Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39322e302f32342d3234203d3e203532333734.roa
File:                     3230302e3131352e39322e302f32342d3234203d3e203532333734.roa (raw, json)
Hash identifier:          benxJXi4PAR41gbcNAOsoK74PPc8ciTlWahoCEBoRuE=
Subject key identifier:   8B:E6:F3:E9:63:99:1F:62:88:8A:22:62:FF:42:4E:C5:DC:73:D8:18
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       230B947F0B0DA4B681E17D5E33E7A4CCB1474632
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39322e302f32342d3234203d3e203532333734.roa
Signing time:             Tue 04 Feb 2025 18:35:11 +0000
ROA not before:           Tue 04 Feb 2025 18:30:11 +0000
ROA not after:            Tue 03 Feb 2026 18:35:11 +0000
asID:                     52374
IP address blocks:        200.115.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0b:94:7f:0b:0d:a4:b6:81:e1:7d:5e:33:e7:a4:cc:b1:47:46:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:11 2025 GMT
            Not After : Feb  3 18:35:11 2026 GMT
        Subject: CN=8BE6F3E963991F62888A2262FF424EC5DC73D818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:25:df:04:22:b2:8a:fd:ae:2a:12:05:49:
                    3d:78:cc:bd:55:d4:20:4b:01:ca:19:a8:4a:eb:16:
                    28:c0:33:3c:8a:84:7e:76:fa:ba:51:1d:13:32:87:
                    bb:ef:92:44:0d:4f:c4:a2:ae:0c:a8:b6:e8:26:98:
                    7e:2f:24:05:21:5b:26:fb:0b:03:32:fc:63:3b:47:
                    ba:cd:f7:bf:0a:07:18:3f:bb:1f:8a:a8:d8:bb:d3:
                    e8:b1:87:d1:2d:c1:76:e1:41:38:04:9f:63:86:df:
                    87:c5:71:f7:3a:df:13:58:e9:21:cb:9d:14:40:e5:
                    57:e3:20:0c:3c:e1:52:76:4a:00:30:4b:b5:97:c4:
                    cf:e7:5b:c8:7d:d2:55:a2:ec:39:4e:9a:e3:3c:50:
                    3c:11:c9:e9:59:95:c8:56:4b:bf:1c:66:b2:c7:2b:
                    65:1f:d2:4f:c7:8a:1a:e8:84:e2:20:b4:01:70:7a:
                    3d:31:a1:3a:4f:7c:0a:c6:e0:12:76:39:4d:50:7c:
                    69:4b:71:ef:9a:70:a9:99:8d:64:11:a1:76:d4:ae:
                    ef:a2:13:f6:82:8e:d7:1b:30:09:be:89:9a:a7:74:
                    28:9b:fa:5b:45:17:cd:90:5e:39:4d:31:80:14:30:
                    e9:55:b7:6f:1f:ab:91:7d:aa:e2:4b:6a:82:ab:e8:
                    db:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:F3:E9:63:99:1F:62:88:8A:22:62:FF:42:4E:C5:DC:73:D8:18
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39322e302f32342d3234203d3e203532333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a6:70:17:00:6f:17:92:e3:3c:a9:e4:ef:be:89:6b:43:6f:
         5a:db:20:3e:1a:e2:7e:b8:28:c3:63:8b:6b:19:73:d1:5f:4c:
         a8:d7:0c:78:f1:3d:6e:cd:2e:98:7f:d2:ed:2a:d1:ec:d3:4b:
         00:99:79:8c:ad:5c:dc:50:69:51:9f:f6:b1:65:9a:8d:40:80:
         8a:f1:84:31:c0:67:90:da:34:9b:be:9c:77:92:d9:67:0d:b0:
         e4:64:d5:6b:9e:a2:69:a5:1c:d0:f3:d6:de:1c:88:92:a3:1f:
         59:76:c1:ba:f5:27:98:ae:14:69:bf:39:74:be:a9:d9:ff:cb:
         16:35:a0:bf:8a:3f:cf:76:30:22:4a:52:2d:2b:32:f2:32:70:
         43:12:a2:20:1e:a8:fe:e5:b3:4b:3a:83:ad:81:c3:75:05:40:
         85:f9:5a:72:17:74:04:3a:f2:24:29:21:fa:0d:0e:09:4e:44:
         f3:cf:43:c5:40:39:b2:79:32:ea:29:55:ea:b4:f3:0f:f2:bf:
         bc:77:ec:1a:1a:95:54:5c:89:9c:a9:3c:2a:6b:1b:70:86:cd:
         e1:22:b3:15:23:a4:28:38:96:7c:2e:ad:96:8b:68:02:92:71:
         ba:27:6e:e8:31:ec:e1:3e:24:98:63:c2:6c:00:5f:fd:4c:3a:
         fe:12:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:28 2025 by rpki-client