Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203232393237.roa
File:                     3230302e33332e38322e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          clHuAjtxTds8mi4GcmQfF6TXHJj0RnsnAOXsnYG+cbM=
Subject key identifier:   94:43:5F:13:ED:24:39:C7:15:F8:57:C3:F8:AA:B0:D4:71:E2:A7:B4
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       20CB1E564857DB13018BEFF4E59FF34C664FFE26
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     22927
IP address blocks:        200.33.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 06:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cb:1e:56:48:57:db:13:01:8b:ef:f4:e5:9f:f3:4c:66:4f:fe:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=94435F13ED2439C715F857C3F8AAB0D471E2A7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:95:c0:8c:6b:e3:38:e8:9e:bb:c9:10:86:0c:
                    b9:22:15:c5:b9:27:b7:bf:da:66:a1:e5:19:84:3f:
                    73:2c:55:86:24:00:be:d3:e7:ed:25:01:7a:d3:41:
                    79:0c:c2:88:8a:33:01:35:5e:d8:2b:a8:33:34:72:
                    a6:71:53:10:28:99:14:e5:bb:4d:91:64:de:a2:63:
                    8a:71:14:6b:a6:6d:a5:39:6b:d7:26:71:dd:09:75:
                    76:8a:5a:35:4d:14:f4:3d:79:1d:6f:5e:b5:2e:e3:
                    7e:49:3b:c3:c4:27:29:98:9d:37:e6:da:b9:7d:0b:
                    21:98:31:31:34:1a:81:6f:72:32:c8:7c:84:b6:bb:
                    c8:e2:23:08:a9:7c:28:d5:96:df:59:d1:61:96:7c:
                    e7:6b:75:a1:11:ff:0e:22:ba:a1:c1:b4:e6:9f:2b:
                    bc:d7:be:71:bc:52:4d:11:d2:58:ab:3c:d4:cd:86:
                    a8:eb:d1:fc:c6:f8:ad:1b:1a:c8:ef:dd:37:93:7b:
                    45:31:2d:e4:47:21:cd:b9:fe:9e:b6:f0:02:d2:39:
                    7b:50:d1:90:a3:99:97:d4:79:14:75:80:2a:9b:b3:
                    68:c7:f7:1a:9c:65:c3:4f:07:b6:8c:cd:d7:77:7e:
                    81:68:83:5f:f4:64:6a:3c:83:71:b9:e9:36:3d:80:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:43:5F:13:ED:24:39:C7:15:F8:57:C3:F8:AA:B0:D4:71:E2:A7:B4
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:7a:43:df:7b:08:b4:4b:bf:62:10:b9:e1:d6:bd:b7:30:75:
         27:bf:19:fd:41:cc:2b:77:cc:d3:3e:f3:20:20:5c:15:d9:75:
         7a:6e:c8:66:f5:7b:6c:e6:5b:13:42:85:90:c5:4f:99:71:79:
         78:71:fe:13:c0:34:75:7b:f2:48:26:22:a7:73:2a:37:ab:32:
         98:0f:79:b7:af:4f:0c:63:89:64:e4:12:19:c7:89:90:f4:5d:
         1f:8f:2e:cc:3d:11:06:aa:a9:b6:db:d0:4c:e0:cb:76:e3:60:
         59:41:03:8a:7f:d6:15:f2:56:d2:60:e0:91:06:72:20:d5:6c:
         63:34:10:36:76:9b:07:05:a7:91:79:df:90:59:66:46:2b:24:
         f2:5e:69:f9:ac:3d:40:13:b0:ce:61:95:a3:33:22:84:27:75:
         de:03:df:96:33:78:59:4a:e4:d4:95:a4:d1:8f:9a:53:11:40:
         8b:10:e9:d9:f1:43:f1:20:df:c3:e1:cd:02:26:a5:75:78:bb:
         c3:15:1c:7c:d1:8b:85:30:bd:54:52:91:f0:dd:6a:e6:93:6e:
         00:2d:0c:8e:a6:06:ac:df:98:d2:23:cc:f0:9b:7f:b0:38:fc:
         02:01:6f:ae:49:e1:32:e1:61:77:22:86:40:d9:57:51:6b:13:
         79:07:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:32:19 2024 by rpki-client on console-fra.rpki-client.org