Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34392e302f32342d3234203d3e203233323433.roa
File:                     3230302e31322e34392e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          Bqu9aNHZ+V7HLfeG8XrasJZAYGC8I1ULFpJi7sZ7vQQ=
Subject key identifier:   1F:46:72:C1:17:5E:97:89:97:9F:CE:A1:E6:DC:2B:8B:D4:17:1B:67
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       4A6BA2C40583FBAB2B5B4BD6FEA7884FF5F2EEB1
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34392e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:05 +0000
ROA not before:           Tue 05 Mar 2024 17:51:05 +0000
ROA not after:            Tue 04 Mar 2025 17:56:05 +0000
asID:                     23243
IP address blocks:        200.12.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6b:a2:c4:05:83:fb:ab:2b:5b:4b:d6:fe:a7:88:4f:f5:f2:ee:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:05 2024 GMT
            Not After : Mar  4 17:56:05 2025 GMT
        Subject: CN=1F4672C1175E9789979FCEA1E6DC2B8BD4171B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:73:3e:8e:b8:ca:86:12:5d:ea:75:87:cc:
                    7b:2a:13:1d:4a:87:d8:d9:06:d8:cd:ad:0e:10:63:
                    0d:3a:30:02:b4:26:2b:da:de:f8:cd:28:23:d3:bd:
                    4b:23:57:98:10:5b:f7:c9:3d:fc:2d:ad:a8:ae:9b:
                    8a:be:e8:06:78:87:97:e6:3d:51:7c:cb:e1:fe:36:
                    ba:f9:21:0c:5d:63:ce:44:2d:17:1a:bd:fc:85:15:
                    bc:ca:9c:cd:29:80:98:e4:20:af:a5:ba:4f:69:7c:
                    fb:99:a7:1e:f4:54:96:07:ca:db:ae:81:fb:93:5f:
                    7d:45:1b:70:b6:fd:e3:7c:6d:f0:ed:db:aa:2e:99:
                    51:54:22:f7:3d:3a:bf:ab:7e:3a:fd:b4:c7:f7:eb:
                    24:c6:c9:33:31:91:a9:37:9c:ba:0a:71:f1:91:ab:
                    30:c2:53:76:70:3b:ab:fa:d5:0d:75:1b:82:a7:c1:
                    c1:4d:b3:19:52:bb:a2:fc:9a:6a:e2:eb:c2:14:53:
                    f8:94:56:ef:16:ea:e5:4e:bc:1c:b6:ae:a2:12:df:
                    80:40:18:c2:fc:5c:42:a1:e4:c3:50:b5:02:34:9f:
                    17:e0:5b:b5:4c:45:2d:af:e5:38:67:93:70:38:dc:
                    2a:c0:ad:f0:8b:c2:8d:1b:9c:63:be:77:d7:a6:bf:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:72:C1:17:5E:97:89:97:9F:CE:A1:E6:DC:2B:8B:D4:17:1B:67
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34392e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b9:06:50:b6:9b:0c:60:8f:85:8d:7f:d6:24:ce:63:02:71:
         50:13:69:88:83:13:ff:b3:9c:89:f7:d6:fc:a6:64:ab:65:26:
         9f:f4:04:aa:c1:06:d0:db:7d:b8:e1:25:3c:29:3e:50:df:1c:
         ff:b3:53:28:3a:25:fc:67:be:ab:43:c4:37:a2:e6:b6:ad:28:
         fc:b5:d1:76:5e:c1:ee:c3:57:04:2a:4f:d2:28:3d:e0:64:f7:
         45:46:9a:74:b6:48:d5:40:8d:73:b9:6d:f1:05:50:04:66:73:
         00:dd:94:20:55:7c:1e:0f:f3:47:b7:98:f0:42:60:dc:aa:f5:
         cc:80:f9:81:8f:ac:45:eb:10:a6:f4:33:d9:ff:29:88:cc:5a:
         b3:ca:27:6f:b7:ae:e3:bc:33:91:ce:6e:82:bf:ee:f6:b7:5e:
         ad:fc:e4:3f:46:07:44:ff:6f:f6:c4:62:34:b2:d4:3d:59:0d:
         e1:eb:13:b5:9b:99:ad:ca:8d:47:9d:99:9c:c3:ca:9d:e4:81:
         07:82:0a:34:90:08:c0:6f:22:c6:81:95:91:46:e7:91:05:d2:
         a5:6a:86:b7:f4:bc:57:d3:65:15:30:f4:6a:ee:49:fd:c0:db:
         58:f4:67:2b:48:8d:3e:8c:ec:4e:86:25:27:ef:a2:be:9d:b0:
         e4:53:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org