Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235322e302f32342d3234203d3e203135323038.roa
File:                     3230302e31302e3235322e302f32342d3234203d3e203135323038.roa (raw, json)
Hash identifier:          jjxAFqfkmUZT4NhEjt5n/oslMGwATsYc3HJpaeL628I=
Subject key identifier:   E7:88:83:35:A1:38:37:AF:F2:47:D4:F8:FC:27:F2:21:0E:5D:82:47
Certificate issuer:       /CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
Certificate serial:       686D9167C72AD801E4D900962182DB8872B5C5B4
Authority key identifier: AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235322e302f32342d3234203d3e203135323038.roa
Signing time:             Tue 05 Mar 2024 17:44:17 +0000
ROA not before:           Tue 05 Mar 2024 17:39:17 +0000
ROA not after:            Tue 04 Mar 2025 17:44:17 +0000
asID:                     15208
IP address blocks:        200.10.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6d:91:67:c7:2a:d8:01:e4:d9:00:96:21:82:db:88:72:b5:c5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA8DAE25E070F7275689ABD1382DC522220EE62
        Validity
            Not Before: Mar  5 17:39:17 2024 GMT
            Not After : Mar  4 17:44:17 2025 GMT
        Subject: CN=E7888335A13837AFF247D4F8FC27F2210E5D8247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:06:bd:fa:f4:a2:7a:a5:38:62:8a:3d:55:
                    b4:c4:92:e8:f3:40:09:27:50:ca:d5:0f:9a:b6:52:
                    51:14:9e:8d:d1:ac:e8:bd:c8:e8:86:e8:8f:8b:2e:
                    7b:32:61:26:e5:64:5a:35:b2:45:98:6d:06:bb:f0:
                    8f:a0:38:32:01:34:5b:37:28:07:d0:ea:46:ec:e9:
                    6b:b2:92:6f:14:8c:85:9b:67:5d:7f:43:ee:5d:98:
                    97:a3:1c:01:c0:39:92:a5:27:7b:e0:e6:97:a5:e0:
                    fb:74:2c:26:e4:49:cc:aa:a3:2e:bb:18:5e:ee:56:
                    03:b4:b7:d2:31:03:dc:f7:6c:c0:fa:b2:ea:dc:b4:
                    e4:a8:7b:64:58:ae:03:d5:60:40:46:20:ee:a8:94:
                    7e:c3:df:de:b9:5a:a4:21:e5:c1:9f:41:3d:54:78:
                    2a:f5:a0:3d:4b:15:8a:4d:8c:ce:29:b9:57:6c:c6:
                    1b:50:52:86:ab:be:cf:92:06:3f:bb:75:2e:c4:e7:
                    f7:85:b2:17:7b:f8:b8:3d:c6:93:1f:0d:ac:17:b6:
                    12:e6:d3:bb:c6:ea:f9:f4:5e:be:2a:ae:a8:24:35:
                    fe:fe:af:0e:19:8f:f5:fb:06:16:23:23:e1:2e:3b:
                    82:aa:e5:4b:c1:68:9a:c4:de:4e:20:a4:aa:eb:b0:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:88:83:35:A1:38:37:AF:F2:47:D4:F8:FC:27:F2:21:0E:5D:82:47
            X509v3 Authority Key Identifier:
                keyid:AB:A8:DA:E2:5E:07:0F:72:75:68:9A:BD:13:82:DC:52:22:20:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA8DAE25E070F7275689ABD1382DC522220EE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/021AB0EEC8C30A633F5879A16810D16214CFECCA9F03A60887132352717C38BF/0/3230302e31302e3235322e302f32342d3234203d3e203135323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b6:42:d5:91:09:33:88:60:da:9a:7f:12:4d:60:4c:5b:07:
         a8:59:90:91:0c:3f:10:0b:86:cf:f6:c5:b3:cb:df:d3:f4:cf:
         9a:61:e8:39:81:b1:c2:1d:37:5e:23:36:63:65:9f:08:15:1f:
         d9:69:b7:85:c2:23:d8:37:8f:2e:ef:b2:09:63:b1:d6:78:e0:
         a5:b2:d6:12:1e:94:cb:12:78:80:26:3d:de:98:59:85:97:f4:
         eb:d8:98:49:a6:1c:e3:3c:bd:d3:3e:96:ef:38:a0:d6:d8:43:
         ea:bc:31:77:2c:55:c6:06:fc:8d:0f:84:48:dc:79:e4:d1:fe:
         25:2d:88:88:e9:50:1a:36:e7:8c:0c:03:08:fe:bb:f2:7e:bc:
         b3:60:04:47:54:0a:09:b9:8b:d7:a9:c5:51:cd:4e:de:cc:1f:
         93:a1:09:61:6c:61:7c:6b:52:b8:22:0c:b9:36:0e:78:61:6a:
         ab:23:c8:63:50:8d:e6:27:9f:36:10:d0:2c:d0:d6:40:16:e0:
         d6:70:d4:d0:b8:21:f7:70:a2:41:96:14:a1:76:f9:ad:6f:2d:
         0e:8c:5c:6d:a7:b6:77:54:4c:85:6a:f3:27:cb:32:f8:d4:e1:
         83:f9:6c:fd:89:82:cb:ec:84:51:65:02:be:92:c8:9d:23:ed:
         51:95:32:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org