Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36312e302f32342d3234203d3e203233323433.roa
File:                     3230302e31322e36312e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          f/erd7y+HVPhCgxiZ5Adpw3Ore+pUlG9aJFEd4mbkBQ=
Subject key identifier:   91:90:68:4A:F1:F2:19:A0:6F:52:32:22:02:D1:85:7B:78:4F:20:A7
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       5E9B22DBA5AD187A5A6DF138875A8746FEE53AA9
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36312e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:08 +0000
ROA not before:           Tue 05 Mar 2024 17:51:08 +0000
ROA not after:            Tue 04 Mar 2025 17:56:08 +0000
asID:                     23243
IP address blocks:        200.12.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9b:22:db:a5:ad:18:7a:5a:6d:f1:38:87:5a:87:46:fe:e5:3a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:08 2024 GMT
            Not After : Mar  4 17:56:08 2025 GMT
        Subject: CN=9190684AF1F219A06F52322202D1857B784F20A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:4f:0f:1f:4a:c3:be:19:0c:fa:b1:37:4b:
                    ee:52:f6:ea:27:7d:7c:4e:36:84:45:19:72:ef:70:
                    f6:29:2a:a2:df:c4:6c:f0:6c:3e:4a:bf:32:1c:70:
                    42:f1:94:c2:a9:21:41:8d:b2:89:12:a6:c1:cd:62:
                    ef:79:17:6e:64:86:ec:bf:ea:26:f5:3f:09:91:30:
                    1b:b7:fa:90:b9:38:7b:76:38:76:e1:03:85:46:a4:
                    9c:a6:d1:d2:81:ae:80:6c:26:6f:42:72:e3:e0:e1:
                    48:dd:92:b5:b9:45:dc:d3:ce:d4:7d:c9:d8:97:db:
                    84:cf:d3:4a:51:dc:2b:f0:96:69:ad:b4:67:19:96:
                    77:c5:70:97:39:f7:72:7f:36:5b:bb:a6:76:42:eb:
                    ef:70:97:d0:84:09:72:97:cb:ff:38:f7:92:05:f5:
                    5d:87:07:07:63:a8:35:42:af:05:5c:bd:f5:2f:d5:
                    02:50:f5:a1:a7:bf:02:2b:8c:76:9b:72:83:ea:9d:
                    5e:e6:e9:7f:23:53:39:73:58:36:b2:8f:1e:29:66:
                    1b:96:99:02:36:c4:25:0d:5d:30:ef:a9:9d:4e:9f:
                    c8:2a:57:71:44:bf:6a:13:71:74:42:3d:8c:10:f7:
                    0a:28:35:7f:93:e0:bd:cb:75:25:b3:2e:93:f0:c6:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:90:68:4A:F1:F2:19:A0:6F:52:32:22:02:D1:85:7B:78:4F:20:A7
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36312e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:a7:13:d3:3b:0b:91:4f:1e:24:dd:4a:d6:05:92:1a:12:78:
         07:ed:5a:4d:18:ad:4a:6a:d8:22:26:a3:5b:a6:fd:01:55:3d:
         74:34:35:75:f2:92:51:02:5d:61:c3:e9:11:5b:5f:38:4d:ea:
         1d:bf:f0:a0:cb:26:a7:75:3c:59:82:88:d4:46:24:fb:28:ec:
         a5:f2:f3:83:43:8e:4d:42:fc:cd:35:0b:2e:18:2a:0c:e7:dd:
         44:5a:bd:1d:22:76:3f:0e:2f:93:1d:2f:9d:4d:1f:0f:74:ea:
         91:db:09:07:60:67:b4:06:c0:36:09:bf:05:60:a7:f3:c3:09:
         06:af:7c:67:9d:56:f9:2c:a5:b8:a4:b6:69:d1:4e:d5:ad:d6:
         14:b3:62:7c:e9:b9:55:79:19:3b:d6:a6:84:93:b8:85:e8:08:
         ab:95:dd:40:97:4c:b7:c5:2d:da:e2:2c:17:2b:72:cd:c6:4b:
         35:5a:73:37:ee:b2:25:2d:ac:10:42:ee:dd:08:11:c7:3b:e1:
         06:4a:7a:61:c7:e7:a4:5d:c8:39:c1:c0:0b:3e:ff:9c:93:81:
         30:59:b4:8c:ab:22:f7:bc:18:83:35:26:98:13:69:9e:6d:43:
         29:81:ab:4e:cb:bd:16:81:3d:2b:09:c0:8c:89:cb:22:eb:30:
         4a:2c:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org