Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234302e302f32342d3234203d3e203330313333.roa
File:                     3230302e39332e3234302e302f32342d3234203d3e203330313333.roa (raw, json)
Hash identifier:          BFRvYPsdvcRTBPkwrugvHIkO8jWhCbDgI2ZwH0ARTUo=
Subject key identifier:   DB:D4:9E:82:62:23:6F:BB:07:FF:7C:44:8E:17:48:F2:E2:0A:66:02
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       485B5C7BE313EDCE399233F0710957576DE79CDA
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234302e302f32342d3234203d3e203330313333.roa
Signing time:             Tue 05 Mar 2024 17:39:52 +0000
ROA not before:           Tue 05 Mar 2024 17:34:52 +0000
ROA not after:            Tue 04 Mar 2025 17:39:52 +0000
asID:                     30133
IP address blocks:        200.93.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl
                          rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5b:5c:7b:e3:13:ed:ce:39:92:33:f0:71:09:57:57:6d:e7:9c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Mar  5 17:34:52 2024 GMT
            Not After : Mar  4 17:39:52 2025 GMT
        Subject: CN=DBD49E8262236FBB07FF7C448E1748F2E20A6602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:06:aa:93:d1:7e:e7:d4:cc:89:b6:d1:0b:
                    af:e8:f8:e2:14:31:fd:c1:98:64:e6:12:d8:29:74:
                    56:51:c7:f3:c8:bd:c8:23:83:f4:ba:3e:d3:d3:0c:
                    a5:ef:e6:a2:db:fb:20:0f:8b:6f:04:44:d9:2d:41:
                    43:37:95:92:b0:4f:c2:44:5d:74:88:ed:a7:b9:df:
                    d4:c2:3d:bb:fc:f9:e3:2c:4c:0f:f9:75:03:5f:fd:
                    dd:ba:f2:0a:7e:41:80:dd:d7:58:92:5a:81:6a:f9:
                    3a:0b:d2:80:1c:8d:67:6b:cd:83:8b:d9:da:9d:c0:
                    c6:d0:81:b0:4a:00:1f:df:0a:c5:4d:51:98:d8:29:
                    c3:0b:1f:0f:68:14:f7:f6:7c:a5:96:a6:b5:1e:03:
                    3d:ef:cd:f2:96:07:6a:ea:84:a6:8c:01:9a:3d:5c:
                    8b:ad:64:31:d9:48:93:4f:8c:1f:ed:37:81:58:5e:
                    41:b2:33:03:67:8c:3f:e1:b6:76:74:6e:30:24:c7:
                    e7:9d:d1:25:55:2f:3c:09:4c:e9:20:b5:a2:ca:fb:
                    ba:e5:99:71:4c:e7:e3:0a:b7:2a:87:61:b6:04:5d:
                    73:03:3d:e3:71:ad:65:4a:2a:5a:d6:04:98:81:89:
                    db:71:e4:0d:de:9e:96:95:4f:a5:32:60:21:b5:7d:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D4:9E:82:62:23:6F:BB:07:FF:7C:44:8E:17:48:F2:E2:0A:66:02
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234302e302f32342d3234203d3e203330313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:2f:df:d0:9a:ec:27:73:8e:bd:94:44:4b:d1:80:2f:59:a3:
         82:8e:65:59:b2:f5:fa:fe:a9:11:86:5c:f7:03:4c:2f:fa:f0:
         c5:29:03:03:3a:28:31:b2:ba:6f:27:0c:84:27:b1:29:54:20:
         50:23:fb:df:37:71:51:76:ac:77:e7:25:05:3e:49:6c:a9:d6:
         a5:2c:1b:46:71:1b:f6:14:d6:aa:98:42:db:4e:3b:6d:05:5e:
         59:cb:29:ca:a2:77:f1:bb:e8:e7:da:aa:81:75:6d:3c:80:d1:
         6c:a8:fe:23:86:18:ab:97:73:b0:f4:fe:b2:03:2d:53:23:f2:
         71:0e:5b:5a:2f:85:28:08:55:2d:37:30:9b:67:92:8b:39:0b:
         c7:b5:29:e5:01:79:f7:a3:7d:54:37:d1:56:7c:45:36:08:22:
         94:1b:c1:6a:ae:89:5c:91:9d:93:a1:c0:be:9f:74:86:11:37:
         7c:84:94:95:ed:f1:56:2e:5a:b0:f1:0b:68:31:00:f4:f0:6d:
         55:16:46:83:9a:84:cf:6c:f4:7c:0a:25:d1:2e:b4:9a:bb:52:
         d6:b2:41:cc:43:1f:8e:ab:7d:11:5c:72:73:c0:50:5d:b9:5f:
         26:fd:04:52:45:15:67:93:26:6a:10:5d:22:06:f8:95:42:d3:
         a3:df:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:54:35 2024 by rpki-client on console-fra.rpki-client.org