Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3134322e302f32342d3234203d3e203238303431.roa
File:                     3230302e3132352e3134322e302f32342d3234203d3e203238303431.roa (raw, json)
Hash identifier:          4yZExl5s7gSs02MOsdTG7OD10pXxG6fQP6duS1VT9mE=
Subject key identifier:   97:09:37:55:F9:C6:33:49:25:BE:1E:94:C9:51:38:DE:FD:0D:24:34
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       11C56E72E16A88F705616C45FC57DE2086543B96
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3134322e302f32342d3234203d3e203238303431.roa
Signing time:             Tue 05 Mar 2024 17:46:41 +0000
ROA not before:           Tue 05 Mar 2024 17:41:41 +0000
ROA not after:            Tue 04 Mar 2025 17:46:41 +0000
asID:                     28041
IP address blocks:        200.125.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c5:6e:72:e1:6a:88:f7:05:61:6c:45:fc:57:de:20:86:54:3b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Mar  5 17:41:41 2024 GMT
            Not After : Mar  4 17:46:41 2025 GMT
        Subject: CN=97093755F9C6334925BE1E94C95138DEFD0D2434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:b2:12:7c:52:7f:6b:94:08:96:8b:f2:7b:
                    29:be:67:a6:6c:52:ad:26:22:2e:6a:7a:4d:7c:25:
                    4d:33:ff:0f:b6:0c:5a:93:67:ff:a1:94:2d:94:0e:
                    3c:84:ef:2d:12:30:8f:a3:b1:3d:3c:88:7b:ff:b7:
                    9a:f6:9e:40:c8:bd:11:61:a0:dd:eb:e1:4d:cf:8e:
                    ed:45:63:62:3c:cf:54:be:0d:d2:33:bd:98:45:01:
                    d5:14:81:e7:81:ae:bc:bc:f8:78:2e:a6:f0:66:ff:
                    5f:4b:61:da:d0:ef:cf:8f:1f:3b:f3:da:22:1a:7e:
                    68:2a:d0:28:58:53:ee:44:e1:ca:4a:41:49:33:07:
                    29:63:15:33:1a:ef:0c:6c:46:52:9d:3c:29:68:e4:
                    81:8b:1d:ce:67:76:43:14:9a:88:d9:f5:cf:7a:e0:
                    06:ee:84:3b:7e:42:24:1c:03:3c:bf:da:c7:cb:9e:
                    28:f2:bd:76:f5:b7:f7:d1:89:9f:87:ff:b1:ec:1e:
                    01:b7:25:53:c1:97:ca:a3:d3:b3:c6:d4:4e:a0:0b:
                    03:f9:04:9b:b3:dc:2d:b7:5a:90:53:9f:12:4d:b3:
                    01:0c:b5:ec:db:51:a5:29:a3:7c:cc:d2:18:c6:23:
                    6c:fb:c0:4f:1f:c0:01:cc:86:c3:53:bc:e8:06:36:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:09:37:55:F9:C6:33:49:25:BE:1E:94:C9:51:38:DE:FD:0D:24:34
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3134322e302f32342d3234203d3e203238303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:38:bb:a3:00:f2:7e:bc:43:0e:57:f1:c1:e9:3e:84:b9:
         a6:2b:50:90:20:be:7f:b4:de:d7:5d:e0:7d:1c:6c:3d:9e:e0:
         86:56:67:f0:ba:a3:3b:76:cd:84:99:b9:87:ca:45:fb:08:2a:
         e8:29:57:a5:40:11:32:5c:23:30:fc:99:b1:7e:c6:4d:a1:37:
         6d:4f:42:85:3e:c4:44:0e:9e:cd:fb:2b:e7:ff:bd:fd:5d:cf:
         f6:37:2d:f7:3c:88:8e:96:84:cb:21:3b:e6:e7:d8:a5:8a:5f:
         21:4e:60:e2:76:b6:2d:7b:33:bf:25:36:5c:5c:af:c4:10:95:
         c8:18:c9:6c:ea:a6:fb:d2:0c:55:6f:b1:b1:7b:43:4b:1d:fc:
         e1:c1:87:33:1b:54:b6:74:66:ee:7b:06:20:81:c1:2e:5f:f8:
         55:16:69:12:e0:75:97:ce:68:bd:74:2e:ab:89:0d:c9:3d:50:
         85:34:23:fb:24:37:59:33:ed:f2:eb:79:ec:e0:a7:73:8e:18:
         fe:9c:33:af:05:a2:84:d3:23:0f:58:24:82:65:d5:7b:e4:fa:
         ab:9c:43:ca:4f:be:6f:15:61:44:d3:70:57:c7:7d:3d:ea:57:
         61:2c:15:f9:f3:6e:80:01:6a:44:ba:84:d8:59:02:51:7c:85:
         05:a3:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:12 2024 by rpki-client on console-ams.rpki-client.org