Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39332e302f32342d3239203d3e203532323934.roa
File:                     3230302e3131352e39332e302f32342d3239203d3e203532323934.roa (raw, json)
Hash identifier:          /mKSIFsga79TCeuqBM7bYdlRSWZ+2DG3U26lzuA3hm8=
Subject key identifier:   1C:6A:D3:60:24:96:5F:AB:12:2B:BB:03:35:74:E2:6A:58:16:03:26
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       16465849DCB4553449679B7D99FE87E51369517C
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39332e302f32342d3239203d3e203532323934.roa
Signing time:             Tue 14 May 2024 11:50:00 +0000
ROA not before:           Tue 14 May 2024 11:45:00 +0000
ROA not after:            Tue 13 May 2025 11:50:00 +0000
asID:                     52294
IP address blocks:        200.115.93.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:46:58:49:dc:b4:55:34:49:67:9b:7d:99:fe:87:e5:13:69:51:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: May 14 11:45:00 2024 GMT
            Not After : May 13 11:50:00 2025 GMT
        Subject: CN=1C6AD36024965FAB122BBB033574E26A58160326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:94:c6:4e:6d:5d:e2:f3:c7:66:72:fa:67:
                    4b:57:0f:22:c4:d4:ae:c9:47:65:8e:7e:9f:ef:86:
                    ec:6c:f7:af:3b:24:d8:2a:8f:57:45:06:d2:7d:ad:
                    f5:53:13:29:75:2f:9c:d6:7b:d3:ab:78:e5:15:aa:
                    5a:7c:93:eb:4f:d2:bd:c1:1d:c1:2f:e6:57:90:e0:
                    11:83:0a:c5:b9:86:cc:c3:88:33:d5:17:ea:be:f9:
                    28:d4:45:20:0a:dd:5f:62:7b:a7:17:d5:1b:03:ab:
                    db:87:a4:7c:1d:91:07:be:dc:7f:28:ca:13:4f:4e:
                    f4:7a:f1:a9:e4:2e:a2:6e:3d:dc:e0:6e:2f:a9:f3:
                    55:c9:04:4b:54:06:af:ab:59:f1:9e:d1:0b:6d:0f:
                    99:f8:15:76:f2:8b:08:ee:f7:a4:2b:76:e9:3b:eb:
                    39:9e:18:1a:fb:70:93:dc:97:be:4b:88:ef:ea:4c:
                    b9:e7:4e:c3:76:ce:99:65:e1:c7:2c:71:47:3b:e5:
                    46:94:ca:26:4d:dc:54:0d:78:6b:50:e3:da:d4:01:
                    48:e5:0b:4a:56:36:82:c9:8d:5c:44:cc:6b:6b:c6:
                    56:e8:dd:45:25:51:a1:b2:51:03:c4:90:8e:5a:3c:
                    4e:a0:98:0f:1b:3b:f0:3f:f5:f4:69:92:fb:4a:c1:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6A:D3:60:24:96:5F:AB:12:2B:BB:03:35:74:E2:6A:58:16:03:26
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39332e302f32342d3239203d3e203532323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3d:a5:c1:93:f3:96:ac:e5:3d:85:e0:fc:ec:85:e0:ed:04:
         f3:00:6b:9b:fd:f8:03:58:16:e0:bf:a9:a8:10:43:6c:2e:f4:
         36:8b:19:2a:5f:a4:1b:a9:67:ba:03:c9:4d:84:ef:d3:ed:ea:
         c5:d9:ea:6c:7f:9d:b7:9c:cd:f0:a1:e0:93:4a:4c:fa:d1:8b:
         62:4e:15:fd:31:9f:39:ba:fa:fa:52:9e:bd:97:59:7f:0f:3c:
         43:35:64:38:3a:d9:18:2a:42:83:78:94:07:65:8f:8d:a3:d0:
         32:3e:8c:dd:66:81:e9:29:0c:be:4d:85:ed:0d:eb:ff:04:18:
         8b:4e:bf:c4:a4:d1:1e:75:47:01:a9:97:be:e2:5e:e6:85:6c:
         63:2b:36:8e:2d:a5:3d:9f:6b:36:a6:b6:4e:f4:2f:ac:75:1a:
         37:6a:d0:7c:23:03:b8:57:5d:bb:68:57:78:06:5f:24:dc:32:
         84:49:ef:f5:02:0f:e1:d5:60:44:17:b5:46:68:ac:bc:d6:18:
         ee:91:73:51:e3:54:dc:7a:49:e7:45:a8:5c:31:63:a1:b7:fd:
         50:c9:4d:b2:28:2d:36:6c:b1:9a:7b:fd:20:14:55:cb:b5:e2:
         e9:c6:0e:84:ea:d2:56:08:b8:9c:6d:f0:9c:93:df:58:58:6e:
         8e:74:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:28:46 2024 by rpki-client on console-ams.rpki-client.org