Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e20323732383833.roa
File:                     3230302e3131322e3232322e302f32332d3234203d3e20323732383833.roa (raw, json)
Hash identifier:          P5XXpwbUihm38dsGggpkPnw9LQYoDw0Bq/k1J0BKYa8=
Subject key identifier:   E8:75:4C:93:2B:1F:ED:A4:9D:40:00:BE:25:F0:C9:12:26:E5:55:EA
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       66D56C444BB4023E55D275E3E1E72514DC165567
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e20323732383833.roa
Signing time:             Wed 04 Sep 2024 22:20:01 +0000
ROA not before:           Wed 04 Sep 2024 22:15:01 +0000
ROA not after:            Wed 03 Sep 2025 22:20:01 +0000
asID:                     272883
IP address blocks:        200.112.222.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d5:6c:44:4b:b4:02:3e:55:d2:75:e3:e1:e7:25:14:dc:16:55:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Sep  4 22:15:01 2024 GMT
            Not After : Sep  3 22:20:01 2025 GMT
        Subject: CN=E8754C932B1FEDA49D4000BE25F0C91226E555EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:c9:cf:a3:4f:90:e5:be:9a:4b:b7:d9:89:
                    19:31:53:a4:8f:74:5c:39:71:95:43:5c:2e:8f:32:
                    02:a7:b2:48:a2:72:a5:9c:67:23:11:a9:a7:69:8a:
                    04:c0:49:82:7f:21:73:9d:ad:dd:47:86:8e:c2:a8:
                    45:9d:00:fe:6d:a8:f2:b5:17:96:d4:cf:e2:ed:0c:
                    fa:21:30:4a:6a:24:c5:a9:af:24:24:10:4c:5a:0d:
                    bc:41:c4:b5:dc:bc:3d:a6:6c:b0:ad:99:bc:14:24:
                    d2:46:8c:07:11:1b:0b:71:7a:35:df:c2:22:ce:63:
                    a9:01:66:c1:68:73:31:75:b2:c1:7e:26:46:31:af:
                    f2:ab:ea:9d:c7:0f:12:c2:10:a4:10:f5:b4:a1:cf:
                    a1:84:88:9f:c0:1b:c6:3c:64:77:ca:9a:de:9b:b5:
                    bc:a6:eb:4f:c6:ef:53:96:35:14:51:98:11:54:83:
                    46:03:ae:19:5d:e2:b9:2f:3a:16:c9:99:4f:bf:9e:
                    3c:30:d3:b0:fb:75:e8:48:33:a0:db:2e:db:cc:43:
                    d0:71:43:f7:f3:4c:55:7e:e4:c8:c4:dc:c2:d6:a5:
                    fe:eb:64:f6:34:d0:a0:2b:61:b0:26:5c:64:66:90:
                    9d:0c:b3:6a:cf:5e:12:6a:45:2a:18:4d:1a:c7:d1:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:4C:93:2B:1F:ED:A4:9D:40:00:BE:25:F0:C9:12:26:E5:55:EA
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e20323732383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:6a:da:8a:c9:06:b6:b1:c8:48:17:c1:83:47:85:a7:26:
         19:eb:8a:06:59:a8:5c:80:26:45:3d:f6:c0:b6:83:41:8d:94:
         1b:11:90:89:6c:24:54:72:a4:28:65:c2:be:6e:e4:2a:9e:26:
         aa:59:71:b6:c9:b7:3c:56:8c:a6:c6:9f:8a:34:96:26:47:e4:
         e5:1e:c5:7d:0c:91:26:7a:6c:2c:ef:70:0d:c5:d4:5e:8d:f5:
         ea:28:57:57:94:ea:7e:4b:00:66:86:72:dc:45:c4:86:3d:a1:
         e4:fd:f1:ee:ed:f4:03:16:e3:e5:92:5f:20:fa:3c:08:9c:a2:
         36:5a:78:ea:1b:fd:dd:cd:92:c4:9f:8c:02:f7:29:ab:ec:a9:
         ba:82:69:3e:c2:37:0a:6c:44:f3:50:9f:67:8a:30:0a:0b:c6:
         ef:12:e6:5d:eb:f9:7b:73:98:76:cb:e9:b4:79:2e:f1:71:95:
         d3:e1:ff:ac:c0:80:5f:4e:bb:04:5e:4b:44:9b:5f:56:f8:91:
         4e:78:b8:61:55:11:88:af:96:46:cb:35:b3:5a:d0:71:2e:c1:
         10:33:22:72:f7:64:8a:f5:08:d8:53:c2:f2:16:b7:e4:4c:ec:
         79:3c:5f:60:19:28:e1:ad:51:22:4a:f5:cb:5b:df:a4:fb:10:
         26:2e:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org