Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38382e302f32342d3234203d3e203532333630.roa
File:                     3230302e3131352e38382e302f32342d3234203d3e203532333630.roa (raw, json)
Hash identifier:          UuZtmzMWnThfpsDD2djo8T0Sc1LyB+rJP2ZXQvCrNbE=
Subject key identifier:   27:4F:4B:7B:4A:98:E7:28:D1:1C:68:A0:3D:53:D1:14:B6:80:01:EF
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       22E64F6BC35DA66BABCF833C037A5BFEC790FCC3
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38382e302f32342d3234203d3e203532333630.roa
Signing time:             Tue 05 Mar 2024 18:16:10 +0000
ROA not before:           Tue 05 Mar 2024 18:11:10 +0000
ROA not after:            Tue 04 Mar 2025 18:16:10 +0000
asID:                     52360
IP address blocks:        200.115.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e6:4f:6b:c3:5d:a6:6b:ab:cf:83:3c:03:7a:5b:fe:c7:90:fc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:10 2024 GMT
            Not After : Mar  4 18:16:10 2025 GMT
        Subject: CN=274F4B7B4A98E728D11C68A03D53D114B68001EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:cc:15:67:99:ed:44:61:86:88:36:7e:66:
                    a8:9e:7e:de:0a:7b:88:80:45:bb:37:63:60:66:05:
                    98:73:fe:88:a6:2a:ca:81:c9:38:d2:40:2c:0a:7f:
                    90:02:25:81:c7:95:33:3f:b9:a5:75:07:3c:27:52:
                    e3:d2:49:a9:db:64:1c:98:0f:8f:44:49:2f:f3:bc:
                    94:45:9e:c8:5f:af:68:b0:c5:d7:9c:75:dc:97:2e:
                    ac:bc:c2:b3:bd:87:bb:87:c8:11:26:c5:1a:3e:74:
                    a9:e8:68:4b:08:a1:04:75:8e:1e:27:b1:e8:0f:88:
                    21:06:08:48:37:ca:12:36:90:9a:fa:d7:0f:e6:01:
                    b2:55:cc:fe:9e:8b:0e:5b:e0:e8:60:c2:f8:45:45:
                    ac:64:87:4d:41:85:19:f9:1b:bc:a4:f0:97:7f:f5:
                    9e:89:57:80:73:61:0b:c0:e2:77:6a:6a:73:ae:3d:
                    27:4b:1b:51:ec:d7:38:37:a2:8c:63:bc:4f:de:da:
                    b9:6e:d7:7c:e7:9c:33:bd:a2:46:8c:ee:33:f4:4c:
                    be:5b:9c:f0:00:63:79:af:67:a9:05:96:65:12:79:
                    27:e3:f8:1f:c0:34:11:33:2f:d4:a6:19:e8:9c:7d:
                    c5:5c:d7:41:6b:41:a2:28:a9:15:a8:c0:ef:3a:64:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4F:4B:7B:4A:98:E7:28:D1:1C:68:A0:3D:53:D1:14:B6:80:01:EF
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38382e302f32342d3234203d3e203532333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3e:7c:ed:1b:96:2d:b5:30:50:3e:83:8d:0e:8b:56:41:21:
         f0:26:0b:f5:0e:e8:80:7a:3b:50:3b:fd:d5:56:ff:a4:9c:d3:
         7c:0d:8c:10:db:71:85:6b:f5:1a:5a:43:90:cf:61:26:92:28:
         d8:86:f6:46:1e:67:3f:0d:4e:0e:1d:91:2c:46:15:df:1e:a7:
         b9:9e:2f:59:75:b6:d3:e2:05:87:79:bf:70:e9:30:37:85:cb:
         13:e3:20:bd:81:7b:14:60:f9:17:4d:b8:67:17:3f:2e:a6:9b:
         5b:3a:26:fc:8e:7a:db:b0:27:f7:f2:2e:01:74:db:be:4c:f5:
         8d:0c:38:86:3c:2c:2c:6c:ce:af:22:af:45:2f:5c:f1:12:d7:
         c6:07:fc:ca:0c:5d:5b:0b:f7:57:a5:eb:c5:b5:5c:76:e0:81:
         d9:53:0e:b1:f4:ec:3c:5b:bd:2c:fd:f5:b8:db:73:9f:c5:e1:
         4c:a9:17:80:c6:9d:44:77:2a:13:08:87:48:e7:14:7e:8e:2c:
         56:fd:a9:1c:df:11:bf:c1:8d:58:f8:72:1c:d8:f3:bf:06:00:
         fc:92:a4:52:68:cc:6d:68:13:13:8d:35:51:19:0c:0f:5b:5b:
         0b:08:19:08:0c:63:ac:90:89:3a:72:f3:64:41:16:81:23:47:
         7a:6d:51:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:42:35 2024 by rpki-client on console-fra.rpki-client.org