Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38302e302f32302d3332203d3e203532333736.roa
File:                     3230302e3131352e38302e302f32302d3332203d3e203532333736.roa (raw, json)
Hash identifier:          z9p0UBT/Kn5cHZ13XAZeCXajLc93KeIcUwvHO0eGGH8=
Subject key identifier:   C8:91:5E:56:24:68:66:34:A9:E5:66:E2:21:25:50:A0:8A:F5:DD:D2
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       555AD68E37E6FF3534DAB1B448B0BE3BE44EB314
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38302e302f32302d3332203d3e203532333736.roa
Signing time:             Tue 05 Mar 2024 18:16:14 +0000
ROA not before:           Tue 05 Mar 2024 18:11:14 +0000
ROA not after:            Tue 04 Mar 2025 18:16:14 +0000
asID:                     52376
IP address blocks:        200.115.80.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5a:d6:8e:37:e6:ff:35:34:da:b1:b4:48:b0:be:3b:e4:4e:b3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:14 2024 GMT
            Not After : Mar  4 18:16:14 2025 GMT
        Subject: CN=C8915E5624686634A9E566E2212550A08AF5DDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:7f:4e:0e:3b:23:39:a7:e9:66:83:69:dc:
                    3d:bb:b8:52:6a:db:a0:90:57:6b:85:3a:96:e0:af:
                    ee:21:7b:dc:3a:c0:47:d1:3a:1e:3a:a3:b4:b0:e3:
                    ef:8b:39:83:e2:e9:1e:69:a1:17:ba:d9:ab:4f:ae:
                    51:9a:40:9d:0e:80:5e:bd:58:d7:e9:cf:0c:ae:67:
                    83:5c:29:65:23:77:fe:3e:40:54:f5:a2:ab:31:aa:
                    51:cd:44:36:0b:eb:10:51:98:75:62:8d:dd:fb:98:
                    45:e3:37:27:2b:e9:64:75:f2:bd:6a:b2:35:ad:1c:
                    5d:2e:73:4b:50:bf:a2:6f:35:b3:9c:ab:4a:76:b2:
                    5e:54:71:93:c3:1a:5f:fb:4d:6b:49:95:be:34:79:
                    64:b9:ff:63:eb:8b:a9:e1:6a:8e:d6:10:26:0e:2d:
                    05:87:83:3f:b2:a0:c6:cc:27:cc:82:f3:75:36:cd:
                    e1:f9:11:e6:8b:ea:43:5e:ee:c2:aa:8a:73:e6:43:
                    c0:0b:63:1a:9d:9e:76:d6:5b:b2:36:dd:0d:87:ca:
                    5b:8d:bf:7c:37:65:e4:70:76:a5:f4:8d:d2:9a:98:
                    d1:75:ca:78:72:82:2e:66:6b:0d:88:b2:03:32:1f:
                    f4:1f:24:06:34:38:99:93:45:8e:63:bb:c0:74:c5:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:5E:56:24:68:66:34:A9:E5:66:E2:21:25:50:A0:8A:F5:DD:D2
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38302e302f32302d3332203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:d3:bc:15:4e:66:cc:18:b3:74:ff:f5:12:73:c3:40:75:9e:
         78:36:e5:98:4f:7e:3c:98:17:12:83:38:bb:6d:3c:a8:79:94:
         0d:d9:63:ec:b0:8b:00:f1:48:01:72:4c:04:bc:70:d1:9b:71:
         61:a8:55:54:4e:67:11:c8:04:ef:d9:46:fe:30:71:7a:c6:da:
         43:dc:d6:35:fc:d7:b7:5c:44:1f:3c:c0:09:7d:c8:95:a4:66:
         cb:61:3f:e1:31:8c:3c:dc:8d:14:86:fd:22:15:83:f5:71:e4:
         18:28:5a:dd:a9:67:47:86:85:fe:aa:ec:c6:54:fc:20:2e:7b:
         d4:5f:a2:76:be:8d:78:a3:50:47:80:5e:0b:9c:70:74:8d:08:
         58:25:1c:79:2e:47:67:ce:12:53:08:6e:cb:b0:b0:4d:64:e2:
         d5:34:c2:50:fe:60:a1:a5:03:62:0e:a5:d8:12:df:d4:bd:42:
         8c:5c:69:63:b9:91:46:93:dc:3f:df:1c:2b:a5:fe:79:51:0b:
         15:24:db:14:ee:71:a5:a7:6a:92:ca:c2:77:a4:60:1b:63:62:
         a5:3d:a1:cd:49:f0:4d:06:42:02:6a:e2:db:58:38:79:5b:59:
         75:ac:b0:a9:a1:54:ee:44:55:86:19:a6:fd:20:83:76:5a:06:
         c6:dc:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org