Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e33342e302f32342d3234203d3e203233323433.roa
File:                     3230302e31322e33342e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          BwLnwL7JtI3LMU4mTeLcktvHz0K+C4vZ5ov7/8w3QzI=
Subject key identifier:   2D:D8:13:7E:EC:93:6D:DD:1D:F1:30:04:F3:75:13:BB:14:3B:CA:37
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       7E520608D2C1F357735DAC2C6F1B519220A90FF6
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e33342e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:09 +0000
ROA not before:           Tue 05 Mar 2024 17:51:09 +0000
ROA not after:            Tue 04 Mar 2025 17:56:09 +0000
asID:                     23243
IP address blocks:        200.12.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:52:06:08:d2:c1:f3:57:73:5d:ac:2c:6f:1b:51:92:20:a9:0f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:09 2024 GMT
            Not After : Mar  4 17:56:09 2025 GMT
        Subject: CN=2DD8137EEC936DDD1DF13004F37513BB143BCA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:8e:3a:b6:9f:54:fc:c4:3c:47:8a:d2:27:
                    8e:e7:3f:4b:12:36:45:3f:65:7f:6b:ba:19:3c:98:
                    b4:55:37:2e:d9:c1:f2:7c:22:ae:e4:86:89:45:06:
                    a3:09:7a:24:bc:96:98:86:56:9b:9f:d3:09:70:d1:
                    02:09:9a:eb:45:96:f3:d1:d1:73:c8:83:3f:35:3a:
                    2d:65:95:6d:f2:ed:67:1a:15:d5:90:43:19:4d:ac:
                    21:08:e4:a4:cf:9b:84:83:4f:fd:7d:5e:b6:d7:bf:
                    91:be:b9:11:5f:bd:71:4e:fd:ad:f9:c4:fd:da:5f:
                    c8:95:32:46:65:65:01:60:90:f5:13:40:7d:19:e5:
                    2b:67:e8:2b:34:88:b7:5f:7c:95:7b:0e:33:73:16:
                    7c:32:74:ca:71:19:39:57:04:5f:2f:39:d3:09:f6:
                    b1:8a:08:4b:36:d6:20:f2:16:f7:0a:a1:2d:e7:6e:
                    19:5e:d1:0a:4c:01:7c:3a:e5:7b:e6:60:fe:32:22:
                    c3:16:2e:f3:b7:46:5e:c4:f8:45:d0:a2:16:d6:62:
                    68:2a:9c:a5:96:f2:85:d7:6e:fa:73:37:66:a0:de:
                    6d:fb:49:68:da:60:63:04:ca:0f:00:22:95:6b:b4:
                    b3:a7:62:63:ea:80:95:97:94:29:f3:32:0e:dc:df:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D8:13:7E:EC:93:6D:DD:1D:F1:30:04:F3:75:13:BB:14:3B:CA:37
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e33342e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f3:ae:f3:cc:cb:a4:e1:7f:0f:8f:60:73:3c:06:1e:67:5a:
         c9:46:7b:e4:0a:71:c8:0f:09:62:ee:48:dd:84:81:fe:18:56:
         f7:c7:cb:f3:28:61:de:1d:39:9d:7b:ec:9a:b5:18:14:eb:be:
         6c:ce:66:ca:ce:7a:84:ab:a2:92:36:d9:8a:31:35:0b:bd:81:
         73:65:ef:0a:7a:6d:dc:00:da:5f:eb:f9:12:ff:53:28:39:2b:
         64:db:7e:36:a8:32:3a:03:da:fa:cd:42:05:98:53:fb:79:ea:
         1c:cc:c3:9f:64:7c:4c:f5:91:d7:ef:d5:6d:f7:18:8b:22:21:
         5a:85:39:35:da:3d:b5:64:04:4b:e5:c3:41:b8:09:2f:6f:35:
         14:e5:d4:3b:72:a5:11:be:90:a2:1e:d5:92:56:80:ae:34:80:
         56:f8:5e:6f:7c:0f:08:02:19:35:98:e8:80:29:bc:60:18:bb:
         b0:d5:51:c7:88:54:10:7b:c6:fa:ba:02:51:61:87:7e:1d:19:
         b2:85:a4:6a:2b:36:98:81:ef:02:25:8c:63:2d:e9:d3:d2:59:
         0c:ab:8d:c6:17:6a:94:3a:5c:71:10:90:ad:4a:e8:9d:fa:d3:
         fa:25:af:8f:04:f8:6c:25:f8:61:7e:95:49:c5:60:41:85:25:
         98:52:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org