Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3136392e302f32342d3332203d3e2033343936.roa
File:                     3230302e312e3136392e302f32342d3332203d3e2033343936.roa (raw, json)
Hash identifier:          mzL5L3J7lCBMM5TWfZ8yHWMnlXGEk9kDSkBBMyRdlyY=
Subject key identifier:   2A:0F:40:AE:49:C8:39:34:EE:A1:DD:56:B3:B4:5C:34:DA:15:52:61
Certificate issuer:       /CN=45A52877B9CBDAA4A2B69EF377AB572F9423ED6E
Certificate serial:       2E548DE0096F2E0A518635318CD670FF5A4F0078
Authority key identifier: 45:A5:28:77:B9:CB:DA:A4:A2:B6:9E:F3:77:AB:57:2F:94:23:ED:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3136392e302f32342d3332203d3e2033343936.roa
Signing time:             Tue 05 Mar 2024 17:47:27 +0000
ROA not before:           Tue 05 Mar 2024 17:42:27 +0000
ROA not after:            Tue 04 Mar 2025 17:47:27 +0000
asID:                     3496
IP address blocks:        200.1.169.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:54:8d:e0:09:6f:2e:0a:51:86:35:31:8c:d6:70:ff:5a:4f:00:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A52877B9CBDAA4A2B69EF377AB572F9423ED6E
        Validity
            Not Before: Mar  5 17:42:27 2024 GMT
            Not After : Mar  4 17:47:27 2025 GMT
        Subject: CN=2A0F40AE49C83934EEA1DD56B3B45C34DA155261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:da:c0:87:5d:0f:0f:80:f5:1f:1a:5c:ab:
                    17:94:53:44:2a:aa:d1:82:7a:94:f6:95:36:85:e0:
                    05:29:d4:54:62:0a:a6:11:5d:6d:f3:d1:36:34:f0:
                    6c:6d:b0:72:1e:96:42:15:c4:1c:fc:37:61:e1:8a:
                    91:70:29:78:20:3e:7e:6d:3b:76:9d:42:ad:ed:eb:
                    67:dc:5a:bf:5e:37:d7:81:26:9d:97:c1:aa:96:ec:
                    d0:3e:a0:af:4c:d7:20:38:fc:7b:3f:94:3b:18:88:
                    0c:f3:f9:ca:9e:bc:31:75:37:ed:e1:2d:80:e4:8f:
                    98:25:94:45:6f:ca:35:c0:38:37:38:73:10:f0:da:
                    a6:f2:8a:d0:33:5b:f6:90:d4:e6:7a:d6:a7:70:42:
                    40:53:26:a2:1b:32:cb:eb:6c:5e:75:c7:08:f7:41:
                    dc:8d:a6:fb:61:c8:5f:90:01:82:05:21:aa:c3:88:
                    85:78:46:c5:5c:d0:e6:a9:3f:6a:98:63:bc:f3:25:
                    2c:01:50:f4:b8:92:de:29:63:a1:78:0a:4e:ca:47:
                    13:e2:7c:0c:09:b4:87:45:c4:ac:25:0a:75:92:ec:
                    4e:ec:5e:27:22:07:74:e6:05:7c:05:94:67:1c:04:
                    7a:e9:1c:a0:12:a8:33:77:e8:d4:08:7d:9d:07:cf:
                    44:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0F:40:AE:49:C8:39:34:EE:A1:DD:56:B3:B4:5C:34:DA:15:52:61
            X509v3 Authority Key Identifier:
                keyid:45:A5:28:77:B9:CB:DA:A4:A2:B6:9E:F3:77:AB:57:2F:94:23:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3136392e302f32342d3332203d3e2033343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:25:82:3c:c6:1a:21:7f:d6:f7:e9:e5:3c:25:2e:1e:21:71:
         a9:33:49:9a:be:1a:38:68:68:e4:1d:48:3d:fa:27:57:cb:85:
         84:fc:6b:45:99:ea:98:ea:a3:67:a9:76:82:0f:63:3f:d8:4f:
         71:9b:e9:cb:81:8a:14:19:82:77:b9:a1:4b:df:c4:9a:66:ed:
         9d:c1:8f:e7:3d:31:6d:e2:f6:d9:15:b6:40:81:44:14:f9:17:
         30:65:01:8a:09:7a:1f:16:5a:fa:4f:06:62:0b:de:f4:d0:65:
         99:c7:6d:08:3e:8e:46:06:f3:39:9a:a1:3a:47:ba:d6:cf:13:
         a4:1f:b7:19:07:b7:f6:14:f9:fb:16:77:3a:c5:54:bf:35:a8:
         34:6a:63:46:8e:ea:63:20:cf:0d:b3:90:17:b0:65:bc:db:95:
         cc:8c:94:3a:2f:ad:0a:c7:f3:9d:b1:58:4b:9b:86:b1:b7:76:
         59:ed:ca:1c:da:8d:bb:57:a1:18:86:75:b9:a8:4f:5d:82:83:
         48:f8:05:3f:10:ad:fa:55:e2:af:8d:9a:16:f7:b1:77:3d:35:
         a6:d4:6f:91:16:a3:11:d8:84:f9:1e:5f:41:93:a7:50:59:d3:
         97:c5:fe:8e:00:71:29:11:ef:4c:eb:8b:c6:ee:13:36:b5:3b:
         a8:85:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 12:52:48 2024 by rpki-client on console-ams.rpki-client.org