Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234332e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234332e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          jPi8B5OoEAqB3/lEHt/r6gNpFeiDaGc9tbzCG0i3L6c=
Subject key identifier:   EC:7F:52:96:9B:52:41:51:63:A6:77:FB:BD:94:E5:76:6A:71:E1:6E
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       395A96D756E43141F3583D6C089530DFF105E5ED
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234332e302f32342d3239203d3e203634313230.roa
Signing time:             Thu 22 Aug 2024 00:00:00 +0000
ROA not before:           Wed 21 Aug 2024 23:55:00 +0000
ROA not after:            Thu 21 Aug 2025 00:00:00 +0000
asID:                     64120
IP address blocks:        200.49.243.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5a:96:d7:56:e4:31:41:f3:58:3d:6c:08:95:30:df:f1:05:e5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Aug 21 23:55:00 2024 GMT
            Not After : Aug 21 00:00:00 2025 GMT
        Subject: CN=EC7F52969B52415163A677FBBD94E5766A71E16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:67:f4:02:08:38:6c:be:c2:e0:d4:a8:32:
                    45:9e:90:f9:47:fa:32:57:9a:46:75:8e:d4:1c:3c:
                    b9:51:44:57:50:5d:d7:d5:4f:48:ac:a9:2d:91:a6:
                    38:5c:f3:e0:44:cd:c9:e0:81:9f:f3:78:2c:8e:7d:
                    49:81:ea:e2:84:99:f0:64:fe:c9:47:b1:35:5f:cf:
                    74:3a:89:24:45:34:48:bf:0c:d6:38:e9:ae:36:6b:
                    fb:2a:11:13:83:f1:bd:56:d9:ec:42:1d:08:ae:09:
                    0a:42:70:ac:83:7d:00:f6:09:d7:fe:7d:10:ca:12:
                    b7:5b:7f:ec:65:c2:78:3b:2d:61:0c:ea:79:48:97:
                    7c:79:5f:38:c8:23:57:19:a3:d0:b4:bd:12:06:a7:
                    89:a9:f3:65:a0:29:61:6c:2b:e6:9f:49:7a:5f:aa:
                    67:17:b4:23:38:c6:7b:ce:1d:1f:df:a6:57:2b:23:
                    f1:6c:28:4e:56:0d:46:a9:dc:1b:c2:2c:1a:50:da:
                    b2:1f:e5:0d:2b:e1:72:9c:36:e2:2c:d1:2c:02:b2:
                    87:1b:71:86:dc:a4:d0:a3:d3:a1:a6:77:41:de:7f:
                    a2:44:b4:d3:fb:ab:49:06:0b:da:20:d0:cb:27:64:
                    19:18:7d:92:18:f3:46:8d:9e:cb:6d:a4:da:e3:50:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7F:52:96:9B:52:41:51:63:A6:77:FB:BD:94:E5:76:6A:71:E1:6E
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234332e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:37:f1:b5:77:a0:d6:c4:9a:14:48:6c:b5:ab:dd:ac:db:12:
         e8:6d:6e:3a:ad:27:d2:cc:2d:35:4b:04:3b:b1:a2:00:9a:2e:
         8f:80:b2:f0:24:a1:b9:6a:dc:61:85:d9:4b:1a:36:88:c4:8e:
         53:b7:1d:f6:25:e0:67:ef:82:82:52:1a:c1:30:24:ab:04:c6:
         15:a9:da:cc:b2:78:c0:76:6f:49:6a:34:c1:29:42:fd:37:c5:
         82:6d:bd:07:b1:9a:5e:5d:de:a5:91:c9:94:85:12:bd:1b:26:
         34:87:4b:cb:19:c9:9c:28:48:1d:91:c3:20:56:29:bb:bc:6b:
         41:4f:76:2e:77:88:d6:42:b6:3c:89:18:1e:e4:61:81:c6:5d:
         b3:2e:76:90:2f:39:4f:dc:04:9b:12:c8:57:b2:d0:7d:39:1f:
         8b:bc:5c:38:50:0c:09:1f:e7:fe:40:23:ba:d2:0c:e4:dc:ac:
         28:a9:9e:bb:35:e0:ad:40:0b:95:c9:f0:26:3d:ec:4e:34:1e:
         04:c5:ac:8c:62:f0:59:83:f7:18:b1:77:62:76:84:92:a6:ec:
         48:66:d8:e3:05:ea:3a:03:2d:ed:5f:09:4f:67:09:af:17:37:
         c0:ec:6d:02:14:ad:7c:17:7c:f9:18:84:a2:70:7f:10:b5:f1:
         f2:29:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org