Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/3230302e3131352e32342e302f32312d3234203d3e20323633363834.roa
File:                     3230302e3131352e32342e302f32312d3234203d3e20323633363834.roa (raw, json)
Hash identifier:          UkAr8NTNdTkoqDfoCNPaHwq5sffWrPFETeVqreZFqxc=
Subject key identifier:   00:7B:01:3D:67:8F:E4:5C:64:23:0D:4D:60:8D:69:22:C8:34:DE:8D
Certificate issuer:       /CN=B610C094D1EAED0BBD5D9529079557E5356CB598
Certificate serial:       0C9D84ED6E28D5AEF850FF92787F2EDA3B0B3085
Authority key identifier: B6:10:C0:94:D1:EA:ED:0B:BD:5D:95:29:07:95:57:E5:35:6C:B5:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B610C094D1EAED0BBD5D9529079557E5356CB598.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/3230302e3131352e32342e302f32312d3234203d3e20323633363834.roa
Signing time:             Tue 05 Mar 2024 17:59:05 +0000
ROA not before:           Tue 05 Mar 2024 17:54:05 +0000
ROA not after:            Tue 04 Mar 2025 17:59:05 +0000
asID:                     263684
IP address blocks:        200.115.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/B610C094D1EAED0BBD5D9529079557E5356CB598.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/B610C094D1EAED0BBD5D9529079557E5356CB598.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B610C094D1EAED0BBD5D9529079557E5356CB598.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9d:84:ed:6e:28:d5:ae:f8:50:ff:92:78:7f:2e:da:3b:0b:30:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B610C094D1EAED0BBD5D9529079557E5356CB598
        Validity
            Not Before: Mar  5 17:54:05 2024 GMT
            Not After : Mar  4 17:59:05 2025 GMT
        Subject: CN=007B013D678FE45C64230D4D608D6922C834DE8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:27:9c:8c:d0:f2:5a:c7:75:a3:b4:c2:27:
                    e1:51:10:6a:d0:d7:15:e9:46:d3:2b:d3:6d:40:ea:
                    41:1f:aa:fe:82:70:a1:1c:f4:6d:f4:6e:8b:86:69:
                    2c:05:53:fe:1d:ee:90:1d:d8:77:bd:68:57:94:72:
                    45:dc:b8:e7:eb:eb:e0:82:04:db:ac:92:f6:36:13:
                    4b:f6:f5:00:fe:49:48:4b:bf:7a:38:29:99:47:d1:
                    c6:ab:dd:36:05:82:02:54:0d:01:0a:46:72:94:f5:
                    33:9d:8a:5e:07:57:a7:c8:e1:d1:5a:b7:74:3a:f7:
                    4d:79:3a:98:a2:e7:17:e8:17:9a:da:dd:a0:9c:2c:
                    01:b0:cf:5c:80:b9:9b:9a:d4:17:60:59:0f:28:70:
                    e3:95:6e:8b:8b:c7:14:62:15:1b:b8:54:10:93:a6:
                    54:41:f1:98:1d:e7:bc:d2:ab:f8:ae:6f:0c:db:30:
                    16:04:8f:7a:68:ef:4a:bc:56:1f:e5:89:2c:6d:36:
                    19:c5:64:9a:af:40:42:6e:15:0b:57:0f:88:b1:7b:
                    1b:6b:20:4f:55:c5:87:54:4c:33:81:fc:68:8d:1c:
                    16:8f:66:f5:10:e7:8e:33:52:98:60:8c:06:43:12:
                    fe:b0:58:45:44:3a:67:01:98:8a:ed:74:c7:7a:89:
                    c3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7B:01:3D:67:8F:E4:5C:64:23:0D:4D:60:8D:69:22:C8:34:DE:8D
            X509v3 Authority Key Identifier:
                keyid:B6:10:C0:94:D1:EA:ED:0B:BD:5D:95:29:07:95:57:E5:35:6C:B5:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/B610C094D1EAED0BBD5D9529079557E5356CB598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B610C094D1EAED0BBD5D9529079557E5356CB598.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/3230302e3131352e32342e302f32312d3234203d3e20323633363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:32:ba:44:67:ea:b5:8e:28:63:38:ba:13:1b:1e:4b:8d:7a:
         a1:87:9c:55:2f:d4:ae:23:68:28:7b:c6:a0:30:1e:0b:89:5a:
         5d:01:60:60:e9:8c:e7:3c:03:53:c1:4d:26:48:e3:db:0d:a0:
         a9:0a:f6:51:81:b3:99:39:21:9d:5b:f2:41:43:7a:14:db:5e:
         af:b5:d2:08:65:ec:0f:0a:c7:71:a7:81:98:4a:0a:3e:fa:10:
         e1:21:03:77:70:91:0c:49:a1:fa:0d:4a:e4:12:3d:73:54:aa:
         48:b0:f0:3a:51:3b:74:33:fc:cc:8f:a6:61:46:3b:8e:17:de:
         34:b0:22:1e:0b:eb:b1:69:10:ad:61:bc:e5:75:04:0e:7c:96:
         a9:5d:f4:73:66:82:c7:9a:d8:b8:c7:51:0c:d8:a4:00:d6:1b:
         36:5f:9c:80:5b:6d:b0:fc:1c:2a:37:3f:63:f7:29:fc:02:db:
         bd:36:d7:a4:52:c6:20:2e:a0:e0:71:31:6e:4b:10:1b:06:0f:
         8b:ba:56:26:d4:18:a0:37:ce:d0:f5:86:68:4c:ff:37:e5:88:
         e7:30:a3:c6:70:8a:f4:60:50:3a:8b:3e:75:ed:ab:e4:e0:0f:
         a2:e9:1f:48:a3:59:0e:88:a1:47:02:e2:9e:28:2d:91:cf:09:
         91:d0:98:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:43 2024 by rpki-client on console-fra.rpki-client.org