Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/3230302e312e3135342e302f32342d3234203d3e203238303435.roa
File:                     3230302e312e3135342e302f32342d3234203d3e203238303435.roa (raw, json)
Hash identifier:          0UHSy4irhjP5TWK9AddAYcUIrHd4hiRQwmpP9jTXIWg=
Subject key identifier:   CB:A5:9E:59:9B:DB:B9:06:23:3A:0E:C0:A2:B2:89:2A:AA:23:FA:33
Certificate issuer:       /CN=D7C81DA3772B5EEAE19752E755626DBDC73EDFDD
Certificate serial:       14A0000D686D91371609212BD0AD2897D005A00A
Authority key identifier: D7:C8:1D:A3:77:2B:5E:EA:E1:97:52:E7:55:62:6D:BD:C7:3E:DF:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/3230302e312e3135342e302f32342d3234203d3e203238303435.roa
Signing time:             Tue 05 Mar 2024 18:22:17 +0000
ROA not before:           Tue 05 Mar 2024 18:17:17 +0000
ROA not after:            Tue 04 Mar 2025 18:22:17 +0000
asID:                     28045
IP address blocks:        200.1.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a0:00:0d:68:6d:91:37:16:09:21:2b:d0:ad:28:97:d0:05:a0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C81DA3772B5EEAE19752E755626DBDC73EDFDD
        Validity
            Not Before: Mar  5 18:17:17 2024 GMT
            Not After : Mar  4 18:22:17 2025 GMT
        Subject: CN=CBA59E599BDBB906233A0EC0A2B2892AAA23FA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:a2:dc:f4:21:ac:83:84:3c:b6:0b:ae:6a:
                    09:e3:0b:a2:ad:88:88:43:f4:22:6f:2f:23:99:24:
                    61:c5:fa:e2:b6:27:91:a1:ee:20:0e:75:6f:10:fd:
                    56:ea:9c:05:84:1d:d9:60:53:89:6f:4b:53:8c:6a:
                    2c:87:b7:35:25:f5:b3:64:4f:87:0e:e0:8f:89:20:
                    6f:51:df:40:ea:7a:6b:13:bf:7d:2c:3a:bc:40:ca:
                    26:d7:7c:e8:18:5a:b5:51:f8:1f:e1:4d:91:9a:97:
                    a8:89:28:f3:f4:05:8f:8c:49:47:e7:ac:1e:49:d9:
                    72:70:00:ab:41:96:0d:6c:df:c8:a8:f8:db:65:10:
                    49:37:36:9f:36:43:3d:ae:f4:52:cd:ee:f3:b8:e6:
                    a7:3d:c9:78:27:18:b6:71:fd:7f:c4:3f:48:73:61:
                    62:0c:87:5c:98:31:dd:32:38:8f:19:49:26:da:0a:
                    35:34:29:e7:fa:50:1d:59:d4:1a:30:fe:1a:b1:fb:
                    ce:e5:5b:f1:c7:cd:e8:83:e6:7e:73:c4:69:35:79:
                    a1:47:49:50:9d:0f:ba:f3:1f:75:5b:c3:76:26:24:
                    8a:a4:63:a6:a1:e4:3d:ea:46:a2:77:ae:04:d5:e9:
                    32:a6:23:4f:02:b3:f1:48:66:e5:5b:48:db:7e:ec:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A5:9E:59:9B:DB:B9:06:23:3A:0E:C0:A2:B2:89:2A:AA:23:FA:33
            X509v3 Authority Key Identifier:
                keyid:D7:C8:1D:A3:77:2B:5E:EA:E1:97:52:E7:55:62:6D:BD:C7:3E:DF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C81DA3772B5EEAE19752E755626DBDC73EDFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11812E0B04E360A066E6848201FEFCC655150BDCED2A3A00B2A0D4810497E382/0/3230302e312e3135342e302f32342d3234203d3e203238303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:e2:19:01:63:2a:2d:b5:dc:21:d1:15:47:8d:dd:1e:a8:08:
         9a:24:2e:d8:f2:37:8c:a6:d1:26:09:f8:3b:53:3d:91:46:9e:
         d8:29:da:52:a7:f2:f7:6d:ae:0b:2e:19:3d:59:47:92:af:b7:
         01:ed:c5:73:49:77:cf:89:73:e3:e3:c1:24:25:a7:c5:61:f4:
         3b:5e:11:3c:25:59:57:e6:d0:99:9c:82:87:3a:fd:c1:96:5c:
         dd:16:5a:38:7e:75:6e:29:1d:2b:3b:f0:e5:34:f5:1a:94:f8:
         ca:88:5a:ce:ed:66:59:c0:58:31:04:6a:d7:93:22:76:43:de:
         9f:77:9a:90:0b:f2:ca:ad:39:4c:00:13:be:91:5c:37:10:32:
         98:f9:06:13:e3:78:c6:1b:eb:d4:f2:87:f3:7b:ae:ee:43:2f:
         d1:27:42:57:b0:58:62:b9:5c:7d:2c:1e:a7:b2:e9:be:bc:0f:
         9a:e6:78:9e:d5:47:75:45:29:39:06:a9:bf:91:61:5e:ec:46:
         1f:67:f6:17:55:f9:f7:4a:f6:ed:69:82:97:15:29:fd:91:e7:
         e9:d1:92:2c:73:fc:c3:c9:42:8c:2e:f6:f2:01:94:28:5b:e7:
         58:09:c7:2f:5c:55:f7:af:64:c2:8d:03:af:54:ab:a4:3a:37:
         f8:31:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org