Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38302e302f32342d3234203d3e203631343935.roa
File:                     3230302e3131352e38302e302f32342d3234203d3e203631343935.roa (raw, json)
Hash identifier:          sP5OPKBTDi0buy+QltCfprLOFRb7Sqlhm/kVlIJscfE=
Subject key identifier:   06:A4:40:9D:A2:BB:70:9C:87:1B:BC:32:3E:CF:96:BC:D2:CD:60:23
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       283B115A63E68C4AF759FBA20E43EFB824F39BDA
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38302e302f32342d3234203d3e203631343935.roa
Signing time:             Tue 05 Mar 2024 18:16:10 +0000
ROA not before:           Tue 05 Mar 2024 18:11:10 +0000
ROA not after:            Tue 04 Mar 2025 18:16:10 +0000
asID:                     61495
IP address blocks:        200.115.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3b:11:5a:63:e6:8c:4a:f7:59:fb:a2:0e:43:ef:b8:24:f3:9b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:10 2024 GMT
            Not After : Mar  4 18:16:10 2025 GMT
        Subject: CN=06A4409DA2BB709C871BBC323ECF96BCD2CD6023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:6b:36:d4:d2:11:35:8d:ea:e1:f4:92:82:
                    fe:47:7e:a2:45:50:0f:7c:11:b4:3e:f7:87:00:5d:
                    1d:22:40:1e:c2:50:f9:fd:2d:9b:0e:31:f2:84:4f:
                    8c:59:a1:37:ff:02:6e:69:75:3a:41:d5:c0:29:bb:
                    ca:22:91:12:16:12:f4:e9:23:27:e7:50:ac:3a:d0:
                    08:0c:61:c8:de:c1:29:b0:d7:6a:53:fe:00:ed:d2:
                    d7:f4:80:49:96:a5:9c:f4:6a:6f:6c:a0:1b:f5:21:
                    e3:22:dc:d9:fd:24:97:d1:29:02:61:55:fc:23:e4:
                    bf:a6:50:73:95:e2:6d:0b:b3:73:a0:d0:2b:7b:6c:
                    ee:41:42:3e:96:e1:5d:8b:5f:f2:9e:17:34:5f:77:
                    d1:d9:de:9d:42:ef:be:88:dc:15:24:a8:33:86:27:
                    b3:78:a6:00:1a:2b:1f:dc:e6:eb:7c:b0:c0:8b:79:
                    77:a6:c5:ac:3c:a4:99:d4:26:bb:5b:2c:09:c5:ff:
                    71:a4:78:77:bd:00:1b:f2:99:11:59:8a:ac:0a:62:
                    e2:40:80:13:e3:e8:2c:69:00:04:05:37:87:58:65:
                    00:03:3b:45:b6:65:3d:66:37:5d:6a:f4:7d:e6:a0:
                    82:fc:26:6c:18:0e:9d:73:86:70:fb:8b:21:2a:9c:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:40:9D:A2:BB:70:9C:87:1B:BC:32:3E:CF:96:BC:D2:CD:60:23
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38302e302f32342d3234203d3e203631343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:21:7d:41:6a:a1:f6:e8:af:98:78:18:d0:1b:97:61:df:ed:
         c2:c6:d7:69:ff:29:46:b6:4c:60:18:1b:f1:d6:cf:1b:11:77:
         4a:5e:84:ce:c6:60:55:4b:3f:a1:94:c6:b2:02:e4:b1:6f:5f:
         f9:8d:89:7d:56:22:ba:fd:a9:c0:f3:f0:a3:7a:bc:d7:96:1f:
         94:c4:51:d9:50:18:2c:8c:21:d1:6e:5e:44:93:b8:aa:b2:6d:
         88:bf:b1:bd:01:c8:53:d7:ac:f2:7f:7b:81:4b:c8:f4:27:b7:
         2c:fc:5e:2a:9d:bc:8a:88:b5:70:84:0d:9a:70:21:37:f6:90:
         c9:07:31:73:ec:b3:35:b6:21:af:16:6e:e5:86:ae:c9:23:53:
         ef:1b:3b:5c:ca:3a:d6:dd:81:44:68:5a:f5:6b:fa:28:6c:37:
         26:c9:29:53:57:7c:15:2d:58:9b:4e:50:f5:6e:78:52:f3:6a:
         32:86:a8:2d:a9:68:8b:c7:93:94:52:54:5b:7f:c8:59:62:d7:
         93:1d:80:21:7f:47:85:2d:6c:06:51:03:17:29:b5:fa:1c:95:
         24:17:43:a7:85:13:83:80:76:cc:e4:1b:14:eb:dd:1a:fa:e7:
         6e:6e:51:4c:b0:ff:89:2b:18:ea:28:cb:51:81:4c:55:2b:66:
         cf:c1:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org