Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39302e302f32342d3234203d3e203532333234.roa
File:                     3230302e3131352e39302e302f32342d3234203d3e203532333234.roa (raw, json)
Hash identifier:          7H3Jt+6IpKpQOqDZm2FJdyumZvOdRWdByD4UZvKJVZE=
Subject key identifier:   2B:15:CB:2B:B4:AB:71:5C:8D:48:E6:85:FF:AC:65:D3:C0:E9:92:B1
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       5E5EB7FAF1091DB71DBE96F0A6F5025E845DC374
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39302e302f32342d3234203d3e203532333234.roa
Signing time:             Tue 05 Mar 2024 18:15:50 +0000
ROA not before:           Tue 05 Mar 2024 18:10:50 +0000
ROA not after:            Tue 04 Mar 2025 18:15:50 +0000
asID:                     52324
IP address blocks:        200.115.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5e:b7:fa:f1:09:1d:b7:1d:be:96:f0:a6:f5:02:5e:84:5d:c3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:50 2024 GMT
            Not After : Mar  4 18:15:50 2025 GMT
        Subject: CN=2B15CB2BB4AB715C8D48E685FFAC65D3C0E992B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:65:2e:b7:4e:80:d7:37:29:d8:d3:b3:76:
                    cd:25:0b:97:28:21:2e:f2:9d:29:bf:2c:70:5b:80:
                    23:59:37:96:99:8f:5c:3f:05:e8:a6:3b:19:79:72:
                    87:b3:65:94:16:d1:6b:ff:63:b8:ee:21:53:17:e2:
                    ee:37:b8:39:07:3d:a7:84:c2:95:72:e4:1e:e3:97:
                    ab:34:c0:43:5e:34:e5:1e:12:c0:ff:7b:c5:c4:c8:
                    01:1c:0c:f0:b1:ec:41:c9:64:12:18:e8:a6:09:7f:
                    b1:45:b8:d6:7c:d0:6c:3d:0a:76:d4:5f:10:cc:88:
                    15:56:01:82:d1:e1:ee:fe:f2:a9:20:ff:b1:32:05:
                    16:a2:b7:93:34:d7:fb:8a:ed:16:94:44:86:77:84:
                    59:8d:ea:d7:92:b3:94:bb:93:80:f8:e1:97:83:e9:
                    c0:01:00:b5:f8:fa:c9:b0:22:eb:3e:59:e9:df:e5:
                    a9:74:6c:71:52:ea:31:cc:90:5f:b6:02:ab:96:3a:
                    46:48:c6:c6:f8:e0:e5:c4:82:55:65:86:78:85:6a:
                    18:5a:fc:e9:34:80:fb:e8:40:9e:76:29:f8:69:30:
                    67:67:37:90:0f:b0:97:b4:20:a0:f2:c1:a2:8b:72:
                    9f:3a:9a:a5:ab:78:7f:cc:93:ed:8c:83:16:61:ee:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:15:CB:2B:B4:AB:71:5C:8D:48:E6:85:FF:AC:65:D3:C0:E9:92:B1
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39302e302f32342d3234203d3e203532333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:89:53:e6:f1:5e:b4:5d:91:27:47:d2:8b:bf:35:1d:6a:2c:
         ce:1c:ca:6b:7c:c9:07:c1:48:2a:35:f2:51:e0:d5:bb:e7:47:
         74:45:3c:18:ae:93:4f:fa:43:59:5a:09:09:20:8a:88:20:b4:
         3c:fa:5e:5d:c6:d2:36:cd:fc:6d:0f:a9:91:cf:3e:28:0a:64:
         af:97:a5:b5:84:ef:7f:56:1b:5f:eb:e2:fd:dd:91:85:c6:c2:
         b1:da:27:f2:43:23:e0:30:73:01:28:f1:33:4b:23:8d:77:7a:
         0d:cf:8a:ab:3b:80:b5:71:6c:3f:71:7c:62:42:9e:5b:90:78:
         f7:59:06:25:81:5b:a9:9d:21:2f:49:b2:65:d2:08:d5:72:e4:
         02:d0:e8:55:1d:4d:6b:79:b0:fb:5b:af:e7:b3:6d:10:50:81:
         55:30:44:ca:dd:b5:e6:27:27:04:bc:41:23:5f:a2:84:9f:98:
         71:d1:b0:7c:3b:6b:52:b8:3f:4f:24:73:59:ed:e2:9d:ce:2f:
         8e:14:b6:03:e4:58:66:cd:17:2a:d6:58:2e:14:3f:53:d2:90:
         8f:8e:58:35:aa:e4:20:9c:a5:7f:b0:07:01:05:71:8a:74:db:
         a2:de:39:6e:60:89:77:4e:15:5b:f5:ab:76:a0:cb:ef:ae:de:
         20:8b:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:33:17 2024 by rpki-client on console-fra.rpki-client.org