Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232302e302f32322d3234203d3e203233303331.roa
File:                     3230302e3131322e3232302e302f32322d3234203d3e203233303331.roa (raw, json)
Hash identifier:          gqld6IRKDSfomctgLB4T1n7kr19dVjsyZwUxddqjL/w=
Subject key identifier:   B7:14:08:BC:0A:3B:CC:19:B4:A7:1D:47:7C:91:08:59:E5:CE:24:EA
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       5BB5C3F61FF5775617981CFA8DC8461714F36E18
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232302e302f32322d3234203d3e203233303331.roa
Signing time:             Wed 04 Sep 2024 22:20:00 +0000
ROA not before:           Wed 04 Sep 2024 22:15:00 +0000
ROA not after:            Wed 03 Sep 2025 22:20:00 +0000
asID:                     23031
IP address blocks:        200.112.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b5:c3:f6:1f:f5:77:56:17:98:1c:fa:8d:c8:46:17:14:f3:6e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Sep  4 22:15:00 2024 GMT
            Not After : Sep  3 22:20:00 2025 GMT
        Subject: CN=B71408BC0A3BCC19B4A71D477C910859E5CE24EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:17:b5:84:56:ae:ce:58:92:6e:f9:a3:e4:
                    c2:ab:ee:0b:2d:7f:f2:48:69:b6:45:8f:c3:b9:b1:
                    39:75:cf:67:65:92:96:04:68:80:29:66:6c:f4:71:
                    ba:52:1d:f9:e7:66:76:aa:f4:79:02:2c:14:19:93:
                    8c:69:d5:80:ad:89:92:0e:26:20:e3:2a:17:70:89:
                    e4:14:6a:60:07:61:99:fe:50:52:b4:0d:65:95:71:
                    a6:c2:8e:61:44:32:e6:01:a5:47:22:82:76:cf:fb:
                    ac:98:fe:d7:ba:b7:bb:5e:18:55:49:cc:b6:5e:3c:
                    69:31:ea:27:de:73:29:de:93:d2:15:dc:2a:3f:25:
                    11:b9:f7:22:3a:62:57:e4:e4:f6:5d:9e:bb:8c:c3:
                    fe:c4:bb:23:5a:e5:9f:fb:a0:27:39:ca:3e:58:57:
                    58:a6:68:5f:79:bb:da:f0:9b:5c:3c:b1:bf:4d:41:
                    65:4b:59:01:c4:19:88:a2:91:49:f7:3c:74:65:32:
                    70:95:da:4a:a8:12:c7:2b:b9:ff:26:9a:52:ca:be:
                    65:48:9e:68:e3:c6:af:73:e5:f3:44:28:d9:7e:a9:
                    73:9b:1d:df:e8:a3:c0:9f:54:6d:d7:bc:e4:9f:29:
                    74:c4:d3:b7:08:09:d6:0a:bc:d6:75:45:13:b9:5a:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:14:08:BC:0A:3B:CC:19:B4:A7:1D:47:7C:91:08:59:E5:CE:24:EA
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232302e302f32322d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:62:1a:65:ef:bc:51:0f:f5:40:a4:a1:b9:7b:60:57:0d:5e:
         eb:b8:fd:2c:ca:96:2b:81:ce:b9:e3:70:d1:1f:d9:78:a4:93:
         89:bc:0a:54:dc:6a:f4:c7:3c:d3:2c:74:aa:c9:ac:ac:70:78:
         c5:e7:c2:1d:bb:78:0c:66:11:fa:bc:ce:aa:2c:4a:87:a3:5f:
         29:03:6a:02:b8:bf:35:62:a2:76:ae:97:8f:60:f1:15:70:6a:
         2c:c7:e2:c5:8b:7e:13:68:57:dd:56:fa:89:14:07:63:fe:5e:
         22:6b:f5:7e:d2:c1:d0:48:7e:af:a1:9a:0f:b0:37:f8:57:48:
         59:e9:d1:b6:bd:9e:ee:10:aa:f7:f7:72:e7:77:c8:10:d2:ee:
         96:d3:ef:1d:82:98:87:63:4e:4a:4d:84:42:44:aa:ba:28:05:
         96:d0:45:8b:bd:ff:3d:e6:41:e8:b7:12:2e:d0:a2:47:b9:be:
         9b:4d:02:51:d6:55:bb:dd:5f:ec:da:d9:41:59:d8:49:34:3f:
         78:aa:20:f7:c7:16:f5:df:0f:49:c2:67:3a:5f:f0:9f:ae:00:
         db:32:e3:89:14:be:af:b0:cc:0b:1e:04:16:7e:66:04:25:91:
         87:a8:98:8b:d9:27:1a:32:0e:25:82:19:c1:64:8d:bd:e5:98:
         37:d6:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org