Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3132332e3230302e3233362e302f32332d3234203d3e20323731373935.roa
File:                     3132332e3230302e3233362e302f32332d3234203d3e20323731373935.roa (raw, json)
Hash identifier:          /LXcJxyaWhwFvcjCZiL3OMy2DOxll8iWNq3oRZMyAhE=
Subject key identifier:   AF:68:AE:92:D3:A2:3D:24:BE:2E:49:0F:8C:D9:28:D7:1C:E2:A5:03
Certificate issuer:       /CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
Certificate serial:       34923FE4487C7AF365BD1FF96F7C8D806BCD5024
Authority key identifier: 45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3132332e3230302e3233362e302f32332d3234203d3e20323731373935.roa
Signing time:             Thu 31 Oct 2024 20:30:00 +0000
ROA not before:           Thu 31 Oct 2024 20:25:00 +0000
ROA not after:            Thu 30 Oct 2025 20:30:00 +0000
asID:                     271795
IP address blocks:        123.200.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:92:3f:e4:48:7c:7a:f3:65:bd:1f:f9:6f:7c:8d:80:6b:cd:50:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
        Validity
            Not Before: Oct 31 20:25:00 2024 GMT
            Not After : Oct 30 20:30:00 2025 GMT
        Subject: CN=AF68AE92D3A23D24BE2E490F8CD928D71CE2A503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:2c:36:d8:bf:e6:fa:33:bb:d5:ba:67:7e:
                    38:f9:ee:0c:08:b2:63:81:c7:2d:3b:f8:ab:81:b0:
                    a2:1a:9c:fe:32:d2:42:9f:26:9a:0d:7a:01:7c:35:
                    02:7e:9f:0d:f0:04:a9:98:99:bf:17:09:3e:d2:ba:
                    58:18:1c:f2:08:c6:71:ab:58:31:77:1a:56:38:6e:
                    24:59:61:33:80:cc:57:21:80:87:05:06:af:99:79:
                    52:25:9d:6a:6b:41:42:9a:4c:86:0b:42:39:84:e1:
                    07:98:97:ec:5a:f9:35:9e:f0:07:14:ef:97:ba:73:
                    10:55:c3:f0:20:6b:be:7f:63:b8:71:19:95:96:6c:
                    58:8a:dc:26:fc:06:0a:2c:09:d3:d8:0e:ca:5f:48:
                    48:fe:4d:94:bb:a5:4a:51:ee:aa:c4:95:67:29:7d:
                    71:5c:97:0a:0e:59:08:19:94:ff:86:70:d5:cb:a4:
                    87:f9:14:91:23:4c:58:7b:4d:d1:32:72:1f:06:97:
                    36:a3:59:61:d1:18:39:84:f7:14:ac:26:36:75:09:
                    ef:71:c1:df:e4:0e:85:45:10:fb:37:ae:e9:66:01:
                    49:46:12:69:12:b4:dc:d6:de:51:70:b8:fa:89:ef:
                    fa:4c:dc:97:82:da:65:e4:93:51:08:c5:68:df:70:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:68:AE:92:D3:A2:3D:24:BE:2E:49:0F:8C:D9:28:D7:1C:E2:A5:03
            X509v3 Authority Key Identifier:
                keyid:45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3132332e3230302e3233362e302f32332d3234203d3e20323731373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.200.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:ff:ab:0a:de:84:19:74:c2:8b:48:2c:25:a2:6d:da:02:
         ac:29:4c:c6:fc:0b:ea:82:1b:b4:85:2c:fc:3d:36:b7:10:e7:
         81:b2:84:b3:f8:19:84:32:03:8f:28:dd:8e:ce:90:10:fd:ae:
         54:e1:f2:95:8b:a5:d1:fe:13:e6:9f:f6:67:d9:22:86:56:fd:
         82:d3:18:bd:b6:71:02:e8:3f:94:eb:96:1c:d1:ad:d9:bd:6b:
         51:6a:91:f4:ae:00:79:f6:6f:ce:28:a1:68:00:28:9e:30:02:
         3a:90:05:c9:b0:68:c8:67:98:46:dd:82:88:0c:6e:c2:2c:48:
         e7:ce:48:2b:db:c4:d5:3c:a0:d6:af:cc:93:ef:01:db:01:72:
         6c:50:28:10:35:ef:8e:63:73:d8:17:71:64:25:99:2d:33:63:
         17:d0:a9:e3:12:48:ec:1c:72:3f:05:2c:d1:b4:db:28:8a:f5:
         7b:16:ef:a9:ec:a3:68:57:60:a3:c7:1e:ef:c7:a5:9a:34:eb:
         68:6b:d0:3f:0a:60:54:24:3f:78:86:1f:1d:21:24:0f:18:a6:
         e6:e1:8a:24:94:b7:74:70:d0:93:33:8e:6b:08:c9:76:eb:f4:
         f6:06:c4:76:bd:7c:fe:56:a6:a6:35:7d:f1:b8:b5:a5:7b:c4:
         5d:9a:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:36 2024 by rpki-client on console-ams.rpki-client.org