Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137312e302f32342d3234203d3e20323639393331.roa
File:                     3230302e3132352e3137312e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          wchwFgMkVXa+unyQ0FpoiVKyqLCk3mTkm2KFDg2GH3M=
Subject key identifier:   33:F9:AD:19:2E:9A:3A:99:80:8E:9D:1A:31:B9:02:5E:DA:E2:69:40
Certificate issuer:       /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial:       44BA1AA9C1ED090068899E665D4975EF232934BB
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137312e302f32342d3234203d3e20323639393331.roa
Signing time:             Tue 05 Mar 2024 17:53:59 +0000
ROA not before:           Tue 05 Mar 2024 17:48:59 +0000
ROA not after:            Tue 04 Mar 2025 17:53:59 +0000
asID:                     269931
IP address blocks:        200.125.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ba:1a:a9:c1:ed:09:00:68:89:9e:66:5d:49:75:ef:23:29:34:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
        Validity
            Not Before: Mar  5 17:48:59 2024 GMT
            Not After : Mar  4 17:53:59 2025 GMT
        Subject: CN=33F9AD192E9A3A99808E9D1A31B9025EDAE26940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:82:9e:47:2b:5b:c7:d5:b1:46:7b:08:14:
                    2b:7b:00:d6:25:e7:60:aa:34:5d:44:0e:ad:f1:f0:
                    4f:7f:b7:91:d5:21:ef:25:41:f3:36:44:7b:a0:fc:
                    0b:32:6d:f0:2f:9c:55:2c:0d:54:34:60:70:b2:eb:
                    70:cf:3d:b9:24:04:f7:41:13:67:e3:df:18:c7:1e:
                    05:f9:0e:35:f3:91:c9:e3:01:d3:76:5d:8b:59:35:
                    c2:b0:eb:a1:7f:2b:4e:2b:96:15:ec:57:37:d5:87:
                    7e:c6:af:ba:0b:d9:b7:a1:3f:c2:3c:05:7b:75:52:
                    6d:f9:d4:6f:05:b0:0d:e5:ff:df:b3:c8:43:62:ab:
                    73:e8:f0:cb:d0:3b:6c:8c:8a:ae:b2:40:2a:0c:73:
                    33:8c:6a:1f:a1:34:65:20:e3:b2:9d:69:c9:7f:2c:
                    9a:da:e8:1b:8c:23:14:4d:2d:85:ec:4b:dc:d8:c9:
                    c6:76:f4:41:06:f4:b1:11:e5:b3:5f:3f:e5:b1:75:
                    7a:9a:02:c6:d8:ed:69:e9:2a:08:fe:b3:29:2c:a3:
                    d5:90:9c:d6:82:f2:f6:13:c1:85:39:e6:d4:59:26:
                    44:5c:ed:0a:b0:21:49:cb:52:fa:19:38:9d:b5:5a:
                    ec:db:51:8d:77:8b:06:0e:b8:d2:d7:76:7b:11:3f:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F9:AD:19:2E:9A:3A:99:80:8E:9D:1A:31:B9:02:5E:DA:E2:69:40
            X509v3 Authority Key Identifier:
                keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137312e302f32342d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:12:b9:f8:15:b3:54:0c:2a:9a:81:d1:32:10:b5:29:d5:c4:
         78:94:97:21:42:f5:01:fc:65:ba:e5:73:a2:b7:61:13:50:a8:
         76:85:8a:e1:95:7e:f4:f0:a0:67:a4:6f:35:f3:36:8a:34:05:
         25:92:27:c6:0d:ac:0e:78:18:4d:ee:43:99:39:ba:de:45:87:
         4a:b8:8e:00:fa:0d:df:2e:ab:de:82:06:17:d9:78:48:92:b6:
         e1:43:a1:1f:31:81:8e:86:b1:47:16:96:86:3d:43:26:3d:93:
         e9:ea:9d:0b:1d:02:87:6d:4b:c6:dc:20:c7:ce:48:11:d9:0a:
         16:e4:4f:4e:17:83:fd:68:03:82:0f:55:d6:81:19:36:d8:c4:
         e9:34:01:c2:f7:e3:74:b1:d4:84:98:b8:b7:3e:79:20:aa:ac:
         fc:8c:7e:a5:2c:e4:f5:45:43:90:2c:2c:1d:be:8c:61:43:e8:
         fd:0e:8a:99:f2:e2:3b:b6:5d:e8:7d:b8:a3:ea:a5:9e:8f:d5:
         c4:40:4e:20:e1:ef:78:0e:8b:c0:43:3d:d4:b1:af:db:43:03:
         59:29:8e:1a:f0:84:1e:8b:6b:45:c6:32:61:8f:d3:79:51:1b:
         39:09:20:1d:71:a6:41:e7:05:a6:7d:9c:26:46:62:51:79:8e:
         51:ef:d3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org