Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235312e302f32342d3234203d3e203135323038.roa
File:                     3230302e31302e3235312e302f32342d3234203d3e203135323038.roa (raw, json)
Hash identifier:          G/XVtkTVK7hKHknSqNhqZRvOafoPEDdNktP6/dTcGBs=
Subject key identifier:   B2:01:63:C2:DC:E1:3C:B4:B9:2B:69:DE:31:2C:05:C9:29:0B:AD:97
Certificate issuer:       /CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
Certificate serial:       1CC55C10FAEAA846FF3BCD73E211E3C740F08628
Authority key identifier: AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235312e302f32342d3234203d3e203135323038.roa
Signing time:             Tue 05 Mar 2024 17:44:17 +0000
ROA not before:           Tue 05 Mar 2024 17:39:17 +0000
ROA not after:            Tue 04 Mar 2025 17:44:17 +0000
asID:                     15208
IP address blocks:        200.10.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c5:5c:10:fa:ea:a8:46:ff:3b:cd:73:e2:11:e3:c7:40:f0:86:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
        Validity
            Not Before: Mar  5 17:39:17 2024 GMT
            Not After : Mar  4 17:44:17 2025 GMT
        Subject: CN=B20163C2DCE13CB4B92B69DE312C05C9290BAD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:56:22:27:87:c6:fd:dc:92:2c:05:70:1d:43:
                    e6:ec:13:b5:c4:1f:48:18:7a:a7:e3:12:1d:a8:a0:
                    73:55:d2:5d:ae:8c:aa:11:7a:56:7e:93:11:9b:a3:
                    49:c4:e3:02:ff:a7:32:c8:5e:7e:92:f3:16:66:09:
                    2c:bc:63:37:d0:25:27:12:c4:93:16:8e:f3:2d:95:
                    9d:89:ff:cc:3c:56:81:23:82:23:bc:67:53:4a:77:
                    0f:04:08:5f:63:f5:70:38:55:29:cd:ee:59:ef:17:
                    b7:4d:ba:7c:28:56:4a:b1:06:73:af:38:43:c6:b0:
                    80:66:ae:ce:b2:83:8d:b8:72:a7:73:4e:8d:ba:90:
                    48:cd:75:9f:03:26:8c:35:49:0d:13:04:22:8e:78:
                    62:c4:67:79:a9:3a:f5:cb:a6:fd:11:f6:6b:bd:a8:
                    d4:f7:cc:2d:0f:f7:66:97:08:c8:1b:f7:d0:42:9f:
                    69:ef:54:f8:cb:fd:db:ae:ce:6b:fa:c5:c6:be:5c:
                    ad:5c:f7:a7:f5:9b:32:61:d0:ab:f5:95:56:cb:fd:
                    59:e1:e9:91:07:c8:b2:05:be:e9:05:d0:d3:8c:09:
                    d0:3a:46:d0:9e:ee:8d:10:5e:da:dc:25:ca:56:64:
                    61:ee:2a:95:cc:89:9c:8f:21:94:a5:2d:ab:5f:80:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:01:63:C2:DC:E1:3C:B4:B9:2B:69:DE:31:2C:05:C9:29:0B:AD:97
            X509v3 Authority Key Identifier:
                keyid:AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235312e302f32342d3234203d3e203135323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:72:c3:74:93:ec:68:c9:d8:ec:17:0f:b0:19:4d:60:f8:b8:
         33:fc:d4:90:0d:c1:31:d7:f4:26:5e:01:e0:72:55:fa:d0:6a:
         66:8f:cd:66:3f:9c:6c:fb:bd:25:05:ad:81:a3:3d:fb:99:dd:
         a7:d4:7e:63:fd:49:4d:9d:36:93:73:21:74:d6:fb:44:73:dd:
         07:5c:8c:0d:d7:7e:3c:31:3c:e3:95:ce:98:ed:29:d7:9d:3b:
         05:ff:5f:ad:e2:3d:23:eb:02:fc:8a:12:ab:2d:f3:14:8c:73:
         a2:c2:ca:a6:8e:c9:d7:17:8c:d3:b7:9b:e2:41:36:96:32:20:
         58:96:1a:ad:c7:71:4d:a8:8a:38:d7:eb:fa:9b:ec:6b:4c:da:
         22:c9:b0:c6:33:36:2a:2e:8e:6e:33:37:5a:80:58:15:82:64:
         ac:1b:fa:48:7a:f6:a0:86:5a:5e:7f:06:08:ea:30:a7:41:a0:
         c6:58:b6:a7:48:95:ac:37:2e:51:e9:03:2a:c7:b5:d8:72:a5:
         89:cd:5c:bc:7f:48:ed:50:2a:c8:73:05:29:56:e5:59:b5:3f:
         e5:18:bf:1a:b0:71:cb:ce:48:35:0c:0c:51:41:f8:aa:fe:6f:
         33:6e:57:a4:60:5b:5b:48:7f:1c:5c:f8:32:05:5f:3a:09:62:
         0e:21:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org