Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39352e302f32342d3239203d3e203532333736.roa
File:                     3230302e3131352e39352e302f32342d3239203d3e203532333736.roa (raw, json)
Hash identifier:          WyZmKpbX3zAqGD1k0Pfya/DHGKm2wcXhxA5Vo9HgdT8=
Subject key identifier:   4A:AE:C4:C1:15:A8:A1:93:5E:70:EA:B2:16:14:90:AA:7E:26:92:86
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       254A95CB1529FADF0CE36FB6786A222E95A7F1CF
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39352e302f32342d3239203d3e203532333736.roa
Signing time:             Tue 14 May 2024 11:45:00 +0000
ROA not before:           Tue 14 May 2024 11:40:00 +0000
ROA not after:            Tue 13 May 2025 11:45:00 +0000
asID:                     52376
IP address blocks:        200.115.95.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4a:95:cb:15:29:fa:df:0c:e3:6f:b6:78:6a:22:2e:95:a7:f1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: May 14 11:40:00 2024 GMT
            Not After : May 13 11:45:00 2025 GMT
        Subject: CN=4AAEC4C115A8A1935E70EAB2161490AA7E269286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:de:cc:84:b5:cf:2d:86:74:df:3d:24:21:
                    b8:f0:1a:97:d9:c8:6c:0b:e3:d4:3f:88:39:b0:3c:
                    32:4c:58:68:98:59:76:de:b7:4f:4d:8e:fc:e1:3c:
                    b3:5b:48:1b:bb:44:f2:60:04:ef:bd:bc:c1:5d:35:
                    2f:e5:2d:75:de:87:16:56:8f:60:4f:39:81:f9:4e:
                    bc:09:9e:2a:8a:a8:f1:1c:93:21:a1:14:f7:3d:98:
                    4b:ac:c4:e1:6f:b2:7b:cf:50:c8:c7:c6:8b:6b:49:
                    e3:74:c7:9a:69:c2:81:66:0c:25:ec:33:15:56:ab:
                    81:00:1f:a5:e5:67:74:db:90:eb:85:f6:c3:16:30:
                    a9:15:71:14:e9:3c:8e:d0:a0:d3:85:6b:21:db:87:
                    a9:09:a6:34:d6:2f:8f:c0:c7:67:ae:09:9e:d1:51:
                    ae:d5:00:c6:8d:b4:54:d0:fb:32:7a:44:b0:04:ef:
                    b1:9c:23:96:37:0e:a0:d5:ce:45:2b:6e:3c:82:87:
                    4b:f5:fc:71:79:22:61:8f:81:14:12:1e:a5:0c:7b:
                    d6:34:33:08:9c:76:15:ee:e2:20:3f:a0:89:d6:c1:
                    30:ce:29:df:9f:88:02:6d:2d:d4:83:f3:8b:a5:a8:
                    db:d2:4a:0a:19:6f:a4:71:49:a2:e5:b5:66:98:a6:
                    7c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AE:C4:C1:15:A8:A1:93:5E:70:EA:B2:16:14:90:AA:7E:26:92:86
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39352e302f32342d3239203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:c7:96:41:12:4f:72:17:21:c4:0b:1c:14:f3:61:9f:0b:39:
         04:df:8c:52:2f:96:af:ca:de:47:2c:45:8f:04:e8:7a:88:b9:
         ed:c4:a0:52:a8:97:fd:c8:06:f0:33:8a:f1:a1:b5:f0:03:58:
         b0:d0:48:7a:18:d6:fe:f4:0e:c2:98:eb:35:4c:54:01:53:50:
         a9:a7:9b:ef:36:04:c3:16:96:8b:dc:60:41:b0:99:62:d0:a9:
         4f:fb:5e:bb:8b:22:c1:0e:df:20:fa:5c:f2:fe:28:81:95:d5:
         af:2f:13:c3:a6:33:ab:27:d2:2a:07:2e:9e:71:e2:38:40:b2:
         79:c9:cf:be:07:ac:41:cf:4f:a2:be:ce:a9:19:d6:b1:63:a6:
         77:ef:9d:6f:df:ea:4d:17:0f:50:be:8b:e1:e8:02:db:3e:cb:
         a9:88:ca:ec:19:d9:11:88:f1:e1:12:a6:2b:7b:29:6e:91:c3:
         94:6d:28:df:b6:6b:81:b9:20:62:4e:1a:35:15:ad:1b:d0:07:
         fe:9f:05:79:62:ca:b1:53:91:2b:d7:99:59:ac:f5:f1:0d:2c:
         dc:2d:23:3e:01:b9:7d:ba:6d:bc:6b:90:4e:3a:84:9a:25:5a:
         26:4c:94:5b:4e:2b:c0:46:e1:84:37:cf:ca:ba:e7:fd:8e:8c:
         14:84:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org