Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34372e302f32342d3234203d3e203233323433.roa
File:                     3230302e31322e34372e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          IkuPVklkcLHzURNHwANSc92mwKT7a2mypi0cmcggy2o=
Subject key identifier:   F0:F1:61:A5:C5:76:0C:55:14:60:C7:42:A6:E0:87:E1:9C:3D:D2:B2
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       55851C4AFDC69D586BCE3E4C095E527A02B4F59A
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34372e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:08 +0000
ROA not before:           Tue 05 Mar 2024 17:51:08 +0000
ROA not after:            Tue 04 Mar 2025 17:56:08 +0000
asID:                     23243
IP address blocks:        200.12.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:85:1c:4a:fd:c6:9d:58:6b:ce:3e:4c:09:5e:52:7a:02:b4:f5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:08 2024 GMT
            Not After : Mar  4 17:56:08 2025 GMT
        Subject: CN=F0F161A5C5760C551460C742A6E087E19C3DD2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:df:70:f0:90:46:88:02:db:17:d7:10:00:
                    d4:ff:b7:ad:10:fd:1c:db:58:dd:c6:eb:2d:df:a1:
                    08:92:3e:ce:c2:09:77:99:94:05:08:ff:57:83:02:
                    4b:52:c9:32:cc:90:a5:ab:3d:ac:c0:f6:c1:de:3a:
                    21:2c:9f:47:ba:36:de:e0:c2:c4:29:08:f3:71:d7:
                    31:35:18:ed:ed:49:b7:d7:80:e0:05:15:2d:f6:c8:
                    71:cd:bc:23:b8:bd:78:a2:8e:42:f3:09:7d:62:e8:
                    b5:b6:4c:19:f6:c9:c6:d8:aa:7d:01:f1:07:d0:96:
                    50:22:b6:9b:b2:bc:f9:76:4e:3c:24:3b:8c:3d:13:
                    e0:00:aa:a2:8e:6a:99:91:f3:86:3a:c1:74:fc:83:
                    3e:50:9b:aa:ae:b7:52:6a:e4:c8:ec:a1:8d:11:36:
                    a2:23:bf:95:95:0f:f0:7f:c0:a6:fb:4b:e1:41:82:
                    d0:22:21:ac:0d:7a:d0:dd:b1:9a:56:27:21:a3:61:
                    05:cf:df:bf:80:ad:0a:90:ab:c9:57:8a:f7:83:9f:
                    a6:b4:8d:09:95:60:88:8a:da:3d:34:88:7e:eb:39:
                    55:96:34:d1:75:c0:38:5f:7c:87:d0:7e:7b:f2:f5:
                    a4:3a:85:cb:ca:2c:eb:40:69:51:a0:20:fc:9f:61:
                    0b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F1:61:A5:C5:76:0C:55:14:60:C7:42:A6:E0:87:E1:9C:3D:D2:B2
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34372e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:5a:d2:c0:50:ef:45:52:a3:98:b8:2b:71:21:e2:90:aa:c4:
         75:62:61:78:33:5b:7e:2f:22:ba:2e:4a:fa:f9:f3:75:68:56:
         1e:d0:5e:12:2d:5c:56:55:2f:b3:73:b7:f5:47:ed:70:29:8f:
         a2:47:ee:e0:91:47:19:65:c9:1e:c5:55:44:37:fe:cb:25:30:
         ae:19:8a:62:60:3a:55:d1:80:9a:c1:a6:40:b2:e6:b4:91:2e:
         0f:7b:49:e0:0c:66:54:73:c6:d2:c1:d4:c4:ff:16:7a:44:9e:
         5e:f1:79:d3:da:46:6a:17:aa:7c:db:87:66:10:98:25:ef:db:
         83:69:15:fd:87:4b:90:39:16:a5:1d:d5:17:bc:f1:52:e5:bd:
         3d:7f:bf:39:bf:36:7f:43:2b:60:96:13:fb:30:d9:aa:73:8a:
         6d:f8:df:99:12:42:50:84:e0:3d:68:c1:d9:bb:94:f8:fd:8e:
         94:5b:a4:e2:9c:53:02:3f:ed:64:35:30:79:0f:76:02:32:23:
         c4:e0:f0:72:81:e4:f6:e2:87:20:52:25:38:30:8d:f9:46:56:
         c1:9b:a0:41:e4:17:17:cf:22:a6:df:48:4a:9d:d2:6f:a7:de:
         e4:bc:74:37:6c:7f:d1:74:3a:4b:db:6e:83:2a:ec:ac:36:98:
         6a:34:93:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org