Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e302e302f32322d3234203d3e203131313933.roa
File:                     3230302e36312e302e302f32322d3234203d3e203131313933.roa (raw, json)
Hash identifier:          7XGbIbQhZ0Y92/Lv61POgGTUezPEUBON2Fe+ROVQqrE=
Subject key identifier:   BA:B1:F3:31:E0:0E:E0:23:08:6E:20:E9:F3:5A:83:51:64:90:60:E9
Certificate issuer:       /CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
Certificate serial:       71AB038A9752DF598F878D4229DE8EF4753A670B
Authority key identifier: 22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e302e302f32322d3234203d3e203131313933.roa
Signing time:             Tue 05 Mar 2024 17:57:40 +0000
ROA not before:           Tue 05 Mar 2024 17:52:40 +0000
ROA not after:            Tue 04 Mar 2025 17:57:40 +0000
asID:                     11193
IP address blocks:        200.61.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ab:03:8a:97:52:df:59:8f:87:8d:42:29:de:8e:f4:75:3a:67:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
        Validity
            Not Before: Mar  5 17:52:40 2024 GMT
            Not After : Mar  4 17:57:40 2025 GMT
        Subject: CN=BAB1F331E00EE023086E20E9F35A8351649060E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:59:39:ec:b5:d4:7a:6a:3b:1f:57:ec:63:f4:
                    17:30:3b:3c:69:be:2d:e1:f9:40:ce:e3:04:bb:ab:
                    7d:c9:ec:d7:04:c8:3a:18:59:cd:d1:1a:b4:c6:f2:
                    1d:e3:10:ea:c0:37:29:ce:c0:44:17:93:14:c4:f7:
                    d4:0c:f0:01:6d:3b:9a:d7:02:17:85:4e:60:b0:60:
                    65:0c:a2:34:7d:af:67:a6:49:68:54:65:68:67:9a:
                    52:be:d0:86:c9:61:a0:6b:8f:bb:be:74:e6:c6:ec:
                    22:7e:b4:43:dd:14:fe:56:69:7c:85:4d:bd:3a:4c:
                    df:96:54:08:03:d6:d7:a8:b6:09:12:88:ec:8f:c6:
                    4f:64:09:c4:7f:ec:a5:d8:8b:d0:bf:ca:4e:84:0d:
                    09:ef:6c:91:db:06:3c:d0:08:d5:0e:a2:3d:77:80:
                    f4:16:08:a1:d9:28:cb:ea:16:3d:6b:5e:a5:71:17:
                    e0:55:cb:f0:83:a5:eb:7f:88:b4:8b:e2:03:b5:1b:
                    2c:2a:24:e6:be:2b:97:12:eb:4a:4e:1b:bd:ee:07:
                    ef:c6:69:89:0a:29:eb:bb:c3:ec:d4:4c:1a:86:73:
                    cb:2e:44:e4:57:19:11:47:8b:12:fc:cc:34:d2:e7:
                    d9:87:eb:0a:e3:be:d8:f9:9e:b8:9f:a4:fe:d1:26:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B1:F3:31:E0:0E:E0:23:08:6E:20:E9:F3:5A:83:51:64:90:60:E9
            X509v3 Authority Key Identifier:
                keyid:22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e302e302f32322d3234203d3e203131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:6b:37:9e:b9:7d:76:25:8e:5c:bf:bf:73:31:ea:46:63:
         a8:44:cd:aa:22:b2:df:c7:59:ec:b9:06:c9:35:f0:fb:26:f3:
         1e:48:eb:2d:5f:ff:3c:5b:c1:0d:0d:8f:94:ff:54:52:d8:8e:
         0f:d4:b6:b7:54:4d:8b:c4:22:3d:b0:98:da:38:30:a7:8c:8e:
         42:1f:d1:6a:48:cd:98:a8:fa:c0:fd:ed:27:d7:03:f2:33:1a:
         db:45:60:ca:4a:13:60:49:0b:63:c4:cf:80:c5:d8:82:64:60:
         2e:e7:7e:71:46:aa:99:7b:bb:bf:29:3e:7a:f0:35:75:c8:32:
         61:86:2c:df:5d:d1:fb:8e:0b:0e:60:68:d7:27:df:3a:58:5c:
         de:62:51:50:fa:1c:60:3f:c4:22:0c:72:7e:32:1e:26:6a:8d:
         93:f8:94:d0:cb:48:8b:83:d9:2a:0f:07:a8:8d:f0:90:0c:57:
         a0:b2:77:da:32:37:8a:ce:38:2f:0e:06:11:ac:53:50:a1:67:
         24:75:8f:3e:a4:db:e3:9b:0b:8a:84:03:86:50:fa:92:fe:1a:
         30:d4:83:8d:f1:40:a1:3f:b3:98:e1:ac:4a:ff:c4:df:ec:0b:
         e2:b8:46:44:25:ce:e2:a9:d8:0c:04:45:34:73:7a:b6:ae:89:
         15:45:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 11:56:30 2024 by rpki-client on console-fra.rpki-client.org