Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203131303134.roa
File:                     3230302e33332e38322e302f32342d3234203d3e203131303134.roa (raw, json)
Hash identifier:          2jvN26AFRQgPFtdIJVlXEujuTFV+AvIpYaKLBsur6LM=
Subject key identifier:   C5:91:A2:2B:62:51:C1:81:02:0B:66:12:A6:67:98:E4:22:6C:C5:EF
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       4FB4CD6290B18648FCE4F194F7C35E45F123ADF1
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:41:29 +0000
ROA not before:           Tue 05 Mar 2024 17:36:29 +0000
ROA not after:            Tue 04 Mar 2025 17:41:29 +0000
asID:                     11014
IP address blocks:        200.33.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b4:cd:62:90:b1:86:48:fc:e4:f1:94:f7:c3:5e:45:f1:23:ad:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:29 2024 GMT
            Not After : Mar  4 17:41:29 2025 GMT
        Subject: CN=C591A22B6251C181020B6612A66798E4226CC5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:86:f8:4e:66:85:1d:4a:3a:75:d9:5b:29:
                    23:0e:5c:d5:98:31:21:cc:f8:9a:09:6f:55:23:88:
                    a0:f8:55:4b:2e:74:ab:5f:cd:cc:85:21:54:42:ae:
                    00:8d:c3:d3:95:75:4c:8f:f5:17:ae:8d:90:1b:de:
                    38:6b:83:fe:05:17:b5:1e:18:67:a0:a2:d5:04:bd:
                    7d:3e:6d:81:56:ab:b2:ad:fd:d6:a2:9d:8a:bd:4b:
                    05:63:dc:88:e9:8c:2e:92:3e:14:f9:1b:0c:3d:c1:
                    3f:55:f4:87:dc:13:ce:36:55:6e:e1:98:1b:ad:71:
                    20:e2:0a:9a:20:bf:37:46:95:0f:f8:96:49:a0:65:
                    3c:81:06:04:da:05:37:76:7e:f1:5e:20:92:70:c3:
                    41:3c:c6:67:25:c6:2a:c9:11:58:97:93:65:ed:34:
                    df:76:56:e1:0f:96:8b:03:5f:80:bf:09:1e:44:6b:
                    ee:c6:6e:fe:92:50:96:83:35:7c:ac:8e:fa:53:61:
                    c7:39:9b:9d:84:27:6f:14:d6:f8:7c:1b:79:f6:a1:
                    35:d8:88:47:22:59:d3:78:a9:0b:f6:5e:5d:3e:45:
                    f8:dc:63:c5:3f:e7:85:e4:31:bb:19:48:2c:be:0e:
                    df:57:ef:7f:16:f0:08:38:70:f1:ad:b0:4f:65:ed:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:91:A2:2B:62:51:C1:81:02:0B:66:12:A6:67:98:E4:22:6C:C5:EF
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:87:d1:ca:07:3f:58:13:e9:71:73:76:c7:37:46:aa:5a:
         42:78:0b:2b:55:c5:94:25:93:77:71:37:9d:00:7b:94:bf:2c:
         ae:14:ae:50:85:04:5e:ac:a3:12:4c:5c:80:7b:c1:ab:cf:a2:
         44:3d:b7:6b:d8:64:f9:01:59:a0:b1:e8:95:83:71:a9:5e:84:
         83:cf:97:a7:72:ec:e4:2b:46:3b:0b:c9:0e:23:d6:6c:31:e6:
         f2:18:a3:7e:ce:bf:cc:33:9e:88:68:38:2e:0a:33:ae:a3:46:
         2d:d1:fa:f2:56:40:19:b3:45:4c:3f:c5:6d:3b:14:2d:f0:f1:
         0f:4a:61:38:37:01:13:eb:e3:27:34:1b:b5:90:35:a7:65:87:
         a4:ff:d4:be:d5:ce:75:dd:1c:53:57:21:3b:11:8c:5a:6b:dd:
         0c:f3:fd:47:8d:8d:08:33:ea:40:8b:f0:1b:88:e9:f8:9f:e5:
         9c:45:77:e7:e1:03:4d:ab:72:69:fe:c7:df:2a:5c:4c:b5:03:
         de:59:70:f3:7e:d0:40:37:4b:6f:3c:c2:49:0c:e6:c9:60:13:
         d4:ed:c5:d2:79:3a:26:75:95:55:4a:62:c3:d9:8a:43:5f:20:
         66:80:c0:9e:6b:39:94:d4:72:29:d0:bf:af:62:f1:c3:61:53:
         40:e1:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org