Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3135372e302f32342d3234203d3e203238303431.roa
File:                     3230302e3132352e3135372e302f32342d3234203d3e203238303431.roa (raw, json)
Hash identifier:          QazCMV1uUsA99g4UfRsiF1XGpjZvIfDSoS7XDGjuRK8=
Subject key identifier:   63:23:36:41:1D:E6:5E:C8:80:9B:93:41:3E:08:F1:25:AE:5C:ED:96
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       65D637BDA731CBB2D57445277274752012EB7C49
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3135372e302f32342d3234203d3e203238303431.roa
Signing time:             Tue 05 Mar 2024 17:46:42 +0000
ROA not before:           Tue 05 Mar 2024 17:41:42 +0000
ROA not after:            Tue 04 Mar 2025 17:46:42 +0000
asID:                     28041
IP address blocks:        200.125.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d6:37:bd:a7:31:cb:b2:d5:74:45:27:72:74:75:20:12:eb:7c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Mar  5 17:41:42 2024 GMT
            Not After : Mar  4 17:46:42 2025 GMT
        Subject: CN=632336411DE65EC8809B93413E08F125AE5CED96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:a2:8b:a8:f6:1d:03:13:20:05:95:0d:e2:
                    64:f8:61:53:6c:ef:a3:b1:26:01:c5:06:40:b1:5a:
                    30:17:a9:50:a8:0e:8a:84:01:53:1d:f2:3f:eb:55:
                    ee:f1:2c:a1:5c:47:52:36:c9:91:ba:27:58:8b:12:
                    7e:e0:05:e9:ab:0a:d8:d0:31:2f:fb:8c:e0:9e:ea:
                    07:fc:45:72:0d:07:f3:f5:09:ff:ac:0c:ed:2f:64:
                    c2:bb:a4:02:dd:26:5a:ae:50:3b:98:f7:ca:b1:88:
                    8c:cd:d5:53:31:62:3d:1a:97:4b:40:90:35:26:a7:
                    5b:2b:84:df:75:53:1b:b6:ba:07:41:12:70:61:91:
                    64:b9:3c:87:a4:49:97:db:7c:5d:d7:26:ac:83:9a:
                    28:45:22:3f:2d:7b:a2:c5:dd:27:e5:44:bc:5b:ad:
                    d2:bb:a4:41:c6:43:69:cc:95:3d:aa:9f:a4:73:c4:
                    b4:a5:a0:ee:30:e6:5b:17:45:b4:c8:9a:a2:7e:a9:
                    c3:00:d8:9e:c9:f6:e8:3f:42:8a:cc:af:5d:ef:37:
                    8d:e5:27:a7:63:f1:bd:85:c6:8c:e5:ac:a5:60:6f:
                    bc:cd:70:90:59:9c:9a:19:a6:3d:d4:bf:d7:21:2a:
                    40:4e:0e:38:b5:e8:df:4b:45:51:20:4a:11:3e:bc:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:23:36:41:1D:E6:5E:C8:80:9B:93:41:3E:08:F1:25:AE:5C:ED:96
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3135372e302f32342d3234203d3e203238303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:de:a9:92:52:41:f6:6d:bc:d7:3d:2b:a9:62:43:37:d1:a8:
         3b:1c:34:f2:84:ef:4b:92:1e:68:f3:9e:75:1b:38:c7:12:9a:
         58:83:7b:d6:03:0e:90:a5:f9:a0:51:e0:e3:f0:a0:23:79:40:
         37:a4:9f:70:c3:63:ea:9e:95:21:69:76:af:07:ef:64:30:92:
         b5:25:33:58:1d:71:db:8b:db:d6:a6:77:99:9e:19:1c:49:85:
         ee:03:88:61:9b:2a:8c:6c:13:6a:94:ec:81:9f:d8:d0:b5:f2:
         12:94:5e:00:c6:bc:93:1b:9d:76:3f:35:68:8f:33:fa:8d:7e:
         c0:43:7c:89:82:76:39:73:da:41:e0:38:dc:0f:cb:22:6a:63:
         91:4d:76:ee:69:da:a5:4b:24:c8:e0:b0:c4:02:67:55:9e:26:
         09:cd:08:b7:32:ad:1d:b7:f8:43:f7:0d:3a:cd:5a:c2:db:c6:
         44:31:86:2e:2c:f2:e1:e8:d7:4c:6c:95:81:80:43:d3:9e:bb:
         ef:2b:a0:d7:a8:0f:75:59:62:b0:01:98:35:1c:8d:11:d6:f6:
         d2:a9:87:00:22:92:70:df:79:43:24:cf:9f:38:5a:b2:ee:93:
         e3:b6:dc:c1:8d:37:fc:3c:fa:0a:77:a0:82:8b:2d:0a:8f:00:
         ad:c0:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org