Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e37342e302f32342d3234203d3e203532333539.roa
File:                     3230302e31342e37342e302f32342d3234203d3e203532333539.roa (raw, json)
Hash identifier:          fc3UMh3OFB7cKI4d7h+ILLHRH0AKGuZ0HnVNxUsxzaw=
Subject key identifier:   D7:30:02:59:B4:DA:34:BD:89:B6:87:0A:54:4A:6D:9B:2A:37:83:76
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       61ABC538EA9BA7DA9932F32A78DCC42B77544314
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e37342e302f32342d3234203d3e203532333539.roa
Signing time:             Tue 05 Mar 2024 18:15:53 +0000
ROA not before:           Tue 05 Mar 2024 18:10:53 +0000
ROA not after:            Tue 04 Mar 2025 18:15:53 +0000
asID:                     52359
IP address blocks:        200.14.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ab:c5:38:ea:9b:a7:da:99:32:f3:2a:78:dc:c4:2b:77:54:43:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:53 2024 GMT
            Not After : Mar  4 18:15:53 2025 GMT
        Subject: CN=D7300259B4DA34BD89B6870A544A6D9B2A378376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:de:52:3a:94:f8:d2:85:8f:3a:29:bc:f0:
                    eb:a1:d3:f6:36:31:a0:2e:df:18:2b:38:8d:3a:27:
                    2a:7a:3c:06:51:8b:fb:b6:68:0a:6f:53:c0:08:29:
                    62:e7:c2:5d:d0:53:f2:62:e8:05:f2:56:8f:2f:e4:
                    9d:2b:5b:de:27:8a:9f:ad:af:e9:20:3a:f8:49:c3:
                    a6:10:a0:3d:b7:f5:48:e5:ea:bd:0d:5c:c9:12:57:
                    57:fe:d2:26:89:b8:9b:dc:7a:89:da:87:10:f0:15:
                    03:65:f6:8c:38:9e:46:b5:a0:de:95:a4:68:40:a1:
                    bd:f4:18:c4:14:6a:85:06:94:9f:c2:ef:75:11:5a:
                    12:0d:fe:0a:91:c4:17:4e:cb:dd:05:77:b1:db:a7:
                    f1:ac:99:fd:7c:64:4f:6a:19:f4:ac:bd:6f:ca:a6:
                    1f:e1:c3:3a:34:3d:91:a3:36:d2:0d:90:72:50:8b:
                    af:9e:aa:0d:82:79:b1:d3:b6:89:eb:14:d2:13:cf:
                    8a:8a:64:ba:2c:f5:e0:ab:68:00:1e:c4:31:55:3e:
                    d6:0f:a1:9a:37:8f:ed:36:76:3f:91:e3:60:8a:b3:
                    da:80:0a:eb:96:87:30:00:d1:6a:70:bb:56:41:5e:
                    b2:90:50:49:61:7b:53:12:b1:70:0d:66:33:19:81:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:30:02:59:B4:DA:34:BD:89:B6:87:0A:54:4A:6D:9B:2A:37:83:76
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e37342e302f32342d3234203d3e203532333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:46:11:da:51:bb:7e:dd:5b:4c:0e:3a:ed:a2:20:f7:ea:cf:
         85:0f:a4:ba:a1:e9:66:a8:8f:8b:dc:7f:17:70:b0:03:da:c9:
         b1:b0:f7:aa:d5:e1:0c:fc:8a:e6:16:a4:9b:f7:be:3c:9b:a6:
         b3:84:3a:3f:d9:3e:83:20:ce:6a:9c:40:bc:98:5e:3d:d4:a9:
         d3:bd:80:c0:ee:c7:5a:0f:a2:09:0b:08:9c:75:51:3f:ce:89:
         97:9b:a1:91:3c:38:0b:87:62:0b:1a:37:91:f2:a0:9a:a4:4a:
         8c:3e:75:fd:e0:3d:a2:8d:ee:b2:35:ad:1d:51:eb:19:d0:7a:
         76:c3:a6:e7:6d:57:1a:6a:cb:f4:1f:2c:5b:8b:57:0a:a7:19:
         42:c0:4e:72:79:e9:98:e3:1a:16:70:73:ea:fd:30:5b:c2:12:
         f2:f9:7d:4c:84:39:b1:a0:ee:5d:aa:ef:92:7a:1a:27:27:46:
         04:c5:7d:63:ae:c8:f3:2b:96:0e:b4:25:2b:fa:56:b9:99:05:
         22:b6:f5:9a:f3:39:ec:75:7f:9c:11:6b:6d:75:22:dc:05:77:
         74:44:94:61:43:54:bd:27:08:e3:39:61:cb:b2:b2:cd:f7:41:
         e5:84:9c:57:6d:c1:a4:d1:b3:75:d4:ce:1c:2c:a3:ce:79:68:
         e9:7d:89:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:21:57 2024 by rpki-client on console-ams.rpki-client.org