Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234322e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234322e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          5f6B7QipdE/FFNT8fxQ5Up3ZbUmEacY+tTK5peu3hbo=
Subject key identifier:   D7:B2:4E:37:A7:18:F4:23:46:53:37:59:34:47:9B:35:12:69:F8:E2
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       7023DCD06739DE5681A841C479EA35990FDFB107
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234322e302f32342d3239203d3e203634313230.roa
Signing time:             Thu 22 Aug 2024 00:00:00 +0000
ROA not before:           Wed 21 Aug 2024 23:55:00 +0000
ROA not after:            Thu 21 Aug 2025 00:00:00 +0000
asID:                     64120
IP address blocks:        200.49.242.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:23:dc:d0:67:39:de:56:81:a8:41:c4:79:ea:35:99:0f:df:b1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Aug 21 23:55:00 2024 GMT
            Not After : Aug 21 00:00:00 2025 GMT
        Subject: CN=D7B24E37A718F4234653375934479B351269F8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:79:f4:70:e4:0b:8a:51:9f:de:55:e9:84:
                    f4:fa:bd:9a:c8:a9:bd:55:f6:4c:4a:c1:28:39:d8:
                    64:59:51:71:14:0c:6a:89:9b:de:fa:ed:1a:f7:2d:
                    88:26:19:a1:db:12:9a:c9:fd:d5:31:f3:44:6c:17:
                    56:c7:ea:c6:71:47:64:07:ba:00:9c:4a:77:d5:ca:
                    39:c0:a7:12:79:fa:23:68:b1:6a:02:68:1f:7b:d3:
                    f3:c1:e5:4b:3e:76:f9:81:03:6a:24:d0:11:b8:ef:
                    6f:76:4e:70:98:59:3d:cc:36:64:3b:61:03:17:62:
                    8b:82:1b:81:d5:d4:f9:35:97:a9:f6:8a:6c:93:71:
                    bb:a6:02:f4:91:7e:57:0e:54:67:8a:20:cc:6e:03:
                    16:de:59:5b:e8:47:45:c2:95:df:04:26:80:59:0a:
                    63:10:49:b3:5e:ec:bd:b3:eb:69:d0:a8:b2:12:46:
                    5d:c2:ec:0c:a9:2d:ec:54:bb:42:64:9d:e4:09:4d:
                    5b:b2:bc:49:25:b9:92:a8:e9:69:bd:9b:aa:13:6f:
                    08:00:fe:ed:bf:6c:c4:83:d5:64:5f:f4:47:91:9f:
                    d8:a1:3a:65:90:d2:1b:4c:f3:28:75:a6:93:fc:a2:
                    95:6a:de:eb:0b:19:f8:51:f8:af:6c:01:48:3f:6a:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B2:4E:37:A7:18:F4:23:46:53:37:59:34:47:9B:35:12:69:F8:E2
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234322e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:00:88:ba:7b:e4:2d:83:4a:e6:47:5f:8c:51:8a:08:3c:6f:
         69:8f:2d:3b:a5:b7:92:55:38:68:9c:48:3f:9f:87:b5:36:0e:
         f1:fd:5d:4b:f5:84:92:2b:41:34:58:c5:67:33:ff:f9:4c:dc:
         de:47:b6:3f:7f:ac:19:a9:c9:41:ac:66:f6:ca:03:c7:83:37:
         9b:71:71:04:42:9f:54:26:e1:ee:30:8d:34:03:93:8f:80:e5:
         f6:c9:66:c8:15:76:e7:b8:49:32:19:f7:10:54:fd:a6:7e:b1:
         5f:93:70:f8:23:51:11:73:67:ba:2c:17:65:5a:ae:b8:f9:9e:
         79:9d:1f:06:8b:17:3a:a2:6f:48:5f:b2:ff:21:bd:44:7e:82:
         82:ad:c5:ab:88:73:06:b0:82:72:be:fc:87:64:3c:11:69:cf:
         cb:38:5b:4f:59:97:83:62:41:33:20:68:cd:2e:4d:52:fe:3b:
         17:8d:ad:cf:46:87:93:f2:6b:96:99:92:6a:95:e5:0b:b5:b1:
         b9:bd:4b:59:9b:04:0b:c5:f0:3e:af:61:30:42:38:ba:9d:e4:
         90:60:22:a1:63:5a:3e:37:09:4e:f2:ba:05:1b:f9:2e:4c:ce:
         83:b0:e2:e4:0d:07:25:4a:52:b4:db:81:b3:ce:a8:76:af:e8:
         e8:d3:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org