34:37:76:e7:31:d1:fc:
                    a5:70:55:6e:2b:e8:58:5b:75:19:93:cd:07:1d:71:
                    08:28:ff:7e:91:02:8b:ff:7d:bb:3b:e2:2a:82:ca:
                    b9:8a:69:d1:70:9a:a1:53:3d:17:b4:bd:aa:62:cc:
                    97:4d:b8:72:56:79:e6:cb:89:c0:fa:df:7e:49:d7:
                    c2:63:ca:15:ca:58:27:a4:bc:84:16:66:7d:f7:8b:
                    65:04:89:25:a7:4a:3a:1c:aa:d2:2e:dc:47:b7:3e:
                    45:24:4d:30:19:92:c2:f4:e0:b4:b8:6c:41:f9:66:
                    b2:23:96:52:88:8e:70:b4:65:e1:c4:a1:1e:90:56:
                    21:31:e4:b8:a4:45:a6:4b:bc:ea:8a:99:da:a2:9a:
                    2a:fd:90:5d:04:98:65:0a:7c:12:5d:0b:8a:f8:4c:
                    1e:27:a3:1b:82:87:a8:75:36:a9:16:73:f4:52:ad:
                    4d:62:dc:c8:2e:b2:d1:ea:45:67:f3:d4:b7:6b:9c:
                    99:d7:39:89:53:62:7a:c5:09:b6:53:4a:bf:7a:26:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:42:6F:44:9C:18:1F:0B:DC:E9:3D:7A:34:F2:6E:50:E4:FB:B9:B0
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e3131302e36342e302f31392d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:63:d0:bc:18:a3:c1:af:46:23:69:73:80:a2:55:27:d1:
         ec:f4:c4:0b:bb:14:95:6f:f1:52:ed:01:47:2c:f0:78:b7:37:
         f9:49:8c:86:c4:38:65:bc:2a:9f:87:0a:b9:6a:88:2b:fb:6b:
         d2:93:f8:4a:36:7e:4d:27:75:f1:3f:9d:0b:40:56:19:ea:8a:
         73:d8:34:2c:45:bb:98:f6:72:21:1d:7f:8c:fd:87:c0:a9:4c:
         0a:17:6e:a4:aa:5f:ce:89:e9:0d:72:04:03:ab:c5:cb:9c:e9:
         0e:8c:0d:07:eb:04:a2:6f:6d:5f:b5:96:8a:b2:2b:6c:a0:e8:
         e1:cf:2e:76:c5:d5:81:43:b0:f9:7c:be:f8:45:55:1c:35:8f:
         ab:bb:91:1a:44:d4:0c:58:a1:96:74:9a:eb:de:df:47:9b:6d:
         4c:30:1a:05:0c:94:77:9b:37:32:4d:6c:07:17:de:07:41:89:
         21:f7:80:43:9b:bc:d4:93:f9:af:eb:f3:84:06:dd:2b:9a:07:
         7c:4a:9b:59:1f:b3:8a:0a:f6:ce:5f:68:61:b1:2e:48:53:05:
         66:d0:c3:de:6a:b2:5c:bb:e4:f9:89:6e:75:90:48:9b:2e:92:
         e7:56:e6:5b:32:50:b0:7e:27:04:81:c3:c5:e8:64:fa:d6:10:
         6c:3b:6a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:33 2024 by rpki-client on console-ams.rpki-client.org