Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231362e302f32342d3234203d3e203532333737.roa
File:                     3230302e3131322e3231362e302f32342d3234203d3e203532333737.roa (raw, json)
Hash identifier:          +IJhGFMe/ydWrfsHHnKmFrbKojkr4KGUO03rq/s9lO4=
Subject key identifier:   CE:68:5E:15:E0:A2:F2:99:A9:13:83:65:07:EA:99:47:A6:98:A7:6A
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       7C6851BDF1BDB6F917F65D10BDDF2D965CAA2AD2
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231362e302f32342d3234203d3e203532333737.roa
Signing time:             Wed 04 Sep 2024 21:45:00 +0000
ROA not before:           Wed 04 Sep 2024 21:40:00 +0000
ROA not after:            Wed 03 Sep 2025 21:45:00 +0000
asID:                     52377
IP address blocks:        200.112.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Sep 2024 14:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:68:51:bd:f1:bd:b6:f9:17:f6:5d:10:bd:df:2d:96:5c:aa:2a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Sep  4 21:40:00 2024 GMT
            Not After : Sep  3 21:45:00 2025 GMT
        Subject: CN=CE685E15E0A2F299A913836507EA9947A698A76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:13:bd:5e:80:15:06:83:cd:18:df:87:db:
                    e3:19:32:dd:46:35:e5:ff:82:9f:e6:47:99:1d:65:
                    14:9c:76:fa:0b:b7:6b:39:16:ac:bd:3c:13:5a:a9:
                    ce:ce:fe:e7:a4:64:3b:32:31:19:ae:a7:eb:9e:bc:
                    10:60:dd:30:8f:c0:fb:3f:e7:ad:c7:81:6d:e8:99:
                    0f:a6:44:2c:33:59:48:2b:83:1e:85:4e:80:63:11:
                    e6:a2:32:b7:f4:04:77:f3:1f:54:75:81:b7:bc:10:
                    db:ca:9f:94:e8:fc:40:00:e8:f4:ed:5d:fc:43:1c:
                    14:44:33:ed:39:06:6e:bc:49:28:c1:d6:bc:35:c8:
                    87:32:f7:93:ce:de:b3:e0:1a:ce:3e:1b:59:24:77:
                    f4:04:c7:2b:a2:5b:d8:fd:86:dd:31:c5:17:f6:00:
                    8c:49:7e:d4:34:a0:49:78:8d:c6:c5:41:77:49:26:
                    72:89:15:85:40:06:96:d4:d4:bf:11:92:16:21:89:
                    ef:04:ce:6b:1a:2d:fc:18:86:d1:d8:75:df:7b:43:
                    e6:0b:3e:06:44:2b:b6:10:0c:d8:e3:cd:e6:24:ba:
                    de:09:b3:00:68:e1:58:9c:be:97:c6:b8:08:2b:a0:
                    9e:e4:b7:77:48:27:1f:cf:02:77:ff:42:92:ba:12:
                    be:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:68:5E:15:E0:A2:F2:99:A9:13:83:65:07:EA:99:47:A6:98:A7:6A
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231362e302f32342d3234203d3e203532333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:2f:c2:55:ef:ee:8f:7e:b5:ba:95:43:6b:46:41:90:5d:f0:
         9a:f2:1e:7a:22:67:ca:c0:fb:08:de:42:9f:ee:d1:61:ff:cd:
         bc:8d:74:5f:f9:dd:c4:79:05:ea:81:1c:17:fa:71:49:b4:93:
         3e:58:13:b7:5b:45:cf:b6:07:83:5a:ad:a4:dd:3f:17:8a:4b:
         8f:27:33:0b:46:3a:9b:32:5a:0a:19:6d:ae:8b:a8:68:19:59:
         08:22:34:f6:c4:cb:9b:78:29:a5:a1:5a:1b:5f:55:35:17:8c:
         8c:ee:e7:28:64:3e:2d:30:66:a1:3c:7d:88:c4:52:a2:d7:f1:
         97:f7:f1:08:de:98:b4:eb:7d:7b:c1:55:82:80:1a:84:46:99:
         21:f7:b4:97:03:14:25:46:5b:02:b6:e9:d0:07:06:f1:c8:5a:
         bf:47:de:2f:1f:bd:f2:5d:01:eb:de:14:9f:98:4b:b1:c5:c5:
         d3:21:dd:3d:06:fb:76:7a:2a:12:54:29:10:71:cb:e8:1b:e6:
         5a:ae:c2:a7:b3:19:ac:16:50:71:f3:f7:07:d1:e4:f1:41:50:
         2c:59:8f:a3:f6:74:c0:eb:36:2d:b5:fa:af:e2:6e:06:43:4a:
         74:ef:90:3b:33:9e:f1:1b:b4:f9:64:e5:d3:b3:c2:1d:01:88:
         1e:d2:b4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 09:39:07 2024 by rpki-client on console-fra.rpki-client.org