Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3137312e302f32342d3332203d3e2033343936.roa
File:                     3230302e312e3137312e302f32342d3332203d3e2033343936.roa (raw, json)
Hash identifier:          GExj/GmHJaxFZ1fRwmphv67KxhEJem7fZridh3WTfUU=
Subject key identifier:   2D:6D:4E:3D:A8:CA:39:BE:F2:55:A4:CB:B2:1F:C6:85:BB:75:B2:76
Certificate issuer:       /CN=45A52877B9CBDAA4A2B69EF377AB572F9423ED6E
Certificate serial:       7C865623D4188F999BF7F9FC3FD8F030C107ECA4
Authority key identifier: 45:A5:28:77:B9:CB:DA:A4:A2:B6:9E:F3:77:AB:57:2F:94:23:ED:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3137312e302f32342d3332203d3e2033343936.roa
Signing time:             Tue 05 Mar 2024 17:47:27 +0000
ROA not before:           Tue 05 Mar 2024 17:42:27 +0000
ROA not after:            Tue 04 Mar 2025 17:47:27 +0000
asID:                     3496
IP address blocks:        200.1.171.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:86:56:23:d4:18:8f:99:9b:f7:f9:fc:3f:d8:f0:30:c1:07:ec:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A52877B9CBDAA4A2B69EF377AB572F9423ED6E
        Validity
            Not Before: Mar  5 17:42:27 2024 GMT
            Not After : Mar  4 17:47:27 2025 GMT
        Subject: CN=2D6D4E3DA8CA39BEF255A4CBB21FC685BB75B276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:a4:f2:ed:c5:8f:09:59:ff:be:3e:7e:87:
                    fd:1e:06:08:6e:7f:cc:cc:95:85:6d:1b:9d:67:9e:
                    55:c6:3f:9e:9e:f5:9a:a1:bb:60:df:24:c5:0e:c1:
                    fd:c4:a7:75:13:04:39:cc:77:0c:cc:c7:d2:64:22:
                    2c:62:fb:7d:29:63:19:7d:23:e5:06:02:db:11:9b:
                    2b:21:76:b4:46:8f:f5:37:a5:88:04:30:01:35:68:
                    21:49:99:45:00:d8:a3:b7:e9:35:9a:e3:80:84:b3:
                    0e:34:3b:ed:e2:5e:2b:25:49:93:e3:76:26:5e:14:
                    7a:0f:d2:ac:da:a5:93:41:1a:31:8f:f3:0a:ac:34:
                    89:8c:b0:c8:26:d9:5a:db:81:cd:8f:9d:41:d2:d6:
                    80:3e:6a:d2:e0:ef:8a:95:92:2e:ea:65:49:f1:4a:
                    fd:e5:49:f9:61:65:82:c6:ce:4f:6c:43:b4:98:d4:
                    e9:09:2a:85:5f:fc:b7:bc:89:04:b9:45:bf:cd:ed:
                    47:21:3c:3d:e1:c9:fa:fb:ce:c7:6f:92:91:4f:4f:
                    28:bb:f4:97:f8:97:cc:a5:f9:74:da:e0:54:99:64:
                    0c:cd:82:00:c6:80:af:26:ee:5f:93:f0:1b:09:b4:
                    68:92:f7:98:07:f9:66:18:33:46:d5:b1:74:54:e6:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6D:4E:3D:A8:CA:39:BE:F2:55:A4:CB:B2:1F:C6:85:BB:75:B2:76
            X509v3 Authority Key Identifier:
                keyid:45:A5:28:77:B9:CB:DA:A4:A2:B6:9E:F3:77:AB:57:2F:94:23:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3137312e302f32342d3332203d3e2033343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:67:c7:05:f8:d4:2a:45:f9:29:97:ba:b5:f2:e8:ad:d2:53:
         d6:1f:47:bc:63:ac:33:95:cc:6d:a0:9a:a0:56:af:f0:58:ea:
         ec:86:74:2d:26:ad:01:6d:85:ee:4a:a4:f0:4a:4e:c7:94:32:
         58:d6:c0:8d:74:88:30:9e:64:d4:6a:41:16:83:ce:52:c3:7e:
         f5:71:13:f6:4a:41:8b:66:4d:ee:19:11:31:41:93:76:47:0c:
         b5:de:1b:56:d6:ff:84:e8:3b:6e:38:52:bd:27:d8:8e:96:5c:
         14:83:c1:bc:65:28:45:3e:e3:87:cb:5f:de:b0:e7:45:cc:2f:
         d9:63:92:de:8a:a1:23:d9:9a:48:fc:92:77:c7:1f:99:e7:93:
         ef:92:bf:40:b7:d2:c4:2a:67:0a:ac:8e:e5:8c:98:df:d3:33:
         61:b7:d0:2d:49:70:97:85:f1:a3:b5:63:07:92:f0:21:89:7c:
         86:61:c5:3f:fd:7e:59:1e:f2:a5:24:18:9d:34:45:cc:7f:02:
         39:da:65:2e:91:45:b0:b9:8e:a6:96:e0:63:ed:f7:15:89:99:
         d4:c6:8c:a4:0b:a5:f1:73:ec:4e:b8:97:6e:84:31:51:5f:ac:
         e6:c7:74:82:1e:b9:99:22:51:fe:25:5d:fc:7f:cd:46:7c:1a:
         b1:af:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 12:47:19 2024 by rpki-client on console-fra.rpki-client.org