Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234362e302f32342d3234203d3e203330313333.roa
File:                     3230302e39332e3234362e302f32342d3234203d3e203330313333.roa (raw, json)
Hash identifier:          DkWh1GJilTfyZmxu7R3lP1s5erBz2Tbc1IOnAJwdqio=
Subject key identifier:   0F:6D:F3:C2:29:CB:C6:F9:CA:95:78:B1:EA:9E:B5:FE:5E:76:A0:54
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       770A86257EFA5CF81E2A6F7660AE550DFB9FC4D6
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234362e302f32342d3234203d3e203330313333.roa
Signing time:             Tue 04 Feb 2025 18:04:35 +0000
ROA not before:           Tue 04 Feb 2025 17:59:35 +0000
ROA not after:            Tue 03 Feb 2026 18:04:35 +0000
asID:                     30133
IP address blocks:        200.93.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl
                          rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0a:86:25:7e:fa:5c:f8:1e:2a:6f:76:60:ae:55:0d:fb:9f:c4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Feb  4 17:59:35 2025 GMT
            Not After : Feb  3 18:04:35 2026 GMT
        Subject: CN=0F6DF3C229CBC6F9CA9578B1EA9EB5FE5E76A054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:6c:e0:96:9b:28:85:d6:8f:74:27:5d:37:
                    2b:a5:36:25:5f:19:46:5b:1e:b0:28:6c:11:e1:14:
                    00:44:83:4f:0e:3d:7c:bd:e5:49:40:2c:7e:b8:f1:
                    16:37:00:a9:1c:5a:10:ce:16:8a:ef:50:bb:55:3b:
                    00:94:0d:5e:39:2e:d9:d1:9a:ed:80:44:0e:bc:25:
                    51:72:33:3d:72:73:b5:d1:d1:d4:79:84:a2:96:2c:
                    00:ee:1a:87:70:40:7b:69:62:44:91:a0:33:b9:d1:
                    ae:95:6b:44:a2:7e:ea:54:5d:7c:8f:2d:dc:58:1d:
                    74:fa:a4:3a:59:62:84:91:fa:f0:a5:c9:c6:2f:b4:
                    5a:eb:b9:1a:1c:18:04:73:ee:f8:87:2a:60:da:65:
                    f3:24:2e:ce:11:7d:1f:f9:47:4a:4d:cf:30:7a:a0:
                    c1:5f:0e:85:39:12:dc:51:13:d6:d2:82:fe:28:2c:
                    d6:e6:16:d5:8a:a2:58:7b:91:a5:89:66:cd:3e:f6:
                    14:df:88:55:d0:a9:bc:f5:73:34:91:95:1b:26:8c:
                    b0:a1:a5:7e:0e:a1:28:e7:25:63:fc:09:56:24:a3:
                    63:4b:f3:7f:23:71:1a:1f:7a:69:70:33:d5:13:03:
                    2b:c3:01:42:6c:39:95:4f:67:b2:3e:a4:a6:5f:9c:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6D:F3:C2:29:CB:C6:F9:CA:95:78:B1:EA:9E:B5:FE:5E:76:A0:54
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234362e302f32342d3234203d3e203330313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:50:25:b0:20:e5:82:f5:01:6d:38:6a:92:ad:95:ff:e3:
         c9:03:c8:dc:fb:cd:c9:54:41:39:1d:41:db:46:bb:93:21:49:
         10:1d:10:5c:7b:03:87:68:64:e8:30:37:bb:a1:ed:cf:d6:81:
         fd:48:11:c6:b2:48:d9:65:5b:31:24:bd:b9:aa:14:b5:75:d7:
         34:f0:dd:d5:1d:8b:bc:2f:f9:07:10:e9:21:23:5f:76:bb:62:
         fa:38:f5:e0:af:9e:ba:69:70:30:c3:e4:17:ae:8c:0b:b0:2e:
         70:23:91:28:f0:16:c3:d8:2e:56:0e:27:c7:a4:17:af:6c:7b:
         ab:1c:5b:85:05:f3:78:bc:0d:5c:2b:30:8c:9e:7d:a2:5a:bf:
         0c:6b:6c:d0:21:6a:74:ab:90:eb:58:dd:fb:f9:5e:f1:75:ae:
         d2:81:18:3a:f4:2f:71:4c:51:e1:63:85:4a:4d:3f:c5:34:76:
         79:de:76:4f:ed:4b:88:19:21:3b:89:1a:8e:5d:4a:e0:33:32:
         73:7e:31:45:ac:83:00:92:65:6a:79:39:d1:c2:bf:31:67:d1:
         89:7c:fc:ec:8b:34:a0:9e:b4:7b:c4:90:90:6f:b5:8f:70:c8:
         5f:fc:38:9f:45:97:30:2b:e4:15:d8:22:4b:24:54:ef:e7:e9:
         de:b5:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:08 2025 by rpki-client