Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203134373534.roa
File:                     3230302e3131392e3134382e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          8Jm398JB1PgvBF48QYzLw+yjjqLJQ0NkBEQaH39xxvI=
Subject key identifier:   95:D2:DB:D6:93:61:89:DB:C3:A5:A9:E2:AB:42:7C:9A:F3:A6:87:1A
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       2046F7AACBC4F239EAE66A1959A0FB61CB9DD9A0
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:26 +0000
ROA not before:           Tue 05 Mar 2024 17:37:26 +0000
ROA not after:            Tue 04 Mar 2025 17:42:26 +0000
asID:                     14754
IP address blocks:        200.119.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:46:f7:aa:cb:c4:f2:39:ea:e6:6a:19:59:a0:fb:61:cb:9d:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:26 2024 GMT
            Not After : Mar  4 17:42:26 2025 GMT
        Subject: CN=95D2DBD6936189DBC3A5A9E2AB427C9AF3A6871A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:0b:f5:58:89:3f:90:f6:fc:a1:fc:d4:b5:
                    2c:7e:39:2c:27:81:e1:21:ab:14:33:a0:ee:ae:c9:
                    ae:30:bd:ad:fa:7c:a2:88:6c:37:3d:2b:7f:56:dc:
                    23:54:3e:94:c2:87:f2:ac:21:eb:de:b7:4c:41:84:
                    ee:9a:a1:2e:bb:71:1b:79:a2:ba:52:1b:9e:c5:a1:
                    dc:e7:c6:dd:19:48:96:ec:75:90:05:3d:cd:0b:14:
                    2e:0c:f0:9d:b2:ba:30:aa:a4:64:33:4c:25:b1:28:
                    c1:ba:80:ce:c5:8a:a4:2c:20:98:38:0e:fe:47:f4:
                    a9:e6:78:ac:b0:e7:01:dc:af:7c:14:62:7e:59:f1:
                    01:c2:47:b4:3e:03:c8:c3:11:37:3a:44:55:67:09:
                    e1:c5:62:f7:03:7a:2a:0e:22:34:43:3c:36:9b:06:
                    2c:68:19:66:b0:b0:50:ee:6b:e2:54:60:7e:86:d3:
                    52:9c:ac:2c:04:17:98:0d:e3:21:22:52:2b:cd:60:
                    aa:a0:c1:10:09:31:f5:68:25:4c:75:d8:9c:bb:4d:
                    1d:23:04:54:4a:86:e6:ae:ce:d9:f2:8e:03:88:b4:
                    cd:bb:4a:5f:66:ab:50:09:1a:5b:d4:38:df:37:4f:
                    db:ee:00:2c:fd:e5:a2:9d:89:31:29:9e:9b:f3:5d:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D2:DB:D6:93:61:89:DB:C3:A5:A9:E2:AB:42:7C:9A:F3:A6:87:1A
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:60:21:47:33:f5:f7:2c:2f:6b:47:e7:8b:7c:4d:fb:08:45:
         af:73:c8:f4:f8:ec:6e:d3:a6:94:dc:34:14:a0:6e:86:1d:57:
         87:bc:56:a2:9f:8c:21:72:c5:41:5f:26:c6:fe:5e:a3:7c:23:
         3b:3b:2e:79:42:2d:a6:69:45:ea:1b:b8:a7:c2:0a:d1:22:c5:
         58:07:fb:dc:cf:82:1d:94:1c:39:2b:39:de:52:12:10:c2:7f:
         1e:44:f2:e2:0d:4a:75:ce:8a:7b:e3:c9:a1:21:37:72:89:fb:
         8d:27:06:b3:63:73:ac:14:82:82:76:07:e0:21:ec:43:4b:42:
         b2:ca:e5:d2:82:e1:b7:9d:72:5e:9e:cb:97:53:c0:db:c7:b4:
         65:11:06:7e:49:70:b5:5c:1e:d5:07:56:72:01:5a:f7:3c:f5:
         68:1d:4f:59:18:c2:ae:8f:c5:32:f4:5b:a4:d4:f9:31:6e:e9:
         99:01:39:1d:aa:7d:5e:51:e4:08:cc:6b:50:7a:f6:f6:0f:97:
         63:34:cd:3c:32:f2:b8:4e:c2:1e:fe:88:62:99:d9:f0:2c:4f:
         cf:5d:24:1c:c9:02:e0:05:4d:86:90:8b:48:33:03:2c:d1:a8:
         71:dc:87:2e:87:2e:6e:72:b3:fd:58:21:8e:3b:2f:f2:77:34:
         07:75:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org