Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e392e3135372e302f32342d3239203d3e203532333736.roa
File:                     3230302e392e3135372e302f32342d3239203d3e203532333736.roa (raw, json)
Hash identifier:          +gMscHVQIPYLZmgJc4GH3NdPBQgW2KNKCMXxAFsEeZM=
Subject key identifier:   96:01:24:61:C0:51:44:59:E7:A2:D2:87:50:22:34:38:5C:F2:88:A0
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       23EE37AA6413F6DE014E2112F14E8E3EC6806FB6
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e392e3135372e302f32342d3239203d3e203532333736.roa
Signing time:             Tue 14 May 2024 12:20:00 +0000
ROA not before:           Tue 14 May 2024 12:15:00 +0000
ROA not after:            Tue 13 May 2025 12:20:00 +0000
asID:                     52376
IP address blocks:        200.9.157.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ee:37:aa:64:13:f6:de:01:4e:21:12:f1:4e:8e:3e:c6:80:6f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: May 14 12:15:00 2024 GMT
            Not After : May 13 12:20:00 2025 GMT
        Subject: CN=96012461C0514459E7A2D287502234385CF288A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:5c:8a:db:aa:00:3d:1b:b5:4e:e8:12:ab:
                    3a:10:7f:da:cf:28:d8:2c:15:58:08:05:14:4d:ee:
                    24:c8:2a:b6:18:e7:a3:79:a7:98:f7:94:70:a4:5d:
                    14:bb:e6:24:79:d1:2b:f6:b1:e4:1a:2c:c1:a4:5e:
                    cc:46:73:15:c0:f2:e2:d1:e4:3b:0e:16:84:0d:84:
                    a2:01:78:c8:f8:22:b1:6d:06:c8:f4:2f:3d:db:82:
                    7c:0c:f5:de:74:76:2e:9c:71:e5:ea:e9:d9:6b:b6:
                    98:5d:82:58:6e:e3:06:0b:f9:40:78:61:a5:74:c2:
                    d7:0a:50:d6:f7:45:31:f2:ce:24:29:d0:6c:25:64:
                    76:fb:3a:85:37:fd:cf:76:58:e2:04:ab:a7:af:25:
                    7c:75:b7:3a:2f:1f:42:dc:60:71:c7:dc:f5:e9:7a:
                    5a:95:92:cd:b6:25:69:ac:e4:88:5c:8b:d0:60:fc:
                    61:15:b1:96:59:7e:f2:6a:1c:9b:0d:7f:bf:e6:f6:
                    f8:e2:0c:06:b4:b4:e4:fd:94:67:88:70:ce:99:2c:
                    7e:4d:8b:63:97:26:aa:d1:83:5d:71:78:8a:41:3a:
                    ba:b9:35:84:b1:22:66:87:01:dd:c6:07:82:d1:e3:
                    8e:87:3a:70:b5:a0:aa:09:1a:f9:ba:78:23:12:31:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:01:24:61:C0:51:44:59:E7:A2:D2:87:50:22:34:38:5C:F2:88:A0
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e392e3135372e302f32342d3239203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:5e:61:60:8d:17:96:66:ac:dd:58:74:e2:ae:69:63:97:
         fb:fb:12:18:54:3a:99:86:c4:4b:4c:85:58:d4:fd:32:a9:2f:
         14:dc:42:16:72:7b:6e:cb:58:91:13:d8:71:61:4e:08:c5:9c:
         b9:5f:85:54:fa:b7:93:3f:80:da:29:25:99:df:9a:2e:12:80:
         cd:cf:1e:d2:72:2e:fe:30:81:2e:22:b5:44:aa:25:83:25:21:
         38:95:3e:78:37:0a:00:e3:20:8b:0f:03:c2:3f:6f:43:9e:75:
         e0:71:3c:a8:39:e6:35:57:d5:91:8f:76:ae:cd:e2:42:5e:f5:
         18:81:55:80:67:c5:44:68:fc:50:33:59:a7:23:b8:15:76:5e:
         7c:89:72:9c:54:87:b9:52:90:ac:67:41:cb:00:07:4e:76:4b:
         9f:ef:15:8c:f1:d0:61:38:c4:eb:f2:3e:dc:4c:eb:13:05:61:
         3c:76:63:25:e2:cb:53:fd:19:5a:e7:6b:76:38:3d:64:13:85:
         ba:6e:8a:e3:3e:aa:02:32:62:e3:6c:32:9a:63:bf:df:82:0f:
         13:af:d8:19:93:78:d9:dd:9a:36:16:2a:3f:87:eb:43:fe:c5:
         e4:b1:24:9d:16:e5:45:a3:45:56:e6:78:a6:dc:a2:5e:21:0e:
         52:18:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org