Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/3230302e302e32342e302f32322d3232203d3e203237373235.roa
File:                     3230302e302e32342e302f32322d3232203d3e203237373235.roa (raw, json)
Hash identifier:          WlgZMRnfCS6p0ChiaHS/rlw6KlswC4rvTdFxS5Q+cwE=
Subject key identifier:   4C:F7:E3:3B:A9:CB:3B:67:3F:1A:3E:66:5F:F9:01:9E:36:52:FA:80
Certificate issuer:       /CN=4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C
Certificate serial:       3F09B8FE0FCB5B85CF3D98F8EB4CC60B64789F0F
Authority key identifier: 4C:37:F0:9F:A8:BF:8F:7F:D2:6F:DB:DD:D9:AB:EF:89:31:F1:5B:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/3230302e302e32342e302f32322d3232203d3e203237373235.roa
Signing time:             Tue 05 Mar 2024 17:59:25 +0000
ROA not before:           Tue 05 Mar 2024 17:54:25 +0000
ROA not after:            Tue 04 Mar 2025 17:59:25 +0000
asID:                     27725
IP address blocks:        200.0.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:09:b8:fe:0f:cb:5b:85:cf:3d:98:f8:eb:4c:c6:0b:64:78:9f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C
        Validity
            Not Before: Mar  5 17:54:25 2024 GMT
            Not After : Mar  4 17:59:25 2025 GMT
        Subject: CN=4CF7E33BA9CB3B673F1A3E665FF9019E3652FA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:8c:6f:e0:74:fe:a4:94:86:9c:45:9a:ef:
                    41:c0:a2:7e:8c:0f:c1:f1:35:bf:41:e6:61:a9:79:
                    7b:29:89:0d:cb:73:21:e9:9b:3d:06:d9:d6:9d:a8:
                    30:0c:2c:cb:90:16:f6:f2:b8:50:e8:89:1a:a7:39:
                    e1:d1:52:81:d7:5a:bf:6f:a8:09:a4:f8:c3:27:9b:
                    b0:59:41:99:69:94:3c:18:a7:9d:3f:16:8b:41:63:
                    fd:d4:8c:5d:a5:bb:69:4f:96:19:83:49:aa:8d:c1:
                    1c:13:45:56:90:bc:ef:30:47:9f:89:08:15:d0:8f:
                    15:84:12:82:c9:89:27:6c:2f:c1:95:56:0f:7e:59:
                    b7:fb:ae:13:fe:40:09:e7:8e:36:ff:59:a2:c8:df:
                    9a:27:74:eb:58:2c:40:07:e4:42:83:2a:62:a4:d5:
                    1d:a5:76:7b:0c:3f:d4:0f:37:a4:70:ab:95:d6:fb:
                    bb:6a:bd:80:48:49:f9:94:55:8a:ae:c9:a5:2c:3c:
                    ba:55:08:60:2c:77:45:2a:23:18:99:49:fc:61:23:
                    34:30:d2:65:82:9f:88:d1:25:aa:15:dd:20:67:66:
                    83:8a:bf:98:19:d1:fb:a2:d3:25:c4:02:92:27:e0:
                    48:a1:8b:72:e1:4c:7e:15:41:08:7b:ea:24:1a:5c:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F7:E3:3B:A9:CB:3B:67:3F:1A:3E:66:5F:F9:01:9E:36:52:FA:80
            X509v3 Authority Key Identifier:
                keyid:4C:37:F0:9F:A8:BF:8F:7F:D2:6F:DB:DD:D9:AB:EF:89:31:F1:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/3230302e302e32342e302f32322d3232203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:25:4c:72:ce:71:66:37:fb:25:fc:4f:dd:fd:38:53:4a:
         15:d8:1e:74:90:fe:93:64:27:83:bf:5f:c0:d0:f8:63:5a:00:
         c5:2f:0f:a8:e7:11:86:2c:1d:70:da:72:49:8f:4b:b4:9d:fe:
         9f:c9:60:2d:10:7e:7c:dc:53:c9:e8:73:d9:51:bc:54:08:22:
         9c:f2:e1:a4:e9:6e:3f:9a:1e:98:fd:43:2e:4d:5c:ac:81:2b:
         14:ba:d9:fa:1f:04:09:e7:98:f9:a5:98:d2:c1:03:d5:1e:fd:
         7e:09:c2:1a:34:42:e0:19:4e:86:1d:c2:5c:b8:82:e6:c9:53:
         1d:9e:a2:37:05:c4:a7:4e:b1:06:f5:68:34:ea:c9:b4:a1:63:
         9d:2d:c9:e7:ec:b3:cd:39:a4:25:57:74:09:3d:f0:b4:a0:49:
         8c:56:dc:11:b7:80:b7:93:f3:02:54:ed:d9:c2:4a:b5:ef:43:
         14:cf:fa:a4:07:ac:3f:d0:db:37:2f:bc:6e:47:48:aa:01:b4:
         ea:ba:e7:7e:67:e8:63:0f:1a:f5:76:02:45:f9:ac:91:05:e5:
         e8:ce:55:05:0e:65:52:dd:c8:48:04:fd:d9:3f:66:f9:d8:0d:
         37:0c:08:f7:08:73:85:a2:c7:16:aa:b1:99:7c:a9:06:5d:d4:
         9b:21:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org