Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234332e302f32342d3234203d3e203330313333.roa
File:                     3230302e39332e3234332e302f32342d3234203d3e203330313333.roa (raw, json)
Hash identifier:          6OqhWTAq+ZVbfWPy325ddfElBH+7qeRv5PsPiQ/PGPw=
Subject key identifier:   5E:D6:19:33:80:89:F6:47:59:6F:6E:0B:BD:67:84:F1:DB:78:74:58
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       2B5A10F863F694C3A75C8EDC715CE3116E4C1D7E
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234332e302f32342d3234203d3e203330313333.roa
Signing time:             Tue 05 Mar 2024 17:39:50 +0000
ROA not before:           Tue 05 Mar 2024 17:34:50 +0000
ROA not after:            Tue 04 Mar 2025 17:39:50 +0000
asID:                     30133
IP address blocks:        200.93.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl
                          rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5a:10:f8:63:f6:94:c3:a7:5c:8e:dc:71:5c:e3:11:6e:4c:1d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Mar  5 17:34:50 2024 GMT
            Not After : Mar  4 17:39:50 2025 GMT
        Subject: CN=5ED619338089F647596F6E0BBD6784F1DB787458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:ba:04:71:86:c9:86:8a:af:6f:f6:9e:08:
                    d6:37:08:ff:5d:1c:a4:41:15:44:80:27:62:6b:cc:
                    9e:a5:df:e3:d6:14:96:e4:76:bf:be:63:e0:df:fd:
                    ec:99:b8:a9:ea:f1:3b:fd:cf:07:7d:89:82:94:1e:
                    97:cc:47:2a:60:e3:5d:af:4c:88:96:ee:fe:7e:e5:
                    36:c0:3e:e4:cc:ac:72:11:05:db:31:7d:5b:f3:85:
                    f7:67:32:57:84:ff:b6:fe:8e:cb:31:b9:6d:5d:dc:
                    af:3e:d9:30:b0:9c:62:07:f1:22:fd:e0:13:23:6f:
                    4f:e4:5f:05:ac:d8:c6:61:8e:97:dc:f6:38:de:6e:
                    c0:f6:34:7e:71:c4:df:42:36:07:2d:e5:5f:ef:ef:
                    99:50:5a:0b:5c:53:38:78:dd:69:60:52:d9:21:e3:
                    50:11:76:61:00:06:3e:0e:72:ec:3a:90:38:d9:d0:
                    f4:49:f1:36:e7:0c:6e:ca:9c:c3:40:f8:10:90:5e:
                    1c:60:f9:68:de:10:58:b0:5f:3c:c2:4a:c1:73:95:
                    5e:c8:63:ed:c3:e5:c1:10:ed:a9:6f:ae:b7:8e:7d:
                    eb:bc:41:09:e7:55:06:15:5c:f9:d9:f7:4f:ee:d0:
                    71:69:a1:d6:d4:d1:fc:b9:af:18:d7:9d:83:94:c3:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D6:19:33:80:89:F6:47:59:6F:6E:0B:BD:67:84:F1:DB:78:74:58
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234332e302f32342d3234203d3e203330313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:34:c4:45:d2:19:91:99:10:93:b9:13:46:a0:02:48:d1:bc:
         71:d6:3c:ef:b4:4c:16:70:87:7a:b5:11:2b:9e:63:4d:22:b2:
         21:bb:e6:8b:20:9c:e2:b0:10:e6:67:49:55:cf:a4:16:ed:2d:
         2f:2f:94:9c:68:fb:b5:5f:4f:5a:06:3d:4b:34:66:fa:70:9c:
         cd:58:7e:8b:d4:66:2b:9e:77:1c:8d:e4:03:d4:ca:34:1c:e8:
         b9:b2:d9:1a:53:5f:5b:41:69:29:34:79:64:50:c6:1a:67:37:
         70:36:b5:62:05:86:91:ba:3f:36:a9:a3:24:ed:c8:0b:af:17:
         c3:a8:54:59:2f:61:15:c0:1f:61:f7:d6:46:4d:e5:cb:7c:0c:
         f6:82:6f:e2:82:31:93:9e:b3:54:a2:66:a0:88:2c:cb:e9:47:
         1a:a8:d1:b5:f7:4e:68:c4:31:df:90:5f:0f:f3:7f:20:8d:da:
         43:c6:ff:9d:61:63:9a:53:62:89:a9:a2:41:5f:09:5d:08:b2:
         56:b3:a1:4a:80:02:67:f5:47:a0:89:80:12:8f:34:da:63:ed:
         1b:32:0d:ac:c0:2c:b0:d8:63:49:2f:3a:01:8d:07:c2:9c:48:
         8c:7c:b4:a2:4d:09:41:75:54:d5:f6:92:a2:c0:ab:72:e2:af:
         b6:d5:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:20:53 2024 by rpki-client on console-ams.rpki-client.org