Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e35312e302f32342d3234203d3e203233323433.roa
File:                     3230302e31322e35312e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          yaUZ3bD7N7J4mk76IF9xt9x6FwOq0Rj6OJAYFIdc8cs=
Subject key identifier:   BD:11:13:B5:17:9C:67:D1:69:89:11:8E:66:18:31:B2:3D:65:B0:BF
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       0C3D5CA0D7D4D99E1492B015C6F06B1008CC1012
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e35312e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:04 +0000
ROA not before:           Tue 05 Mar 2024 17:51:04 +0000
ROA not after:            Tue 04 Mar 2025 17:56:04 +0000
asID:                     23243
IP address blocks:        200.12.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3d:5c:a0:d7:d4:d9:9e:14:92:b0:15:c6:f0:6b:10:08:cc:10:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:04 2024 GMT
            Not After : Mar  4 17:56:04 2025 GMT
        Subject: CN=BD1113B5179C67D16989118E661831B23D65B0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:9b:2d:30:c1:ca:42:76:18:de:f8:ff:b4:
                    1f:1f:de:a7:ee:33:bc:d0:79:a4:ee:4f:3f:15:52:
                    72:34:91:f4:10:43:f0:9f:00:f6:c5:c0:81:a9:ba:
                    3a:0e:4b:49:88:b5:b5:f6:07:6d:e1:e1:bb:ea:27:
                    7d:6c:37:14:bc:6e:25:dc:d3:d5:35:b7:93:76:96:
                    de:91:26:2d:0d:e7:11:0b:c8:d1:dc:fe:2c:80:83:
                    df:85:5d:98:e2:2c:4d:6a:7f:42:69:48:ee:22:18:
                    a4:37:48:3c:12:5f:af:8a:9b:d6:04:b8:b7:a8:24:
                    9c:29:63:de:88:ea:1c:cf:ed:a2:f1:e1:f7:19:15:
                    3c:58:dc:53:f0:55:70:3a:5b:68:53:27:6e:7f:c8:
                    6a:ae:e4:e4:a3:9e:26:2b:d2:fd:8b:33:f1:6a:ed:
                    8a:fe:b2:08:b4:fd:d9:94:96:1b:00:6d:0c:44:3b:
                    e6:ea:66:33:8b:fc:8d:f6:73:ff:14:4c:9d:78:ca:
                    3b:2f:71:70:11:26:12:b6:4a:8f:96:8c:c4:fe:7b:
                    71:d0:7e:05:70:0d:2f:8f:bb:20:62:c4:a3:c6:bd:
                    03:fc:9d:3a:1e:9b:2e:40:cf:09:e2:7f:d6:aa:6b:
                    ac:2d:c0:dc:06:a0:6e:8a:8c:93:a3:71:75:30:7e:
                    3b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:11:13:B5:17:9C:67:D1:69:89:11:8E:66:18:31:B2:3D:65:B0:BF
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e35312e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:53:18:14:44:4f:b1:52:53:f3:e7:44:ce:88:ea:0d:78:ca:
         38:2e:28:0d:22:47:e2:9b:de:3a:2b:98:29:40:b9:ad:91:bb:
         f6:37:45:07:75:e0:83:ef:e8:eb:76:93:86:72:28:ae:bd:6f:
         6c:7c:09:37:f4:2b:94:12:f3:52:bc:a3:4e:a3:06:ec:12:51:
         92:7c:53:81:13:78:d4:9b:78:36:8c:ea:32:30:38:12:69:19:
         f6:8d:02:d3:91:cb:24:31:32:9f:f0:ae:0c:d8:3b:6f:b0:55:
         a5:7f:bc:fb:4f:d8:49:6d:87:d5:fa:47:91:49:20:c6:aa:dd:
         84:e4:c4:37:c2:61:df:2a:3b:fc:3f:cd:c1:d2:ce:65:96:4e:
         74:dc:c4:cc:74:b6:fb:70:41:ba:b2:78:0a:b6:43:0e:c3:fb:
         7e:32:6a:86:df:1e:ce:6a:bd:5a:2d:3e:c9:e2:c4:cc:04:b1:
         8b:7b:cf:8a:ba:c0:24:2d:a7:da:6e:f8:0a:31:b8:76:cb:5d:
         c3:e4:60:33:d9:80:db:9c:b3:d9:e6:85:f8:5b:7e:b6:1b:c8:
         74:67:5c:c7:74:3e:d9:24:2d:60:c2:72:11:d9:d7:da:f7:b7:
         ed:ab:56:6f:94:d6:9c:37:7d:3b:be:8a:11:c1:66:5f:6b:7d:
         b6:71:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org