Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2037333033.roa
File:                     3230302e33332e38322e302f32342d3234203d3e2037333033.roa (raw, json)
Hash identifier:          a+jyVnTRJTuQa8CpFsOPvlDCnl1Ovr7wQucUYDIj5w4=
Subject key identifier:   3C:3C:4F:E5:E2:D0:04:F5:8D:CF:6C:34:5B:6E:4D:D8:91:78:AE:A9
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       2FF801095FD14D00F9E9BFBEC1F250A2D7205412
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2037333033.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     7303
IP address blocks:        200.33.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f8:01:09:5f:d1:4d:00:f9:e9:bf:be:c1:f2:50:a2:d7:20:54:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=3C3C4FE5E2D004F58DCF6C345B6E4DD89178AEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e9:79:62:f2:df:5f:6c:4d:1b:80:8e:de:14:
                    20:7d:f2:06:40:cc:6e:94:4b:d2:9b:4b:d8:b6:bf:
                    94:aa:df:20:4a:96:7e:b7:74:31:16:30:35:b0:be:
                    32:ab:62:e9:70:30:c7:08:40:f8:53:2d:f4:ce:ec:
                    d8:d9:95:ba:fd:18:85:61:a6:f2:10:bc:9d:34:5b:
                    e4:da:f2:0b:9c:dc:d5:6f:72:31:d6:4a:95:8d:3e:
                    7d:4d:0d:24:32:61:94:e2:2a:f1:97:2f:bc:ca:3a:
                    6f:84:e7:57:73:aa:3b:45:93:89:3a:50:7d:d5:68:
                    aa:1a:87:38:e3:d0:77:9a:65:43:66:71:2c:06:1d:
                    da:e8:b8:da:23:e6:fd:d9:4a:31:d1:40:8a:99:c2:
                    8b:0d:52:e0:35:6b:7f:fa:66:5f:e0:7f:71:e6:27:
                    d4:e4:1f:66:43:94:13:b2:63:29:88:5e:65:c1:f6:
                    fb:dc:11:7e:e1:db:a0:b6:f4:d4:0c:c4:f0:03:28:
                    c4:26:f1:2d:5f:22:bc:12:6f:d1:01:2d:d2:ee:eb:
                    ba:f2:5e:fc:bf:fb:c0:ea:35:72:ee:66:7f:ee:c0:
                    f5:a1:54:9c:0d:ec:0f:d8:70:d8:8f:9a:8d:d2:0a:
                    2d:dc:1a:38:b3:4c:b0:fc:af:d6:56:44:37:9d:af:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3C:4F:E5:E2:D0:04:F5:8D:CF:6C:34:5B:6E:4D:D8:91:78:AE:A9
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:55:19:fd:3c:13:41:dc:82:55:b6:aa:c5:75:c6:47:13:a4:
         37:23:f3:d4:7d:e4:8a:63:c5:91:f5:2a:1a:89:96:8f:33:40:
         e5:c9:7f:97:ab:01:a7:fa:2e:84:b4:2c:98:f1:d4:30:60:d5:
         31:33:e6:78:e5:c0:12:6a:3c:1e:6c:bb:ff:06:88:4f:63:a3:
         1d:28:c5:e3:87:1b:cf:28:83:e2:38:bf:01:3a:8d:4a:8c:07:
         4b:36:d5:2c:fd:b8:3b:42:fe:a6:ae:7f:04:28:12:7d:25:aa:
         ca:72:bb:ad:ed:a2:49:a4:94:1b:3c:82:44:29:0f:79:40:fd:
         2e:35:7a:dc:7e:25:12:3b:56:dc:5a:ef:39:86:06:cd:ac:1e:
         99:c2:58:0a:43:ac:ad:58:7f:b6:c4:34:d0:de:0e:de:dc:f4:
         c9:00:a0:d7:be:cd:a1:93:fe:c8:16:58:ef:f0:cc:80:9b:df:
         68:a0:44:54:27:b4:b6:30:30:ec:96:47:1c:e1:3b:57:82:cd:
         86:b4:a4:5f:ab:97:83:c1:e9:de:54:72:f0:04:4a:e9:26:a2:
         64:fc:39:32:28:30:cc:dc:8c:5e:f8:da:eb:f0:ef:57:91:2e:
         a1:9f:05:d5:21:e5:d6:fa:24:3c:5d:fe:a3:43:85:c0:99:63:
         77:c1:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 15:24:03 2024 by rpki-client on console-fra.rpki-client.org