Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3230302e32342e3234382e302f32312d3234203d3e203532333831.roa
File:                     3230302e32342e3234382e302f32312d3234203d3e203532333831.roa (raw, json)
Hash identifier:          vqLW8BkD3V8hQmeZ/LHL8dIpcqGpeK7y1O+n1coGNWE=
Subject key identifier:   1F:BA:E1:7C:40:1C:2F:73:84:A6:90:D0:45:64:3F:C2:E9:20:FD:BE
Certificate issuer:       /CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
Certificate serial:       783CDAC48FA12270DA9EAFB1CCF1F6C93D22E34E
Authority key identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3230302e32342e3234382e302f32312d3234203d3e203532333831.roa
Signing time:             Thu 25 Apr 2024 12:50:01 +0000
ROA not before:           Thu 25 Apr 2024 12:45:01 +0000
ROA not after:            Thu 24 Apr 2025 12:50:01 +0000
asID:                     52381
IP address blocks:        200.24.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3c:da:c4:8f:a1:22:70:da:9e:af:b1:cc:f1:f6:c9:3d:22:e3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
        Validity
            Not Before: Apr 25 12:45:01 2024 GMT
            Not After : Apr 24 12:50:01 2025 GMT
        Subject: CN=1FBAE17C401C2F7384A690D045643FC2E920FDBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:7e:f6:25:53:88:fe:64:ff:b7:b5:5c:8d:
                    c8:00:85:c0:9d:af:df:43:de:43:f6:64:e7:b1:e5:
                    e9:9c:a9:52:dc:5a:7b:d2:54:4f:22:3b:a3:f4:a3:
                    8d:4d:f8:32:e4:79:24:f4:44:2c:c4:e5:c9:c0:0e:
                    0f:98:11:19:95:3a:c2:89:35:33:7b:63:05:ac:e4:
                    e7:50:f8:12:92:66:e7:3e:c6:7a:6c:8e:c9:37:27:
                    f1:73:b7:00:3b:01:32:04:f3:aa:20:1b:00:3b:d7:
                    c0:2e:bf:4c:dc:ae:a8:33:c8:c8:11:9c:da:4e:4e:
                    76:1c:48:67:ac:3b:ad:a6:84:f3:ad:3e:e2:b8:84:
                    01:7b:7d:71:df:23:dc:3f:28:cb:f5:8e:a2:36:e8:
                    ff:b2:cd:77:21:33:7a:90:f7:3c:df:af:00:f7:d9:
                    04:9a:8d:ab:c1:82:f3:83:f8:97:60:ad:01:56:61:
                    57:0d:46:15:df:1e:ed:28:e2:bf:37:38:eb:23:b1:
                    a7:cb:b7:fa:a5:cc:70:48:e6:7c:e3:70:20:f0:ba:
                    60:96:10:37:26:63:62:88:01:c4:f3:c6:ab:2a:8b:
                    34:1c:47:84:44:5d:00:b4:f3:92:c1:e9:4d:8d:9f:
                    4e:49:6e:5e:8d:01:0a:eb:ea:89:af:91:c2:61:3c:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:E1:7C:40:1C:2F:73:84:A6:90:D0:45:64:3F:C2:E9:20:FD:BE
            X509v3 Authority Key Identifier:
                keyid:18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3230302e32342e3234382e302f32312d3234203d3e203532333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:92:ef:6e:4e:3c:7b:b3:ad:60:62:04:a9:dc:b3:0d:c5:
         5c:f3:8f:9e:eb:3f:be:ce:96:16:23:95:7f:e0:87:58:64:0d:
         ad:02:2e:61:67:0d:75:17:92:47:1e:27:f2:af:24:1d:4a:49:
         fc:ca:58:84:b0:52:53:f6:71:89:05:06:f4:d3:0f:c0:34:c6:
         5a:70:30:f3:04:37:19:c6:18:83:e1:7d:49:7b:99:24:e4:c9:
         3a:a0:4d:10:c8:d0:d2:79:bf:c1:9c:80:47:65:72:ff:1e:86:
         1f:32:85:43:ef:6b:35:70:c5:95:0f:21:b9:78:90:3e:b6:28:
         10:b6:eb:67:71:86:c4:62:74:b9:c1:97:9b:6c:4e:e3:1d:77:
         b7:48:f6:ae:38:05:9f:59:76:ac:cc:bc:81:75:01:66:2f:57:
         2f:23:d0:18:29:7a:39:24:ad:4f:36:f8:89:fc:38:01:bb:fc:
         84:87:7f:de:ba:ec:61:22:c9:27:94:6b:bc:19:6d:3e:90:de:
         60:41:6f:7c:45:f8:90:c8:b7:c7:18:49:70:a3:be:5e:25:ba:
         e1:b1:7d:8b:7b:03:66:8a:c5:ac:4d:d9:56:d1:97:99:a8:02:
         3b:29:ff:cc:a4:2a:9d:84:6b:2f:87:ad:81:f1:96:5a:13:31:
         42:fe:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:12 2024 by rpki-client on console-fra.rpki-client.org