Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203237393437.roa
File:                     3230302e39332e3232342e302f32302d3234203d3e203237393437.roa (raw, json)
Hash identifier:          GRe2YahCHqp2LzyHsCb/SZlgwiaoAhzAHstiSlPd/Ew=
Subject key identifier:   DA:83:24:C5:BB:B6:DA:8E:13:FC:11:11:32:88:F9:5D:45:B9:31:19
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5A0085BA2901EAC867604402CE5CE1F5E74E071E
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:25 +0000
ROA not before:           Tue 05 Mar 2024 18:05:25 +0000
ROA not after:            Tue 04 Mar 2025 18:10:25 +0000
asID:                     27947
IP address blocks:        200.93.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:00:85:ba:29:01:ea:c8:67:60:44:02:ce:5c:e1:f5:e7:4e:07:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:25 2024 GMT
            Not After : Mar  4 18:10:25 2025 GMT
        Subject: CN=DA8324C5BBB6DA8E13FC11113288F95D45B93119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c2:8d:5c:97:6e:df:5b:ec:ac:01:82:ea:f5:
                    d5:b7:9f:df:d2:1f:b1:51:f2:e9:57:3f:f8:66:ec:
                    1f:ca:74:dd:41:b4:54:61:59:1f:12:37:47:2a:95:
                    9a:43:d6:c9:dc:72:d8:14:8d:c7:b5:cf:30:1b:89:
                    45:5e:cd:04:33:51:8e:81:f8:cc:e9:b9:3b:a8:47:
                    85:f3:fa:2e:c7:e1:63:62:87:35:de:c7:43:97:fe:
                    5c:c8:06:2e:a3:79:18:c3:00:13:9a:f0:72:34:87:
                    62:be:21:13:86:c4:9e:e6:a1:30:1b:32:45:4d:68:
                    41:02:07:c2:75:e4:21:3c:6b:2a:67:e9:a2:4e:9e:
                    0d:fb:b6:c8:dd:12:e0:67:1f:93:4f:5f:cc:79:23:
                    91:0f:79:a0:c3:21:62:af:ed:c0:fe:6f:b8:8b:e6:
                    0b:b8:e4:3c:f9:ac:e5:8c:93:6c:4b:a7:c7:cd:4d:
                    45:9e:15:6c:67:69:9b:f7:ce:36:56:2a:de:89:07:
                    84:65:43:4c:18:eb:d6:ed:a6:e4:28:e6:32:3f:05:
                    6a:37:cb:55:6b:e6:00:e1:00:bd:22:89:e1:5c:ae:
                    fd:c3:a4:89:c6:ad:4a:08:54:fd:f8:fc:14:ce:f9:
                    60:39:a8:26:fd:a4:90:73:04:a1:a3:29:ff:7f:4c:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:83:24:C5:BB:B6:DA:8E:13:FC:11:11:32:88:F9:5D:45:B9:31:19
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:13:7b:ad:96:9f:8b:94:2d:1f:aa:52:7f:8d:df:f1:16:fd:
         52:e6:27:08:7c:93:26:d0:ad:ff:31:d3:5b:f3:54:b0:1c:90:
         4b:70:78:9c:1c:19:6c:15:fe:cd:d9:60:bf:77:01:4e:75:06:
         77:04:7b:23:a5:73:6d:be:e8:f2:20:14:94:09:e3:b6:02:39:
         13:ce:89:9f:f2:1e:19:b5:4f:0e:cb:ec:26:a7:b2:0f:fe:14:
         8c:fa:44:4d:1f:32:a0:97:80:fe:c4:84:bc:de:cd:bb:de:f0:
         55:5a:e0:ac:b7:28:5c:16:ec:4d:7d:b0:f1:c3:04:e2:2b:81:
         da:c7:ae:0f:b4:ef:38:9b:0d:03:52:6e:e6:2f:04:d3:ab:97:
         ff:e6:f1:0b:3d:eb:f9:bf:1b:a8:8a:77:6a:e0:31:1d:7b:ba:
         38:bd:c8:5e:8a:23:e5:9f:7e:38:20:21:b7:d1:21:7e:61:cb:
         d1:09:cc:39:99:f9:68:41:b7:b8:e0:f4:bb:ca:13:8c:6d:bd:
         11:fa:f4:40:f9:bf:1e:cb:64:9d:ea:eb:00:fa:a5:04:b2:34:
         7d:8e:bc:7a:66:6e:29:0f:bb:02:28:75:f1:d9:ba:96:36:97:
         50:d4:b2:c6:94:13:cc:06:53:88:2b:77:02:98:8e:8d:ac:b9:
         6f:9e:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org