Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa
File:                     3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa (raw, json)
Hash identifier:          GSQ7vA69TUPcL289y4LV2shMY5Hk8JsTeZn5UHHSX5E=
Subject key identifier:   C2:A5:FB:0E:40:0A:2B:8A:03:B1:8E:21:01:14:B9:F4:9F:65:3D:E4
Certificate issuer:       /CN=E05464F45EEB0ED0894BBD64663203701E769A12
Certificate serial:       6ED4AB8C58AE6942F84C7D5A87A2209CF1B31536
Authority key identifier: E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa
Signing time:             Tue 05 Mar 2024 18:17:04 +0000
ROA not before:           Tue 05 Mar 2024 18:12:04 +0000
ROA not after:            Tue 04 Mar 2025 18:17:04 +0000
asID:                     26505
IP address blocks:        200.124.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d4:ab:8c:58:ae:69:42:f8:4c:7d:5a:87:a2:20:9c:f1:b3:15:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05464F45EEB0ED0894BBD64663203701E769A12
        Validity
            Not Before: Mar  5 18:12:04 2024 GMT
            Not After : Mar  4 18:17:04 2025 GMT
        Subject: CN=C2A5FB0E400A2B8A03B18E210114B9F49F653DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:76:31:ce:d8:f4:57:e2:2a:25:5f:b3:0e:
                    2f:23:76:e5:c1:d2:ce:60:71:0c:52:94:7f:9a:39:
                    c7:ee:b4:06:b8:a5:4b:15:ff:b7:b0:a7:57:7c:74:
                    4e:5b:05:da:5c:13:10:de:b2:15:c5:11:c8:43:be:
                    99:87:8d:58:19:f1:8b:ef:54:67:34:4d:65:48:d8:
                    dd:85:da:d1:f9:df:02:36:df:05:4a:1d:0c:d8:30:
                    01:57:ad:44:d5:c2:53:19:6f:c4:d5:37:60:06:18:
                    16:ed:c2:2f:bd:f9:e9:f8:2a:ca:e5:43:e3:91:13:
                    9f:5b:f3:39:cb:6f:dc:4d:79:2e:16:8e:dc:0e:92:
                    6f:90:4d:22:91:79:b2:09:a2:d2:d1:68:e3:35:22:
                    4b:f3:3f:e4:1d:87:88:0f:de:29:08:bd:89:29:09:
                    0a:0c:25:7f:fa:07:67:f4:52:d5:42:f4:ab:40:ec:
                    20:9b:51:13:b0:ec:f8:59:30:9c:18:a5:17:34:7b:
                    18:5a:44:32:ee:e1:19:b9:03:1f:79:ae:ae:fb:41:
                    dd:60:a8:7d:d8:ff:92:67:78:80:95:db:7a:43:47:
                    3f:62:1c:71:f1:fb:4c:c2:0a:80:14:2b:10:13:e2:
                    e9:f6:d7:b4:64:6c:6b:11:e6:84:58:e5:a2:df:52:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A5:FB:0E:40:0A:2B:8A:03:B1:8E:21:01:14:B9:F4:9F:65:3D:E4
            X509v3 Authority Key Identifier:
                keyid:E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:b3:b7:13:cd:0c:72:19:0c:cc:d7:1e:0c:23:34:77:d4:
         c0:90:a8:6d:17:1a:27:ff:6e:a1:9c:40:18:d5:88:b2:9e:28:
         fa:86:df:70:a3:b6:d8:79:4a:f7:ab:02:fe:47:af:6f:24:24:
         bc:02:35:66:5e:c1:ba:b8:84:ca:6c:15:95:18:2e:05:3d:7e:
         83:49:3c:02:2e:13:5d:02:b3:bd:78:43:48:06:c7:b7:46:fd:
         4b:c8:8e:16:3b:2a:71:c0:3e:e8:9a:ab:4a:bc:55:70:cf:55:
         f4:e1:18:cb:97:7b:7e:d8:b6:ac:41:90:94:17:48:19:a8:a9:
         55:d7:e2:32:c3:f2:3d:b6:f0:92:fc:a4:d3:fe:9c:bf:79:60:
         49:21:62:d0:ca:66:45:1f:e3:8f:a8:b8:5e:7f:0a:f2:5a:4b:
         b2:59:7a:26:99:9d:ab:69:42:32:6f:c0:3b:bd:8a:b0:fe:30:
         b4:e2:de:69:58:e6:7c:9e:3f:fe:cc:00:a4:01:65:02:44:ed:
         6d:ee:69:7d:24:82:d0:64:ee:80:c4:57:fd:8a:c8:4b:87:70:
         f1:a4:cf:18:dc:f8:85:ad:4b:f1:37:8d:2e:56:86:2b:22:fb:
         a6:36:7b:ce:19:4c:ad:53:d5:34:11:11:b3:74:3c:e9:50:d9:
         0f:ae:11:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org