Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234352e302f32342d3234203d3e203330313333.roa
File:                     3230302e39332e3234352e302f32342d3234203d3e203330313333.roa (raw, json)
Hash identifier:          rHly2vfu11gxLmLzoH+nmAel8rNd2OatSGb5oc3jplY=
Subject key identifier:   84:45:2B:C5:90:97:7C:01:03:54:D7:47:26:D3:5B:4E:FE:28:32:F9
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       0114B3EAC50F94B3EF68D9FB82DB47F670EADD3D
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234352e302f32342d3234203d3e203330313333.roa
Signing time:             Tue 05 Mar 2024 17:39:54 +0000
ROA not before:           Tue 05 Mar 2024 17:34:54 +0000
ROA not after:            Tue 04 Mar 2025 17:39:54 +0000
asID:                     30133
IP address blocks:        200.93.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl
                          rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:14:b3:ea:c5:0f:94:b3:ef:68:d9:fb:82:db:47:f6:70:ea:dd:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Mar  5 17:34:54 2024 GMT
            Not After : Mar  4 17:39:54 2025 GMT
        Subject: CN=84452BC590977C010354D74726D35B4EFE2832F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:2b:32:4d:a4:aa:4f:b1:be:ae:83:6b:9c:
                    ae:d8:59:67:5b:bb:71:65:9e:a8:c5:c2:61:37:06:
                    6f:fa:97:ed:fd:30:3d:58:8b:ba:c7:ce:72:d1:c1:
                    1c:fc:6c:fe:3d:2a:4c:46:61:81:b1:21:fd:a3:92:
                    71:00:4c:70:6b:ba:63:03:d1:66:4e:32:23:b3:a7:
                    eb:6d:d8:7f:8a:f6:20:63:15:1f:5b:66:f6:35:08:
                    34:a2:a0:cf:3e:fb:49:21:f3:2f:50:d1:a5:74:a8:
                    da:e5:8b:c2:f3:d8:81:36:81:cb:8d:ce:e6:a0:71:
                    4f:06:94:0b:17:83:e8:49:9b:5a:68:a7:c3:94:de:
                    55:3b:c0:41:1f:64:f5:ec:91:b1:2f:be:ca:e6:63:
                    56:63:72:5c:01:52:c9:8b:8a:f1:e9:62:9a:3e:50:
                    9d:90:e5:4b:a5:ec:e4:4a:98:3f:c4:13:c9:92:d4:
                    45:3b:7d:c6:fe:0a:bc:c3:40:38:d5:55:3f:09:7b:
                    59:c6:96:47:24:b5:fb:e8:3b:53:2a:ea:83:f9:6e:
                    1d:cd:3b:95:80:2c:46:08:ef:ef:80:74:0c:7d:10:
                    12:1e:56:47:44:7b:f1:8a:79:48:a2:46:15:4e:4b:
                    66:63:45:34:ec:78:88:63:3e:c9:8e:36:e6:c1:d3:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:45:2B:C5:90:97:7C:01:03:54:D7:47:26:D3:5B:4E:FE:28:32:F9
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234352e302f32342d3234203d3e203330313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:e3:01:1e:59:5b:1c:1e:2d:52:88:b2:c0:ab:20:02:84:
         69:2a:47:d8:23:a2:5e:94:a3:1d:8d:ce:20:ad:3b:70:9d:06:
         d4:1d:f5:73:2c:19:d6:be:d7:bc:f8:f8:7c:11:0a:32:94:fc:
         25:61:d6:50:9c:40:27:a1:e5:59:b4:f3:94:4e:b8:c9:16:b6:
         0d:14:ba:e3:05:0a:d1:08:9f:ae:30:33:73:af:53:7d:46:07:
         a9:d8:68:ae:cd:c9:da:6b:94:03:7a:f6:a1:82:be:0e:7b:f6:
         7f:62:47:45:d7:f1:be:a4:a7:82:7a:1a:f0:7e:82:15:52:ba:
         44:8f:c9:d3:63:52:1b:67:c4:f9:e8:d0:32:c8:76:b3:74:8b:
         da:45:47:43:93:6f:cc:5d:83:93:24:f1:0a:34:dd:86:f0:c0:
         14:80:09:33:39:c6:6e:bb:97:9e:4c:38:5b:79:5b:b8:7a:28:
         3a:6f:4e:25:34:20:f4:f6:c0:6b:4d:19:52:98:f3:ad:a1:e3:
         43:a8:14:ed:ae:7b:66:ac:10:a4:5e:16:f5:35:47:52:53:42:
         67:60:6c:0f:c4:90:47:79:0f:99:f7:8d:4f:d6:59:ad:31:55:
         ae:c9:25:66:52:05:93:06:5d:c6:8e:4d:e6:63:84:94:d7:b7:
         ab:c0:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:54:36 2024 by rpki-client on console-fra.rpki-client.org