Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135332e302f32342d3234203d3e203532333939.roa
File:                     3230302e372e3135332e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          3FRGRWHiQKqb7vDA/kS0n9++HWTxYplfi+kazF0bVlw=
Subject key identifier:   E2:67:BF:48:B8:F7:46:3B:99:36:A7:5D:D4:09:64:99:56:D2:57:07
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       4698D8C86B3BDE9B9419AE01B3B6318BABEA66D1
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135332e302f32342d3234203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 17:42:58 +0000
ROA not before:           Tue 05 Mar 2024 17:37:58 +0000
ROA not after:            Tue 04 Mar 2025 17:42:58 +0000
asID:                     52399
IP address blocks:        200.7.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:98:d8:c8:6b:3b:de:9b:94:19:ae:01:b3:b6:31:8b:ab:ea:66:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Mar  5 17:37:58 2024 GMT
            Not After : Mar  4 17:42:58 2025 GMT
        Subject: CN=E267BF48B8F7463B9936A75DD409649956D25707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:15:b3:94:e9:8a:73:69:2d:ff:00:b6:53:
                    95:b7:9a:cc:aa:e5:62:be:78:b3:4b:82:89:0b:c7:
                    cd:ea:45:6f:3e:9d:1e:24:e8:5d:2d:02:dd:f2:2f:
                    33:5a:5a:d0:80:74:ed:cb:82:d7:d7:70:de:b5:ef:
                    be:21:99:29:40:80:61:e7:7f:f3:67:67:5b:9d:69:
                    9f:6e:0f:0d:7d:cb:1d:c9:c5:4c:fe:e5:6a:ed:cf:
                    22:e1:42:41:55:37:21:da:19:fb:e4:27:25:9d:05:
                    67:e5:c4:06:66:7c:89:e3:ed:a0:c2:25:cd:c7:7f:
                    67:35:ce:e8:91:b4:91:27:6e:10:1e:0b:41:2c:a9:
                    ed:c2:c7:1a:32:73:8c:95:f9:1f:ad:50:74:4a:d7:
                    2f:08:20:80:4f:fd:90:b6:dc:85:cd:19:e4:fa:a4:
                    85:e3:74:72:15:29:4c:36:5e:04:cd:51:33:ab:54:
                    19:bd:cb:f2:9e:81:9e:ef:55:01:7c:69:eb:ed:9a:
                    3a:ba:a4:6b:d7:9b:a7:b0:98:9c:1a:69:7a:57:31:
                    6b:f6:ee:41:ef:9f:17:1d:17:b7:ea:29:2b:c9:e5:
                    3d:ef:ec:60:0e:d7:f3:e6:ed:b5:2d:d5:62:db:5c:
                    2c:69:99:20:79:51:30:c8:7a:71:0e:13:4a:23:3e:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:67:BF:48:B8:F7:46:3B:99:36:A7:5D:D4:09:64:99:56:D2:57:07
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135332e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b7:0d:c0:23:6f:80:0e:24:0a:6c:19:6b:88:fc:a1:9d:fd:
         23:aa:31:b2:ba:ba:68:1a:d5:43:7f:6c:cd:dc:66:b6:2b:43:
         79:9f:b6:7e:eb:bb:4c:f1:cd:45:6e:c6:69:28:91:7b:84:df:
         f7:74:7d:6e:e7:c4:40:13:80:a2:bb:6e:7c:01:60:38:39:f6:
         2c:e1:3f:07:d3:4e:55:0e:11:0e:20:d5:01:a0:14:96:d1:73:
         11:82:08:6c:05:23:1f:fe:05:08:99:b4:24:99:62:9c:e0:b5:
         b2:c0:bb:ce:90:ea:b6:5c:0a:98:cc:70:69:75:f3:9b:54:0c:
         03:a2:26:c2:40:2e:31:93:f5:c2:c7:d0:2c:08:d4:49:77:ca:
         0d:6b:ab:89:87:6f:60:1a:85:68:ee:a2:cd:26:8b:6f:f7:ca:
         3d:eb:49:78:dc:2c:76:98:12:0a:d2:ac:e5:f1:6b:76:be:76:
         4d:9a:37:d3:9e:5e:3d:f5:9e:68:9c:f1:99:1c:2d:8e:b2:56:
         da:e4:2c:1a:c7:e4:43:3b:d4:0f:95:76:7e:27:22:70:87:74:
         ee:61:f1:fc:25:62:c2:67:28:3f:c0:af:b3:69:b6:b8:f6:b9:
         bd:fe:6a:64:5a:fa:b5:03:05:12:23:d1:1f:79:20:a3:96:a5:
         84:5e:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org