Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38392e302f32342d3234203d3e203532333735.roa
File:                     3230302e3131352e38392e302f32342d3234203d3e203532333735.roa (raw, json)
Hash identifier:          +TNtue/H9wVi5AuvU8B7zVmKPUPZWHhzaghkGWjjkVM=
Subject key identifier:   DD:ED:A8:CF:56:6C:B3:71:E6:9E:1C:FE:E3:B3:82:EA:B0:2C:73:47
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       6D136C7129ECA0CB6804BC03E923473EAEA98EEB
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38392e302f32342d3234203d3e203532333735.roa
Signing time:             Tue 05 Mar 2024 18:15:55 +0000
ROA not before:           Tue 05 Mar 2024 18:10:55 +0000
ROA not after:            Tue 04 Mar 2025 18:15:55 +0000
asID:                     52375
IP address blocks:        200.115.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:13:6c:71:29:ec:a0:cb:68:04:bc:03:e9:23:47:3e:ae:a9:8e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:55 2024 GMT
            Not After : Mar  4 18:15:55 2025 GMT
        Subject: CN=DDEDA8CF566CB371E69E1CFEE3B382EAB02C7347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:3c:07:94:30:49:dc:c5:d8:8d:76:4f:76:
                    f8:e2:6f:4c:5b:ce:21:23:e9:c1:ce:d6:4e:ab:e9:
                    fb:81:4f:4d:7e:21:71:e0:70:0e:3c:15:b2:38:19:
                    a8:59:ec:85:dc:c9:be:96:8e:ee:55:25:09:de:56:
                    43:8c:9c:32:0f:e7:b6:d4:17:9a:07:c5:93:67:20:
                    53:51:19:92:30:9d:08:c2:d6:bd:f4:ac:65:06:67:
                    b4:44:8e:a6:e3:a9:96:3a:0d:93:a3:af:71:d7:4a:
                    8d:f6:4b:81:4d:6e:ca:a6:a1:e2:fb:8c:b1:2f:a7:
                    df:d1:9d:0a:15:47:7a:c3:b2:6f:db:8e:58:a5:49:
                    83:f3:96:1a:13:4b:2e:cf:1f:67:8b:61:51:ef:bc:
                    f0:29:55:3f:f2:ae:6b:d2:2d:b3:30:8e:f9:bd:54:
                    30:fc:91:6b:62:14:34:af:98:56:63:1b:3c:a6:59:
                    03:7e:18:22:0c:06:df:78:00:b8:a5:fb:be:0d:d8:
                    10:d2:45:c0:7f:c6:7e:fb:f9:fd:f8:c8:42:84:61:
                    2a:2d:84:01:82:b8:11:0c:61:a6:a1:4d:6b:ca:80:
                    6e:9f:6d:6b:e2:69:b4:88:ac:16:d9:35:e9:c9:e5:
                    ac:77:ab:1e:dd:55:32:a4:af:5c:3b:27:72:1a:19:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:A8:CF:56:6C:B3:71:E6:9E:1C:FE:E3:B3:82:EA:B0:2C:73:47
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38392e302f32342d3234203d3e203532333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f3:dc:2c:a0:c3:b8:88:8f:44:e5:da:93:f1:53:c5:6c:04:
         18:1d:90:77:e8:d1:b5:eb:f8:e3:bd:29:8b:ed:d7:6d:5c:16:
         7f:b8:76:0d:45:ed:99:7f:8b:22:f7:f6:4c:06:d0:5a:73:02:
         11:97:11:59:60:03:a4:ea:cf:7d:ea:ff:85:4f:f9:ea:fe:cb:
         33:ab:e6:0b:db:c4:1a:a4:6d:4b:18:bd:fc:ce:fd:0b:8f:8e:
         b5:0a:bb:74:3f:59:88:e7:f2:f8:c7:4f:8a:2a:6b:f9:47:47:
         96:91:60:16:7b:57:f4:1b:09:82:77:a5:d2:77:3e:af:ea:3b:
         dd:72:36:a0:71:14:6f:ec:e2:c0:94:2b:cd:12:67:0b:c3:61:
         1a:5b:ca:d1:d9:0a:3b:1b:11:fb:06:fc:30:cf:3b:f0:0c:b0:
         a0:03:98:54:e5:43:3f:fd:15:7a:e4:64:e9:76:9c:0b:c9:4b:
         a6:96:a7:b3:49:f6:27:41:23:cd:68:9d:de:bb:ef:7b:5b:37:
         a9:bb:8a:8e:5b:ec:b3:29:70:01:28:4a:a6:4e:93:83:cf:39:
         97:d2:00:6b:07:02:ac:77:7b:b7:8f:63:93:52:b2:86:81:4f:
         d5:e7:50:ac:fb:bb:da:8e:83:21:09:58:bb:48:03:71:6e:0f:
         ec:b5:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:36 2024 by rpki-client on console-ams.rpki-client.org