Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e362e302f32332d3234203d3e203131313933.roa
File:                     3230302e36312e362e302f32332d3234203d3e203131313933.roa (raw, json)
Hash identifier:          CFaRBAAzld5ERf/EAg/ixOJzGclTYaJ/g3hCAQxxNlA=
Subject key identifier:   DF:D3:7F:34:0A:99:9A:42:C5:FA:9A:2D:A4:6E:57:C5:71:C0:26:32
Certificate issuer:       /CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
Certificate serial:       7EF9008D2D7C93B50E537C888D54C18CB455B87F
Authority key identifier: 22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e362e302f32332d3234203d3e203131313933.roa
Signing time:             Tue 05 Mar 2024 17:57:41 +0000
ROA not before:           Tue 05 Mar 2024 17:52:41 +0000
ROA not after:            Tue 04 Mar 2025 17:57:41 +0000
asID:                     11193
IP address blocks:        200.61.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f9:00:8d:2d:7c:93:b5:0e:53:7c:88:8d:54:c1:8c:b4:55:b8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
        Validity
            Not Before: Mar  5 17:52:41 2024 GMT
            Not After : Mar  4 17:57:41 2025 GMT
        Subject: CN=DFD37F340A999A42C5FA9A2DA46E57C571C02632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:17:bb:84:a5:2b:fe:35:a1:5b:65:b1:3a:
                    9d:af:29:39:e1:23:1d:98:56:b9:6f:78:ec:c5:c8:
                    6e:b9:6c:40:af:f4:66:80:a4:83:9b:3c:dd:c0:64:
                    6e:2f:27:87:3b:87:55:7a:f4:b8:96:df:0d:ab:cb:
                    ee:3b:af:8e:5c:73:32:5b:5a:82:20:98:65:89:28:
                    45:09:e9:92:9c:fb:ca:7f:db:76:19:80:8e:12:97:
                    e4:88:dc:3a:b3:cf:c5:11:66:73:ee:91:c4:1e:4a:
                    d9:c0:70:c3:c6:73:d5:b9:5d:9c:47:ae:58:08:1e:
                    64:c0:cf:99:4d:86:99:43:9b:4e:a7:ba:dc:35:79:
                    59:7d:07:87:b1:67:b3:07:0e:79:21:aa:a3:a7:09:
                    f6:fd:05:b2:c6:e3:60:a7:03:bf:5f:38:95:54:b7:
                    c7:e0:c3:2c:b9:86:23:55:43:b5:21:e3:f2:35:45:
                    57:36:d0:dd:4d:6b:41:71:03:2b:0f:e8:db:36:60:
                    ab:95:23:86:6d:a5:eb:9d:20:6b:43:24:47:8a:7e:
                    0b:9c:5d:56:f0:e7:4e:48:a5:33:bf:cd:a3:08:6a:
                    6e:50:68:c1:29:e0:d1:3d:78:f2:9a:7d:d7:1d:22:
                    1b:8e:cc:81:04:42:22:69:7e:63:80:cc:b6:f7:e6:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D3:7F:34:0A:99:9A:42:C5:FA:9A:2D:A4:6E:57:C5:71:C0:26:32
            X509v3 Authority Key Identifier:
                keyid:22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e362e302f32332d3234203d3e203131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:ed:2d:94:74:1f:d6:67:98:46:e9:7a:46:75:ed:e1:6b:ba:
         3a:94:1e:1a:62:b4:93:d1:b2:45:73:e2:3d:a2:68:82:ce:af:
         38:f8:16:a8:b4:9a:f4:88:37:9c:8e:79:33:ac:19:44:ac:59:
         62:d3:f2:e2:65:4e:be:9f:09:55:49:2e:00:46:26:6e:ce:4d:
         d7:7c:52:61:94:9f:8a:39:42:15:4c:18:86:06:96:fc:08:0d:
         8b:f4:6d:73:47:a9:ea:a2:bc:8e:b8:d3:2b:31:52:8c:f6:64:
         c5:86:c7:be:97:e0:fb:a9:cd:37:5b:f4:28:27:66:42:0f:ed:
         4a:d2:b1:8d:96:6f:de:df:ba:fd:78:cc:34:0c:d3:56:25:93:
         78:b5:c5:72:c7:ca:d3:e3:7f:76:b6:ab:c0:c2:39:c3:a1:a5:
         cb:63:25:4c:14:36:4d:4f:f3:c1:f9:07:6c:45:b6:eb:44:b6:
         9e:68:0b:9f:b4:90:d5:e0:b4:c6:dd:5c:75:c8:fb:e4:78:d2:
         a0:39:f4:12:cd:37:a5:c3:d4:db:05:a1:a6:e2:49:62:15:c3:
         41:9a:32:80:a8:77:6b:6c:65:99:d8:14:d6:a2:f5:a7:52:6b:
         32:a9:80:85:28:b9:52:41:08:94:dc:3a:af:bc:a9:6c:57:1a:
         03:f5:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org