Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/3230302e31302e3134312e302f32342d3234203d3e20323634363333.roa
File:                     3230302e31302e3134312e302f32342d3234203d3e20323634363333.roa (raw, json)
Hash identifier:          R1cX7MrkLfpT2Z5jupyC5bg4aYuBxVVG+Gl2zylN/vo=
Subject key identifier:   83:D5:47:05:7C:EE:61:73:52:B4:A5:61:1D:73:97:BE:ED:C0:05:43
Certificate issuer:       /CN=2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC
Certificate serial:       36757B2D9D00E3DC77809721D0871BDA38F377A1
Authority key identifier: 25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/3230302e31302e3134312e302f32342d3234203d3e20323634363333.roa
Signing time:             Tue 05 Mar 2024 17:56:52 +0000
ROA not before:           Tue 05 Mar 2024 17:51:52 +0000
ROA not after:            Tue 04 Mar 2025 17:56:52 +0000
asID:                     264633
IP address blocks:        200.10.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:75:7b:2d:9d:00:e3:dc:77:80:97:21:d0:87:1b:da:38:f3:77:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC
        Validity
            Not Before: Mar  5 17:51:52 2024 GMT
            Not After : Mar  4 17:56:52 2025 GMT
        Subject: CN=83D547057CEE617352B4A5611D7397BEEDC00543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:e1:35:08:35:db:43:5a:a6:9a:d0:40:87:
                    17:93:ad:20:ec:49:55:84:d0:ec:7e:e4:6f:5c:2d:
                    10:dc:d7:7e:8a:bd:c9:cb:90:5d:80:21:d4:2b:a0:
                    e9:8a:6a:fd:8f:51:87:d4:3f:23:f5:74:b7:ca:89:
                    c4:51:19:93:f2:50:00:f0:db:ff:5f:fb:d9:ca:bd:
                    d6:39:a4:65:1b:e7:f2:97:51:ed:37:98:9b:8c:d6:
                    53:db:84:86:a1:86:17:ae:bf:ab:c6:0d:c5:ae:d9:
                    10:7d:08:71:65:55:3c:57:cd:53:9a:5e:d4:42:dc:
                    7e:d3:bd:b1:a8:18:2f:30:d9:2a:76:40:ec:d8:8d:
                    a5:51:27:12:39:82:80:0b:fe:99:01:6d:1a:65:f1:
                    00:ee:c3:d0:8e:41:b4:28:c6:96:58:1a:fb:fa:7e:
                    12:0b:a5:9b:c6:08:57:bd:bb:64:16:fc:e8:b4:01:
                    f0:bf:5f:0b:ee:f4:73:c8:07:5a:54:20:56:85:b0:
                    a6:21:7e:8a:53:6e:42:5b:82:d0:fc:7f:b7:27:40:
                    a3:4b:b5:b6:bd:29:ff:91:cb:35:d9:02:1c:be:cd:
                    bd:9d:46:62:61:42:99:da:ac:4c:98:f0:a1:a9:99:
                    d6:a0:26:39:50:90:a2:8c:89:1d:69:1f:1c:31:58:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D5:47:05:7C:EE:61:73:52:B4:A5:61:1D:73:97:BE:ED:C0:05:43
            X509v3 Authority Key Identifier:
                keyid:25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/3230302e31302e3134312e302f32342d3234203d3e20323634363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:46:9e:6f:e3:ea:c3:bf:09:d1:76:ea:55:23:af:1b:cf:00:
         3d:70:0b:f3:fe:79:9c:21:be:a0:1a:77:3e:17:92:28:0b:39:
         4d:bc:f0:84:6f:e5:93:32:70:58:f7:4b:a5:63:8d:33:27:82:
         8a:af:11:3f:ff:86:59:09:94:fc:ef:29:eb:92:c1:6c:87:9d:
         ca:9e:93:f8:cd:7f:f6:d5:57:ef:0f:13:97:22:b1:cf:03:56:
         14:f7:1b:9e:d0:5b:f3:ee:45:32:f3:ea:32:28:12:61:5b:4d:
         92:0c:fc:d9:7a:20:62:18:8d:fb:e8:fc:0f:a9:c0:35:0e:52:
         78:ba:cb:b0:8e:bb:46:1e:68:80:e1:dc:64:e8:d6:a4:8d:43:
         ee:b6:a1:44:4f:19:e7:59:69:4d:61:2c:ea:e9:ba:c0:75:63:
         0a:ec:c7:3c:6e:72:ad:74:77:7b:65:36:b3:ea:d6:d5:4a:66:
         0a:57:67:d6:0f:69:e3:88:e7:82:d9:de:9a:a2:a2:31:87:44:
         7e:a3:ab:bf:2c:bf:62:6c:e2:b3:33:78:a8:f6:10:cc:b1:0c:
         18:3c:bf:97:c1:e1:f5:6b:c1:fe:f4:34:a8:73:78:14:c6:6b:
         f2:81:14:90:b5:9d:f0:16:72:9c:ae:ab:f3:ca:ba:81:a3:46:
         c1:93:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:04 2024 by rpki-client on console-fra.rpki-client.org