Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203136353039.roa
File:                     3230302e33332e38322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          vAWM1s6u1IKPTwexOHyVxBm6Qog3K8kfi+34ZBgsDtA=
Subject key identifier:   34:34:06:DC:E5:17:90:CA:7D:17:68:25:84:F9:98:3F:94:90:D7:00
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       201FB3F8F07BB6549D39B18E922B8DD9CF916BB4
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     16509
IP address blocks:        200.33.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1f:b3:f8:f0:7b:b6:54:9d:39:b1:8e:92:2b:8d:d9:cf:91:6b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=343406DCE51790CA7D17682584F9983F9490D700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:d4:6d:f5:c8:ad:d2:af:a7:17:1a:77:8a:
                    e3:7c:d0:f0:b5:c8:d4:9a:67:29:15:93:5d:d1:b7:
                    8e:98:b9:6f:74:4c:d8:f6:1a:75:02:8d:e6:97:37:
                    60:1f:c2:5f:3f:75:12:da:ab:75:cc:ce:9b:bc:7e:
                    1b:d6:c2:c9:7d:2e:33:ad:51:08:86:49:b7:fc:02:
                    66:8c:04:3b:9f:4c:97:f5:b4:3d:3e:c6:03:5e:f2:
                    18:17:d2:e6:16:dc:08:57:7d:9b:75:ae:82:48:58:
                    51:38:10:93:63:b2:48:2b:59:4d:7e:f6:8b:50:1c:
                    a4:0f:fe:7c:05:22:0a:e8:4f:2f:a3:0a:43:b9:16:
                    9c:c4:06:a3:51:12:c6:2d:fe:e9:4d:d0:2c:12:9b:
                    ea:51:ce:0f:f9:16:74:08:5b:06:da:68:37:bf:b8:
                    c5:cb:df:fa:54:54:a7:c7:d4:81:09:68:e7:d3:1a:
                    59:5c:44:22:a0:4b:47:e3:ba:a6:b8:00:b1:90:8a:
                    f0:4d:b4:4a:b2:fd:43:1b:6c:9c:1f:89:f0:1e:b2:
                    e7:5d:b3:0b:e4:47:ce:16:78:54:37:0e:db:39:14:
                    73:0e:c2:47:7b:11:64:cc:a5:a7:43:68:98:83:55:
                    f9:4b:20:09:c8:0a:22:aa:12:fd:e1:01:56:f7:65:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:34:06:DC:E5:17:90:CA:7D:17:68:25:84:F9:98:3F:94:90:D7:00
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:81:13:49:48:0c:a4:8a:12:cd:b7:f7:54:34:cd:67:a7:99:
         0c:90:b8:11:ef:28:7c:2c:79:f6:ca:46:15:c9:d6:b7:35:c5:
         ec:d7:f5:88:3a:95:c5:a1:01:3f:13:e0:88:d0:87:28:4b:7c:
         e1:35:10:89:b5:4f:a3:0c:87:3e:51:31:19:5c:bf:f0:ab:38:
         7c:d4:9b:37:b8:b3:a8:19:17:fc:a3:b1:86:04:b1:e6:4e:55:
         11:69:22:5a:e5:cd:61:63:1f:c0:0b:eb:85:82:e8:53:e6:d4:
         78:da:f9:6a:2a:2f:5d:21:af:a9:b7:66:94:73:72:23:6e:b4:
         49:12:7e:bd:84:56:72:fd:ae:cc:bf:da:ef:9c:98:db:a9:b1:
         28:eb:41:d3:5c:a8:0c:d9:97:69:f9:e6:a5:30:33:f1:90:a0:
         05:55:87:7b:57:69:08:a2:31:01:1b:28:db:61:9f:4f:52:b5:
         a9:01:2b:da:77:e8:47:b5:c3:da:53:63:b4:ba:cb:cc:4b:80:
         30:35:8d:8e:a9:2d:d6:29:1c:ba:21:e7:b9:24:b2:bf:24:81:
         03:c1:c2:4b:fd:bb:5d:3d:3a:3b:56:7e:8c:89:f5:a6:59:93:
         bd:56:5c:f6:99:73:32:54:2d:cd:43:1e:84:f8:76:eb:f5:f0:
         78:3e:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:46 2024 by rpki-client on console-fra.rpki-client.org