Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39312e302f32342d3234203d3e203532343033.roa
File:                     3230302e3131352e39312e302f32342d3234203d3e203532343033.roa (raw, json)
Hash identifier:          ET/gwaFQCxbw3QHEYsHIX3a6N5YpwfprLD7qVipLkBU=
Subject key identifier:   D6:8B:2F:48:E6:23:F0:EF:2E:26:81:D9:B9:0E:3F:E4:FB:AE:2E:CC
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       0B9FB77125CB188270029582656E7B1EBD6B9907
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39312e302f32342d3234203d3e203532343033.roa
Signing time:             Tue 05 Mar 2024 18:16:08 +0000
ROA not before:           Tue 05 Mar 2024 18:11:08 +0000
ROA not after:            Tue 04 Mar 2025 18:16:08 +0000
asID:                     52403
IP address blocks:        200.115.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 21:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9f:b7:71:25:cb:18:82:70:02:95:82:65:6e:7b:1e:bd:6b:99:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:08 2024 GMT
            Not After : Mar  4 18:16:08 2025 GMT
        Subject: CN=D68B2F48E623F0EF2E2681D9B90E3FE4FBAE2ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:ac:9c:04:2c:04:b5:6e:04:b0:a1:4e:34:
                    a1:f1:39:bd:7a:f0:ec:00:b9:55:bb:7c:81:a7:fe:
                    cb:99:6c:a0:b3:20:0c:2e:f6:a6:48:3d:42:80:82:
                    40:4c:95:d2:48:3c:ae:45:a9:e4:b1:65:9b:4c:ec:
                    ca:e9:a8:49:5e:92:b8:02:19:f0:0f:d3:df:4d:06:
                    4b:c9:52:c2:54:8d:08:40:ad:85:45:ee:76:07:75:
                    27:ac:8d:98:11:a7:02:37:72:4a:25:13:dd:04:65:
                    cd:7e:cf:e1:d4:24:e2:01:0a:d6:48:de:b9:64:27:
                    92:8f:d1:92:5b:71:ab:df:74:8d:dd:79:2a:b3:df:
                    08:a8:0a:6b:90:b1:4a:86:04:83:a9:74:b4:29:d2:
                    d4:66:1e:01:fe:a9:4c:97:ac:58:7e:74:f4:19:9e:
                    f2:62:f3:60:6f:58:68:9d:99:ec:5a:67:a4:d8:32:
                    4c:80:23:e1:8c:b9:4e:de:6a:be:be:d5:93:a5:3c:
                    b9:c7:9b:47:ed:79:08:62:f8:9e:c1:e7:c3:6b:19:
                    54:01:20:9f:14:37:51:f9:a7:b2:a7:6c:85:83:74:
                    4d:a2:9a:72:99:98:92:30:66:66:39:ef:09:62:5d:
                    36:93:a2:7b:4c:13:5b:15:95:b2:41:ce:33:ff:58:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8B:2F:48:E6:23:F0:EF:2E:26:81:D9:B9:0E:3F:E4:FB:AE:2E:CC
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39312e302f32342d3234203d3e203532343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:08:a1:30:a6:46:0a:ca:2b:eb:c5:de:19:9b:78:48:d4:3c:
         de:27:2b:75:c1:9d:80:91:31:39:88:6d:e4:4f:1c:f5:18:03:
         a3:27:f9:25:eb:b5:a6:b8:98:73:83:0e:a9:7c:6f:97:18:1c:
         6a:93:51:00:41:98:78:48:31:cd:f3:8e:d2:2a:15:b0:42:a6:
         0c:84:66:8f:93:cf:bd:1d:81:5a:e5:82:ef:35:3e:e9:52:83:
         f7:bc:f7:b1:aa:56:59:fa:07:d1:2b:c4:e0:4d:0e:3e:af:7b:
         a5:72:51:48:e7:e7:3a:cb:4d:df:1a:66:be:1d:a3:81:4d:4f:
         d0:e7:7e:5f:d2:c7:42:f9:3a:b6:b0:19:34:da:3c:0b:1a:bf:
         80:59:fd:98:d9:62:5d:7b:26:6f:3f:b6:e2:ae:5c:b8:73:49:
         81:79:f5:66:bb:f1:85:a9:61:bc:ad:70:53:aa:c4:c2:e1:fb:
         bf:41:91:a2:84:6c:91:76:99:ae:56:cc:0e:94:1e:09:96:bb:
         6d:97:b0:ac:95:ea:32:65:a9:3a:ea:8d:9e:74:4d:86:26:85:
         53:84:4b:d2:1d:3b:ea:5b:98:ee:6d:ba:b5:02:7b:05:3b:39:
         ad:41:99:92:5f:29:b4:ed:b5:5b:09:d0:af:7e:87:e9:d1:8f:
         1a:94:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 13:14:24 2024 by rpki-client on console-ams.rpki-client.org