Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203130343831.roa
File:                     3230302e33332e38322e302f32342d3234203d3e203130343831.roa (raw, json)
Hash identifier:          TlbkAkO4CYBZ12jON5YBuH/m536QkvOxNiYNImNLjE0=
Subject key identifier:   53:5B:38:6D:A6:D9:35:7A:56:FC:11:24:9A:28:91:03:74:EA:72:45
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       19CC48A72EC65289D8C10C78039934D037122A1E
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203130343831.roa
Signing time:             Tue 05 Mar 2024 17:41:33 +0000
ROA not before:           Tue 05 Mar 2024 17:36:33 +0000
ROA not after:            Tue 04 Mar 2025 17:41:33 +0000
asID:                     10481
IP address blocks:        200.33.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cc:48:a7:2e:c6:52:89:d8:c1:0c:78:03:99:34:d0:37:12:2a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:33 2024 GMT
            Not After : Mar  4 17:41:33 2025 GMT
        Subject: CN=535B386DA6D9357A56FC11249A28910374EA7245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0b:a3:70:83:41:8a:96:0b:c9:82:65:0c:fc:
                    a9:b7:1e:4c:89:b3:b8:ee:a7:57:4b:c3:20:63:cf:
                    16:20:47:3f:cc:eb:61:49:31:3e:a6:d4:37:57:cb:
                    1f:77:62:31:18:ee:eb:a5:30:44:d8:0e:c2:a4:fb:
                    20:7d:d1:7a:5e:c0:2d:5e:79:2d:d5:b2:8f:f0:06:
                    33:6d:29:3c:47:f2:b1:96:ff:97:41:90:5e:27:20:
                    96:03:1f:5c:24:69:e3:1c:24:8b:54:90:1c:a1:e1:
                    c5:2c:9d:de:17:d4:3a:eb:c2:f6:4e:c3:07:e4:c4:
                    36:14:e3:c3:b8:e4:0c:05:e0:30:86:ae:f2:74:ca:
                    af:a9:89:cd:05:64:73:29:e8:cf:64:13:f7:9b:36:
                    b2:26:28:48:3e:8f:b2:a1:0e:24:18:37:17:d9:a2:
                    2b:0d:25:0c:71:6f:f5:e3:dd:0a:c3:93:82:79:96:
                    cd:02:34:fc:48:6d:ab:4f:93:c7:1d:85:84:be:d3:
                    3e:d8:71:2a:d9:c5:04:f3:85:07:19:1c:73:11:ff:
                    fb:f5:3c:7a:59:fc:d2:93:7e:2a:20:99:8c:a2:40:
                    33:ac:33:21:7c:88:f6:dc:ca:0d:23:9a:07:a4:7a:
                    64:49:27:81:4d:93:73:3c:ca:37:42:23:61:fd:af:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5B:38:6D:A6:D9:35:7A:56:FC:11:24:9A:28:91:03:74:EA:72:45
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203130343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:75:f0:f6:18:75:3d:e7:cc:7b:7b:9f:0f:2d:ae:91:50:
         e2:f4:fb:26:13:6d:d6:fb:70:3f:50:58:9a:36:c7:e1:9e:0d:
         b9:de:14:5c:94:55:92:c2:ae:a7:a1:42:64:29:8c:9e:df:52:
         dd:f0:57:6a:67:ab:54:e3:8b:c3:95:17:23:e8:55:c3:f6:8c:
         36:58:0e:53:cd:66:5e:70:dc:9a:9c:ae:8b:05:1e:7c:52:55:
         73:5b:00:72:23:0e:df:b4:9f:5a:c2:2a:3b:f8:2b:b8:5c:88:
         b8:78:0b:c9:b3:6e:8b:d1:1e:d7:c1:60:0a:9f:3e:ed:dc:e0:
         8b:fb:8c:eb:3f:19:cb:2d:b1:a6:67:06:bd:49:df:78:0a:6c:
         65:cc:7e:5b:f7:54:fb:a2:c2:23:27:eb:ec:54:6a:2f:c8:91:
         55:fe:cb:de:83:2b:30:70:37:00:b6:b0:71:7d:3e:53:6a:c9:
         3d:a9:1f:cc:b5:75:47:12:17:d4:31:e4:21:a9:53:0c:45:ee:
         67:ca:e5:69:02:6d:5c:71:02:c8:2a:9a:d4:3b:bc:6c:ca:67:
         59:9e:9e:e0:a7:e5:b1:af:aa:05:00:cb:87:39:4d:c6:06:e2:
         20:fd:09:b7:0b:25:4d:a9:ee:ef:a3:fc:24:89:bc:e9:cb:8e:
         a5:4b:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org