Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e203134373534.roa
File:                     3230302e3131392e3135302e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          x9GqFbtPBgbGi4LiWFeqfdrZZKeSpkeQdvxPls5mlY4=
Subject key identifier:   17:A5:B9:6C:57:92:5A:5F:48:5D:0A:75:40:58:84:79:95:B8:3E:9C
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       0F8E60E54AB55FB7B9DFEF2ABF55A0D9D550A464
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:33 +0000
ROA not before:           Tue 05 Mar 2024 17:37:33 +0000
ROA not after:            Tue 04 Mar 2025 17:42:33 +0000
asID:                     14754
IP address blocks:        200.119.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8e:60:e5:4a:b5:5f:b7:b9:df:ef:2a:bf:55:a0:d9:d5:50:a4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:33 2024 GMT
            Not After : Mar  4 17:42:33 2025 GMT
        Subject: CN=17A5B96C57925A5F485D0A754058847995B83E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:d5:16:a7:bd:f5:1e:37:00:a0:09:1c:b3:
                    d5:66:2d:a1:a1:5a:cc:f2:3a:b1:41:68:aa:5a:bb:
                    cb:bd:eb:0a:17:41:29:1c:43:b0:0a:71:6c:2f:c9:
                    4a:1b:76:2b:e6:79:82:9a:6b:d9:87:5a:db:8d:88:
                    3a:da:37:b4:d1:37:ec:8e:df:65:6a:60:ff:3b:2e:
                    75:7c:23:89:5f:b8:a1:93:19:7d:1d:07:83:b8:3c:
                    58:33:95:4f:6c:4c:34:85:db:97:e5:2a:a3:7d:68:
                    ce:6e:ae:48:98:2a:61:f9:2a:79:71:40:c5:9d:7d:
                    b5:81:f0:8c:f8:86:46:95:de:03:65:04:b7:2f:64:
                    81:b8:c7:d5:78:52:b2:ee:a6:cc:47:09:62:c1:54:
                    aa:ab:3f:f6:89:4b:2b:4e:c6:ee:8b:7b:2b:13:89:
                    16:31:cd:53:f0:14:f8:25:4a:9e:9a:15:cf:2b:63:
                    c7:6a:db:fa:a0:c0:8d:e1:fe:ca:75:13:03:a7:bb:
                    47:37:82:4a:ad:88:fa:13:19:f4:26:6d:ce:95:66:
                    11:61:24:d0:31:f9:96:fe:39:09:6a:64:9c:ab:52:
                    52:0d:4a:de:b2:6b:85:dd:92:84:aa:3a:8d:53:e7:
                    97:11:26:e8:be:48:fa:5b:8f:05:c0:ed:12:8a:3c:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A5:B9:6C:57:92:5A:5F:48:5D:0A:75:40:58:84:79:95:B8:3E:9C
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:21:02:40:7b:71:aa:55:5c:52:db:e4:6a:53:79:07:aa:cc:
         73:74:fd:6c:24:46:f6:06:10:6a:ba:cb:8a:0c:aa:28:c7:9f:
         61:6a:34:14:b7:37:44:7e:84:38:c9:27:23:7f:ed:59:e5:2a:
         07:0c:0f:75:de:45:2b:f6:24:d8:d8:ec:1d:0a:a7:b9:3c:40:
         a1:49:a2:78:3c:d7:bc:8d:90:7c:fc:d5:85:8d:c1:10:c6:d9:
         74:9c:02:48:3c:28:8d:46:86:48:0b:66:a9:c9:8a:b9:56:46:
         ec:54:9c:20:a4:92:49:9f:53:b4:ed:59:29:cd:58:52:0e:69:
         19:a2:66:19:c7:62:0e:68:15:a0:7b:4e:80:da:3d:ec:d2:d0:
         1d:99:48:8b:9a:4d:71:70:15:33:3c:97:47:77:09:f9:f5:14:
         be:bc:38:ce:42:23:8f:67:1d:41:7e:58:64:91:52:66:9f:96:
         2b:81:02:d7:45:56:0b:73:15:2a:d0:8e:9d:bc:ce:1a:61:80:
         5f:0b:89:bc:7c:53:d9:ae:6a:93:60:64:1a:98:be:95:65:30:
         97:3d:49:75:1c:a0:d9:dd:90:89:66:7c:11:b6:fb:e2:78:66:
         2b:9a:27:8f:86:1d:12:0f:4f:35:6e:50:1b:46:f1:41:7d:20:
         80:58:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org