Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/3230302e36312e3234382e302f32322d3234203d3e203532343234.roa
File:                     3230302e36312e3234382e302f32322d3234203d3e203532343234.roa (raw, json)
Hash identifier:          hp3XgjO08OsbZ4U8ZzAsP0FtIY/mV4guEO+HYMkHEng=
Subject key identifier:   8D:2D:06:F5:05:81:D4:4B:25:DD:33:4E:1A:BB:6C:D9:E2:CF:BC:DB
Certificate issuer:       /CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Certificate serial:       58D961526273B3B9B2767936E97C34844B28A9B3
Authority key identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/3230302e36312e3234382e302f32322d3234203d3e203532343234.roa
Signing time:             Tue 05 Mar 2024 17:53:16 +0000
ROA not before:           Tue 05 Mar 2024 17:48:16 +0000
ROA not after:            Tue 04 Mar 2025 17:53:16 +0000
asID:                     52424
IP address blocks:        200.61.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d9:61:52:62:73:b3:b9:b2:76:79:36:e9:7c:34:84:4b:28:a9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
        Validity
            Not Before: Mar  5 17:48:16 2024 GMT
            Not After : Mar  4 17:53:16 2025 GMT
        Subject: CN=8D2D06F50581D44B25DD334E1ABB6CD9E2CFBCDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:07:b8:f9:c6:f0:c6:01:cd:2c:ec:be:2d:
                    e2:e5:f1:5e:d9:dd:07:a1:e7:13:34:5c:d8:b8:e2:
                    57:5a:90:09:ab:c5:7c:74:9b:ae:10:a5:7d:f4:ca:
                    11:a3:08:c6:77:6e:e6:57:77:25:72:69:c0:ac:eb:
                    8a:62:4c:78:33:6f:21:5d:47:72:71:bf:37:83:10:
                    b5:03:61:ea:3a:34:c5:b7:45:4e:79:a4:ce:ea:57:
                    26:fe:5e:47:8e:a7:56:ae:73:58:cc:6a:68:fb:ef:
                    b8:f4:df:3b:fb:a3:1f:85:3d:3a:bc:30:29:60:13:
                    6a:b7:80:43:38:dd:01:ea:b0:56:c3:94:cf:b7:78:
                    40:37:c6:7f:a8:32:c9:89:d8:c4:dd:45:ee:df:27:
                    da:a7:a9:3f:10:da:c6:f6:6b:ee:fe:f4:b1:1c:c4:
                    93:9f:9c:ee:71:30:5d:29:44:02:cc:5f:3a:01:b4:
                    66:b8:40:53:c4:46:d7:11:65:ed:04:25:09:0d:36:
                    3f:cf:27:23:b2:ec:8d:3a:ae:ee:31:4c:95:0c:d5:
                    58:fe:ef:6e:22:eb:b8:42:01:eb:6c:f8:b5:a6:37:
                    9d:ad:4d:2a:e9:c3:c3:b0:a4:ff:51:61:05:70:6b:
                    8d:c3:d7:b1:0d:cd:4a:7c:bc:1a:16:b0:02:ac:d1:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2D:06:F5:05:81:D4:4B:25:DD:33:4E:1A:BB:6C:D9:E2:CF:BC:DB
            X509v3 Authority Key Identifier:
                keyid:A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/3230302e36312e3234382e302f32322d3234203d3e203532343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:40:01:0d:f0:43:2f:69:ba:7e:e9:bd:74:37:95:25:0e:
         9d:6e:5e:fd:c3:de:bf:f8:5e:f0:3e:00:dc:3f:68:8f:10:7c:
         15:29:b6:f8:26:dd:80:7d:e7:6f:87:ec:93:02:a0:11:7a:53:
         aa:53:3d:5d:b2:6f:bc:73:cf:88:50:63:49:76:8f:ab:f7:ca:
         45:26:89:89:c3:f6:46:33:42:18:58:3c:72:7e:d4:c6:f5:2f:
         ea:ad:d3:be:92:16:b9:71:ba:6a:d7:9d:2e:d2:6e:82:d6:b1:
         95:c0:aa:cd:29:77:64:b7:bf:b1:9f:6c:92:a2:b8:b0:3a:cf:
         7b:14:de:91:8d:3d:41:0a:7b:ac:fc:04:1d:f3:37:ff:9e:0a:
         be:f4:21:d4:33:c1:ed:d9:3b:0e:73:a0:77:52:71:4f:21:99:
         5f:8a:da:ef:35:1a:b1:d3:8c:71:ef:36:8c:8e:36:24:cb:7c:
         11:81:05:2c:be:8a:99:00:6c:e7:e7:52:78:92:d3:87:74:83:
         0a:f3:83:cd:22:01:7a:ab:e5:4c:c7:69:7b:7f:dd:9c:f0:3a:
         c2:72:09:78:c9:c9:89:9e:cc:6f:12:4b:c2:fe:33:f1:13:a3:
         2b:26:35:96:e7:69:58:6b:fe:8c:5a:f4:8f:f6:ce:3e:0f:a1:
         c9:21:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org