Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2033353439.roa
File:                     3230302e33332e38322e302f32342d3234203d3e2033353439.roa (raw, json)
Hash identifier:          t2A9KVLpwfTSPxwZ4bc/EOk8TuE+MIsXf8R3gjnhPJw=
Subject key identifier:   AF:D3:43:6A:AB:3F:F4:70:23:45:D1:7A:0C:30:D3:8B:39:22:19:02
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       0D183DD833B81D3EFD3DFA52F60EA124CC15B3BF
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2033353439.roa
Signing time:             Tue 05 Mar 2024 17:41:37 +0000
ROA not before:           Tue 05 Mar 2024 17:36:37 +0000
ROA not after:            Tue 04 Mar 2025 17:41:37 +0000
asID:                     3549
IP address blocks:        200.33.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 06:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:18:3d:d8:33:b8:1d:3e:fd:3d:fa:52:f6:0e:a1:24:cc:15:b3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:37 2024 GMT
            Not After : Mar  4 17:41:37 2025 GMT
        Subject: CN=AFD3436AAB3FF4702345D17A0C30D38B39221902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:ad:bd:fe:b7:f4:6b:d4:3f:83:2a:45:71:
                    1a:ff:27:48:f4:53:23:d0:51:92:5c:6d:39:8a:d4:
                    f1:b6:14:33:91:09:25:df:66:4b:41:45:12:fd:a9:
                    8a:81:ce:ee:36:86:23:85:a9:68:15:0b:f6:53:d7:
                    41:bd:f1:d9:94:2c:98:62:e1:d7:50:11:58:fb:5b:
                    13:f1:c0:66:89:91:4e:25:f6:c0:26:b0:2b:f7:23:
                    3a:11:8a:3b:6e:48:3a:6f:6e:f5:61:76:73:fb:1a:
                    49:8c:ea:a2:db:8c:e9:5f:88:48:9e:ae:98:c6:26:
                    eb:68:19:cc:6c:79:82:7e:3a:dc:88:d2:e1:da:5e:
                    8e:04:8c:ed:76:23:b5:77:79:af:8c:6f:a5:8b:fc:
                    5c:41:20:27:7a:35:0a:bc:1a:36:b1:00:ec:0d:84:
                    40:30:85:25:63:df:99:19:4e:e9:20:82:9f:f9:77:
                    70:a9:d8:2f:66:c3:b2:c9:c5:b2:d3:ac:e7:ea:0b:
                    41:94:d1:a7:e8:7c:5d:f1:eb:10:05:bc:a5:8c:78:
                    02:3e:e8:c4:4d:30:18:84:d5:2b:dd:0c:44:77:d8:
                    46:8e:f9:b1:6f:a3:4f:ac:17:3f:22:bb:cf:8d:e3:
                    09:ff:63:21:57:18:7d:df:4d:e7:57:40:0f:19:a8:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D3:43:6A:AB:3F:F4:70:23:45:D1:7A:0C:30:D3:8B:39:22:19:02
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:35:92:1b:7b:a3:b9:21:36:e8:93:67:3f:26:e0:03:4a:ce:
         55:08:f9:c5:29:cd:1e:66:2e:b6:17:c6:54:72:c7:42:95:d7:
         d7:31:43:de:35:55:5b:b7:87:3a:8e:5e:9f:95:7d:71:98:63:
         d5:65:d6:f1:d0:dd:51:1a:1b:2c:2e:8d:c0:44:ba:b7:bf:5a:
         1a:fd:e1:ce:51:5c:3a:1b:93:bc:ef:a0:c7:c6:00:d3:7a:08:
         d2:24:ea:f5:16:22:fd:28:db:32:ca:b9:f4:5e:d6:16:fb:d9:
         a7:78:ee:99:64:b1:74:f2:4a:3b:ee:43:78:68:9f:b7:85:14:
         93:82:3c:d3:7c:ce:e2:51:94:41:b7:47:8a:33:88:2c:eb:95:
         2b:f2:19:b0:ba:28:09:eb:53:c2:84:53:7a:b9:6e:50:4c:cf:
         0a:7d:0a:53:a7:dc:20:c8:16:a6:2a:c9:10:5e:e8:62:1d:96:
         cf:ee:1a:64:16:be:8f:96:91:3b:7b:7c:87:1b:8f:e0:9e:b5:
         a3:a6:d6:07:a1:c9:ef:73:36:85:29:04:45:bb:36:80:3a:03:
         39:e4:c7:2e:08:fa:0c:1a:97:c8:3a:2b:72:95:b2:3c:fd:b4:
         83:61:44:1c:cf:36:32:d9:9b:c2:0e:1b:08:5d:d7:17:4f:38:
         fe:f9:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:16:17 2024 by rpki-client on console-ams.rpki-client.org