Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35382e302f32342d3234203d3e203532343434.roa
File:                     3230302e3132332e35382e302f32342d3234203d3e203532343434.roa (raw, json)
Hash identifier:          nTd4i1V2mW+mCFW9QyJk4ZdGEAdXB3Yk8N5VHuMRtM0=
Subject key identifier:   66:27:07:69:A7:3D:81:A5:DE:58:2E:66:92:77:33:1C:29:6E:1E:EB
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       33E2D4977A476A86A28CF641B20DCD4AE775F0FC
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35382e302f32342d3234203d3e203532343434.roa
Signing time:             Tue 11 Jun 2024 14:00:00 +0000
ROA not before:           Tue 11 Jun 2024 13:55:00 +0000
ROA not after:            Tue 10 Jun 2025 14:00:00 +0000
asID:                     52444
IP address blocks:        200.123.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e2:d4:97:7a:47:6a:86:a2:8c:f6:41:b2:0d:cd:4a:e7:75:f0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Jun 11 13:55:00 2024 GMT
            Not After : Jun 10 14:00:00 2025 GMT
        Subject: CN=66270769A73D81A5DE582E669277331C296E1EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2d:6b:70:6d:eb:79:11:de:22:f3:90:18:9c:
                    fc:36:e6:7f:97:ab:b1:20:19:77:68:85:33:6c:70:
                    7d:f0:98:28:61:e1:42:74:27:03:03:10:78:d2:07:
                    3a:d0:da:51:48:8c:6b:93:11:3a:b2:09:62:a7:6c:
                    1c:c1:67:77:1b:13:2a:16:81:c5:a2:a2:70:d7:73:
                    84:5d:50:97:e9:4d:b9:71:a0:7c:80:21:15:a5:1e:
                    ea:27:1d:88:e5:a3:07:8e:0c:4d:22:1a:47:b2:21:
                    44:d4:14:d7:49:9d:6b:48:01:91:43:af:2a:6a:ca:
                    f1:18:61:e4:75:b7:fa:f7:50:75:ad:61:19:50:ce:
                    e6:5a:88:0b:74:2d:72:a4:c0:34:2f:51:fb:60:14:
                    08:53:4d:a1:59:4c:c4:49:44:6d:6f:1a:37:8c:36:
                    95:59:15:8f:a4:ab:f9:38:70:21:ba:60:d2:74:78:
                    5c:df:e5:01:3b:7f:8f:97:51:6e:f0:f6:2a:08:f2:
                    f0:65:89:55:30:2b:1e:fa:89:ec:9c:be:8f:83:c8:
                    5e:c8:6e:d2:e7:bf:ea:3a:74:bf:86:76:cb:2c:02:
                    35:f6:15:da:af:8f:28:71:9f:45:f9:0c:4c:9c:f9:
                    9b:2d:5e:37:db:b0:89:44:cb:10:10:a2:23:cf:f7:
                    d3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:07:69:A7:3D:81:A5:DE:58:2E:66:92:77:33:1C:29:6E:1E:EB
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35382e302f32342d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:94:f2:07:f1:de:e5:83:b3:ac:bf:0b:d1:44:00:96:d8:14:
         34:1b:53:c2:33:31:92:57:f1:ab:c9:46:c1:50:4c:09:ab:f2:
         ad:1f:9a:88:8d:e6:aa:b0:d7:27:98:5b:03:ca:7e:11:b0:3c:
         dc:c9:9f:da:a3:41:cb:5e:6e:93:5b:6d:92:ae:64:c1:2f:d6:
         f2:e0:20:74:9c:fb:e0:f2:46:d6:44:90:06:c6:b8:bf:fe:44:
         26:ed:1b:fc:58:24:4d:f5:81:fd:d6:c5:3c:18:90:e4:75:90:
         9b:68:e7:33:e8:20:f7:11:70:3c:78:72:c9:e7:97:50:7e:6d:
         9c:d2:a6:2b:8d:b1:16:32:b1:ef:33:7f:26:1f:0c:d5:5c:25:
         10:a0:cc:f2:7f:56:ab:25:86:75:1c:b6:73:37:24:8f:b7:5a:
         78:eb:fc:69:de:91:5b:fa:57:5b:56:90:70:f4:95:25:32:a6:
         ff:79:fe:39:10:1b:40:c6:46:09:5a:5c:a9:a3:fc:d4:18:d8:
         8f:6a:2b:79:66:34:98:56:cb:ca:3f:23:d9:a9:45:5e:f3:a2:
         b7:34:f8:a2:52:57:7a:b2:46:3a:96:4e:4c:b3:5f:54:23:84:
         28:20:63:ed:1f:94:2e:fa:24:4f:52:74:5c:26:62:ec:81:00:
         9c:32:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org