Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e20323131383636.roa
File:                     3230302e33332e38322e302f32342d3234203d3e20323131383636.roa (raw, json)
Hash identifier:          ED22nfKD7yyU0TOR8210c1uwUr9KMFofeIF9zzIvpjc=
Subject key identifier:   F7:66:8A:6F:45:11:FE:34:17:7A:72:A5:4C:37:D3:B3:20:E7:A5:93
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       3D91AF19D559E73FE2C616AF23793E2EBF109D9F
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e20323131383636.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     211866
IP address blocks:        200.33.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:91:af:19:d5:59:e7:3f:e2:c6:16:af:23:79:3e:2e:bf:10:9d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=F7668A6F4511FE34177A72A54C37D3B320E7A593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:b2:17:81:2e:d3:20:f2:cb:ba:9b:f9:9a:
                    01:a9:91:cd:47:9b:c8:35:37:ab:c1:60:2d:f5:c1:
                    b8:90:ca:c8:ba:cf:2e:ae:95:7b:14:20:e4:6f:ff:
                    0d:f2:d2:da:2e:33:dc:3a:60:4d:71:59:dc:33:44:
                    04:65:4e:ab:aa:bf:2b:c9:30:a7:89:5e:08:65:42:
                    54:90:ae:c3:de:07:88:2c:ea:00:51:67:29:e2:7b:
                    d8:59:fd:ae:78:c1:57:e3:42:de:33:49:ee:bd:d2:
                    9a:5a:be:16:5c:57:19:74:0e:76:f5:00:e9:46:17:
                    5a:39:d5:29:eb:93:41:5d:9c:d1:0f:f4:df:58:6b:
                    72:b0:ef:4f:6a:d5:d1:19:2c:bb:21:9b:c7:3f:21:
                    c8:c2:fd:0f:55:e8:d4:7d:27:b9:7e:01:f1:79:e1:
                    7d:f1:69:57:20:fc:79:a3:c6:d2:de:32:cc:df:bc:
                    07:90:31:4d:1d:72:87:f4:d3:16:3d:f1:e3:e2:3c:
                    96:d1:52:52:b9:4a:71:67:cf:d9:ba:c5:c4:7c:f0:
                    61:4f:98:34:89:21:f0:30:11:ef:c9:3d:c4:fd:f2:
                    ee:c8:09:e6:8d:34:56:b6:c2:41:86:62:2b:ec:46:
                    38:b1:0e:1b:92:45:ca:16:f2:f9:fc:c3:d3:6e:f1:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:66:8A:6F:45:11:FE:34:17:7A:72:A5:4C:37:D3:B3:20:E7:A5:93
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e20323131383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:94:bc:cd:1c:46:0d:a5:67:8f:13:d6:9e:c0:13:ca:f3:cd:
         a6:72:22:df:45:20:eb:3e:ed:b3:49:9a:e8:ae:35:c4:08:82:
         32:a7:f7:de:5b:33:c5:3e:7a:b1:71:c3:6d:33:5f:9c:22:07:
         f3:41:9a:ff:3c:2e:02:d8:f3:0e:73:c1:d7:5c:3a:e5:35:d2:
         cd:50:27:09:f1:61:b4:4e:a7:38:a4:15:6b:5d:b6:7a:ac:a1:
         20:18:46:5d:23:f1:6f:f2:7e:43:e9:ce:9a:b9:e1:e1:ca:cd:
         1e:28:1f:5a:c8:d4:66:8b:1c:bf:c4:9b:5f:01:38:74:57:44:
         1c:dc:8d:31:5d:11:cf:1d:0d:77:37:d8:30:19:3d:df:ef:5d:
         b9:9c:2e:3c:39:dd:c9:0f:7e:aa:c6:7a:c2:81:53:2d:45:36:
         7b:16:cb:48:01:ad:3a:96:88:a6:fc:36:92:dc:31:46:4c:49:
         fb:28:59:7c:da:ca:f9:3c:cf:06:3e:3c:cd:c3:7e:25:17:b2:
         1f:b1:26:79:ca:d4:7f:7e:84:92:fe:20:d2:d6:71:a6:86:48:
         ff:cf:5b:11:0f:ca:f4:22:18:07:3c:95:be:1e:99:b0:9d:ab:
         18:f6:8a:14:20:81:6a:48:98:90:36:53:ea:f8:35:be:d8:c3:
         af:e6:02:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org