Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38352e302f32342d3234203d3e203631343431.roa
File:                     3230302e3131352e38352e302f32342d3234203d3e203631343431.roa (raw, json)
Hash identifier:          Ap8AclzBN1iOj9Ubh/4CaMWqGhOMrMPDDXtVdz6spRI=
Subject key identifier:   0D:71:0F:AF:6B:0F:51:82:9E:52:27:00:9D:CD:0C:AE:54:9F:10:24
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       1DEC8606995944754D7C611D825A8819F53C6CA2
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38352e302f32342d3234203d3e203631343431.roa
Signing time:             Tue 05 Mar 2024 18:16:08 +0000
ROA not before:           Tue 05 Mar 2024 18:11:08 +0000
ROA not after:            Tue 04 Mar 2025 18:16:08 +0000
asID:                     61441
IP address blocks:        200.115.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ec:86:06:99:59:44:75:4d:7c:61:1d:82:5a:88:19:f5:3c:6c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:08 2024 GMT
            Not After : Mar  4 18:16:08 2025 GMT
        Subject: CN=0D710FAF6B0F51829E5227009DCD0CAE549F1024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:b3:97:50:6a:2e:8c:30:2a:3a:83:ec:ff:
                    3e:fe:e2:71:55:9c:6b:f8:ed:48:46:b7:be:d2:00:
                    08:98:98:4a:76:05:c7:0a:03:c6:f4:a7:03:16:b7:
                    5e:bd:f7:57:36:5f:d2:20:09:c7:79:51:d1:31:ad:
                    4f:a3:00:50:55:56:27:9c:3a:71:58:af:a6:f9:61:
                    54:bc:7a:70:59:e6:1f:62:cb:61:8b:19:b8:73:64:
                    79:f5:3f:c5:73:44:ac:1e:4e:c7:50:69:f6:37:b3:
                    2c:87:ba:05:14:d3:96:3f:c7:36:9e:93:bd:d7:b3:
                    b8:09:ba:3e:2f:a9:7d:b5:69:c7:31:8a:17:63:05:
                    dd:45:44:5d:c1:34:05:fb:17:18:fb:c3:f5:2e:27:
                    a3:94:89:ee:5c:ee:58:70:92:94:53:66:04:fc:84:
                    2d:1e:48:72:f9:64:c9:40:eb:c4:42:ac:91:31:8f:
                    a1:7a:be:ff:30:d4:a9:6b:9d:f8:f3:74:eb:14:66:
                    ab:5d:cc:c5:9a:3f:b7:e5:de:e5:38:d9:46:6c:ac:
                    63:1f:39:af:78:bb:98:d9:56:63:bf:f1:dc:eb:ba:
                    e4:ae:89:6a:e9:28:62:8e:24:8e:03:b4:7c:59:19:
                    b3:53:71:37:77:60:97:0a:6b:9a:e1:88:90:2d:46:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:71:0F:AF:6B:0F:51:82:9E:52:27:00:9D:CD:0C:AE:54:9F:10:24
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38352e302f32342d3234203d3e203631343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:d2:48:56:18:4c:86:cf:c8:62:68:dc:4f:72:7f:49:50:
         36:58:ac:05:26:53:3b:66:d1:e5:59:51:5c:15:e8:ce:b9:4c:
         c1:b8:1a:7b:b6:03:5d:74:e2:bc:b0:0d:78:87:bb:9d:36:57:
         a8:2f:e0:0a:cf:8f:62:7b:63:e5:15:eb:de:b3:c8:8b:35:d4:
         e1:a0:f6:62:a1:fd:91:e6:5a:21:31:96:06:29:c7:80:c2:30:
         48:d2:01:a8:87:dd:10:ac:0b:5e:ea:1e:a3:f7:5a:cc:b5:54:
         f9:fb:5f:e8:14:57:e9:e7:3f:e5:6f:15:df:24:60:d6:f8:30:
         97:22:80:74:50:11:06:a4:cb:9e:6e:66:c9:f7:d4:77:23:e9:
         f0:0b:51:0e:3c:fe:79:ce:9f:16:f0:26:95:d9:eb:5b:a1:45:
         f9:1f:46:bc:61:6f:9d:89:49:60:2d:de:f2:b7:de:cc:e4:c1:
         2d:94:37:12:a7:47:fa:66:14:cf:73:89:75:32:79:c4:7d:88:
         da:ea:64:6f:b6:04:2e:46:7d:85:c1:64:77:7f:9e:59:09:62:
         82:cf:4c:30:3e:1c:38:50:a0:16:15:1d:c8:55:09:46:4f:99:
         81:fa:8a:e4:83:c8:f6:ab:9f:00:89:0c:35:93:80:30:8b:d9:
         fd:54:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:42:35 2024 by rpki-client on console-fra.rpki-client.org