Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/3230302e3131352e31382e302f32342d3234203d3e203532343239.roa
File:                     3230302e3131352e31382e302f32342d3234203d3e203532343239.roa (raw, json)
Hash identifier:          4fWs1kt/G3QxyRmeC7NgvB4biPd7Jxtpryf1AFHceUo=
Subject key identifier:   AA:87:E1:95:1A:70:6A:E9:ED:B7:8C:29:0F:F6:EC:89:BB:98:EC:BF
Certificate issuer:       /CN=F3D431735054D4CDE390B55F4A2B7D7C2CC39341
Certificate serial:       3F67C397E1CE108B50486CB7AD19FE3F1941595F
Authority key identifier: F3:D4:31:73:50:54:D4:CD:E3:90:B5:5F:4A:2B:7D:7C:2C:C3:93:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/3230302e3131352e31382e302f32342d3234203d3e203532343239.roa
Signing time:             Fri 13 Dec 2024 00:10:00 +0000
ROA not before:           Fri 13 Dec 2024 00:05:00 +0000
ROA not after:            Fri 12 Dec 2025 00:10:00 +0000
asID:                     52429
IP address blocks:        200.115.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 02:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:67:c3:97:e1:ce:10:8b:50:48:6c:b7:ad:19:fe:3f:19:41:59:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D431735054D4CDE390B55F4A2B7D7C2CC39341
        Validity
            Not Before: Dec 13 00:05:00 2024 GMT
            Not After : Dec 12 00:10:00 2025 GMT
        Subject: CN=AA87E1951A706AE9EDB78C290FF6EC89BB98ECBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f5:83:33:35:f4:df:d3:1e:df:c8:70:68:8e:
                    25:ab:ec:46:2e:78:1b:e2:c0:3e:72:09:79:62:26:
                    a7:29:37:7c:e3:ba:9b:d5:8b:7c:13:41:6f:86:ff:
                    08:ea:f3:0e:98:9d:e4:de:13:4d:21:32:b3:ec:a8:
                    a5:50:c6:0b:cc:cb:71:68:5b:2c:a6:43:43:bb:b2:
                    44:4a:ff:80:96:e7:9a:35:ea:ce:89:e8:3f:e7:14:
                    e3:24:32:59:fa:74:00:cf:df:e6:5f:b8:16:38:eb:
                    f3:03:10:d8:c2:b7:08:67:0d:2d:13:57:8d:0b:42:
                    1e:85:61:39:15:ff:19:dd:30:f8:42:12:82:1d:a4:
                    61:ed:cb:e5:a5:28:85:8d:5b:f3:be:75:77:f5:a2:
                    24:be:02:79:7c:70:e3:a4:e3:24:67:66:96:fd:f4:
                    7a:fa:46:39:89:d3:e2:5b:eb:77:0e:ba:d6:e4:99:
                    f7:df:b0:2a:1d:9b:15:9d:98:01:fd:53:c1:4a:ee:
                    e6:22:e8:2a:5c:52:6d:2d:4f:8a:d1:bc:8a:4e:18:
                    6f:02:07:7e:f1:7f:42:61:8e:6f:48:60:d7:00:be:
                    aa:0c:ee:30:ce:d9:a9:2e:35:59:cf:ba:82:c6:c8:
                    d0:58:5b:d4:a5:b8:04:2e:c3:10:09:b5:a7:87:34:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:87:E1:95:1A:70:6A:E9:ED:B7:8C:29:0F:F6:EC:89:BB:98:EC:BF
            X509v3 Authority Key Identifier:
                keyid:F3:D4:31:73:50:54:D4:CD:E3:90:B5:5F:4A:2B:7D:7C:2C:C3:93:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/3230302e3131352e31382e302f32342d3234203d3e203532343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:44:4b:a2:97:f5:71:fb:ff:2f:c2:de:dc:4c:7a:47:0a:ec:
         cb:61:d9:f6:f9:82:84:59:cd:79:24:3f:64:67:2a:fc:fd:9d:
         17:ce:84:76:17:42:95:c9:8b:1d:39:40:94:89:80:be:93:5b:
         b0:92:51:ab:1b:91:32:0e:ee:e0:4d:8b:96:64:bd:69:f2:9c:
         4f:da:3a:db:16:1d:a5:9d:91:75:57:cf:61:ce:c1:96:28:9d:
         64:78:ef:f8:bf:98:8e:0a:71:14:a7:85:18:d1:ff:92:d3:72:
         ba:a2:65:28:76:00:83:e3:64:93:7e:6d:45:70:03:fc:23:8d:
         6e:24:7a:49:99:85:aa:a6:ba:81:de:dd:fb:8d:33:d0:cc:ac:
         38:0c:1f:8f:59:93:58:47:00:30:78:58:ec:8b:d6:b5:8d:f2:
         1d:14:91:29:66:97:11:27:7e:39:8e:aa:6e:05:63:41:30:df:
         c4:77:ca:97:cf:ec:04:30:b3:60:69:2d:16:e9:d1:0a:1e:3c:
         a0:5f:20:b7:29:08:fd:06:46:0b:1a:e2:29:fd:5c:be:8e:a4:
         22:e2:24:d0:bf:08:a5:0a:b5:0e:d3:d7:1a:17:c1:9c:7a:10:
         54:9d:67:35:77:bd:6b:06:84:be:8c:33:68:46:d2:2e:3a:66:
         b0:90:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:17 2025 by rpki-client