Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38362e302f32342d3234203d3e203532333539.roa
File:                     3230302e3131352e38362e302f32342d3234203d3e203532333539.roa (raw, json)
Hash identifier:          mbPaRvT7gsdsP63lG8iCzZJAbD6MyRhQ6E6jZUN/BhU=
Subject key identifier:   2E:55:2E:7F:99:08:E0:82:16:17:12:FB:75:F2:D6:4B:DF:89:E6:08
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       7A6971EF737633AC906F5FB40A17D4066089C103
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38362e302f32342d3234203d3e203532333539.roa
Signing time:             Tue 05 Mar 2024 18:16:01 +0000
ROA not before:           Tue 05 Mar 2024 18:11:01 +0000
ROA not after:            Tue 04 Mar 2025 18:16:01 +0000
asID:                     52359
IP address blocks:        200.115.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:69:71:ef:73:76:33:ac:90:6f:5f:b4:0a:17:d4:06:60:89:c1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:01 2024 GMT
            Not After : Mar  4 18:16:01 2025 GMT
        Subject: CN=2E552E7F9908E082161712FB75F2D64BDF89E608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:39:38:20:3d:05:31:24:70:19:73:6c:1e:
                    55:af:f5:af:db:57:a6:40:47:9d:ee:3d:14:08:bc:
                    2e:65:fd:e5:ea:36:fc:4d:37:e8:b8:56:d7:b5:ff:
                    d3:15:c7:a8:7d:d7:9e:7a:55:14:98:6f:0b:9b:de:
                    0c:3d:da:c9:cd:af:25:74:45:85:73:7d:be:47:b3:
                    39:a7:94:27:8b:cc:31:c5:a6:a8:25:a0:1e:2d:ac:
                    2e:9e:15:b2:34:7e:ca:8f:a6:26:7f:25:16:7d:84:
                    88:d4:fb:5b:da:9f:7d:78:2a:6c:2b:66:77:69:2d:
                    c6:ab:3c:7a:f5:94:e0:8c:31:9a:f4:c2:5a:be:24:
                    05:ec:70:98:1b:2c:60:45:0c:3e:87:63:4f:8f:52:
                    ad:c9:35:db:53:c4:dd:ae:bd:94:be:68:79:fe:22:
                    90:62:04:d2:19:1e:26:f4:e4:ee:98:3f:00:63:c3:
                    54:e0:aa:8e:c9:b9:5d:75:73:74:b0:d7:cb:2f:d2:
                    bc:d6:0e:9f:6b:07:bc:b6:3c:a9:91:0d:6c:1f:e2:
                    28:35:a5:c2:0d:d7:ff:8f:90:c1:ef:32:96:0c:37:
                    6b:2c:8b:05:5a:0b:4a:e4:90:77:72:5c:ef:c2:32:
                    15:b5:c3:46:e6:2d:be:dc:9f:a3:bb:ed:fb:46:11:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:55:2E:7F:99:08:E0:82:16:17:12:FB:75:F2:D6:4B:DF:89:E6:08
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38362e302f32342d3234203d3e203532333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:b3:9e:8b:95:e1:08:fb:d3:38:1c:29:af:f2:13:90:06:3c:
         d1:26:83:a9:76:8d:bd:5c:c1:63:6c:05:fc:94:c7:93:d1:fc:
         ef:c5:f4:a5:b1:84:dc:78:4f:5b:50:b6:22:02:ec:3a:41:88:
         cd:1e:ca:73:13:3e:fb:95:c2:70:51:79:e9:09:a6:69:a9:87:
         f5:68:ba:57:ee:40:d6:0c:b6:9f:0c:fb:84:6f:74:9b:f2:10:
         5d:d2:9f:08:cb:2f:50:2f:5e:b1:0d:9d:39:16:32:49:28:e9:
         5c:fa:8e:30:db:c8:29:ef:26:ed:e3:16:6b:33:fb:64:8f:48:
         18:68:b3:6f:8f:94:15:2d:18:1d:40:aa:a5:53:78:f1:dc:db:
         2d:2e:ea:73:b9:a2:e3:63:ba:40:6f:d8:f6:63:58:e4:cf:0a:
         1a:d7:83:81:fe:d4:0b:65:48:c5:15:ea:e7:aa:aa:fe:4a:86:
         9a:72:66:3b:fa:12:7e:14:50:14:bb:5c:fd:2f:cd:24:0b:88:
         da:4f:3d:fc:05:08:d0:ac:76:75:51:85:cd:85:29:2e:a4:22:
         c3:fb:b7:b5:6a:d7:c9:8f:32:d8:43:aa:4e:62:f9:ea:8e:43:
         e8:70:4b:bb:1d:b1:c3:f7:ea:9b:d9:e2:a4:21:53:7e:85:44:
         af:31:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:02 2024 by rpki-client on console-ams.rpki-client.org