Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/3230302e33332e38352e302f32342d3234203d3e20323633383331.roa
File:                     3230302e33332e38352e302f32342d3234203d3e20323633383331.roa (raw, json)
Hash identifier:          fdU6PqN8M0Eamubb9G0eqedXMomhHKNodz8DWeTZkpQ=
Subject key identifier:   76:C1:99:61:A3:47:BF:F0:48:F7:46:66:64:03:76:F5:E8:51:C6:F1
Certificate issuer:       /CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
Certificate serial:       44D9BCF2CE79D87970953CEF24C58A643079CBCB
Authority key identifier: DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/3230302e33332e38352e302f32342d3234203d3e20323633383331.roa
Signing time:             Tue 05 Mar 2024 17:44:48 +0000
ROA not before:           Tue 05 Mar 2024 17:39:48 +0000
ROA not after:            Tue 04 Mar 2025 17:44:48 +0000
asID:                     263831
IP address blocks:        200.33.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d9:bc:f2:ce:79:d8:79:70:95:3c:ef:24:c5:8a:64:30:79:cb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
        Validity
            Not Before: Mar  5 17:39:48 2024 GMT
            Not After : Mar  4 17:44:48 2025 GMT
        Subject: CN=76C19961A347BFF048F74666640376F5E851C6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:70:47:46:ad:e7:0a:57:06:a5:e2:46:98:
                    cb:04:36:e7:85:04:1d:b1:8c:89:8b:c8:84:91:08:
                    d4:9c:ee:ec:2c:da:40:e4:bc:ab:2f:12:34:94:20:
                    14:8c:3b:a3:b0:08:2c:28:b8:0d:4f:97:44:e6:1c:
                    7a:66:0f:d8:36:e9:22:7f:c7:ff:ac:b8:e8:e3:57:
                    b7:3e:33:db:3b:76:dd:7e:c9:f0:f1:af:b2:2f:d7:
                    af:a5:4c:fa:48:56:2e:a1:f2:fa:f6:a4:a3:f7:e8:
                    37:d0:67:53:8f:fc:02:fd:36:ce:4e:0d:4e:d5:20:
                    a3:a8:e9:a2:81:a4:1f:92:5c:01:a7:90:cd:2e:66:
                    ef:14:2f:e6:1b:39:e1:43:f7:53:15:97:f6:0e:ee:
                    90:a6:b9:9f:c2:87:13:0c:e7:f8:c3:d5:07:42:48:
                    ff:9f:50:59:07:4e:36:37:96:5b:c1:c7:84:f3:04:
                    cb:12:b0:52:c6:3b:b9:30:11:a9:e7:83:99:5c:3c:
                    4b:c8:c5:cc:b0:8f:3b:44:fd:18:1b:31:43:d1:7b:
                    2b:10:77:ed:e7:99:98:1d:54:34:c5:06:b2:a0:b4:
                    0a:84:4b:e9:43:e6:49:31:d8:94:3c:d9:5f:c0:75:
                    21:4d:dd:29:d6:4e:b8:67:8d:fb:1e:4b:ab:93:eb:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C1:99:61:A3:47:BF:F0:48:F7:46:66:64:03:76:F5:E8:51:C6:F1
            X509v3 Authority Key Identifier:
                keyid:DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/3230302e33332e38352e302f32342d3234203d3e20323633383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:47:6c:3b:f0:79:55:43:62:ec:82:e7:71:cb:7a:fe:3f:
         d5:8d:77:0c:c7:f1:da:fe:80:ad:d3:db:b2:3d:4a:c9:d2:54:
         91:34:62:a3:b6:fb:9a:87:21:51:da:2f:73:0b:f0:ac:f4:6e:
         68:50:b7:26:5e:2d:5f:45:02:9c:b2:5c:b3:b1:ae:4a:85:4c:
         72:f4:09:27:c2:3a:4f:38:f6:a0:29:06:cc:21:9d:2d:eb:66:
         26:d6:6b:9c:2d:a2:d8:6b:cf:36:58:c7:dd:b8:4d:39:de:da:
         23:24:28:6d:13:bc:0d:8b:f8:4e:6e:b5:5b:b1:9f:6e:0a:6c:
         da:54:99:d6:4d:3d:49:8b:fc:b4:87:88:2b:8e:95:30:d4:2e:
         03:c8:a5:62:60:8a:ad:3a:66:9e:4b:43:0f:b6:0c:c0:da:45:
         a4:fd:84:ff:92:bc:60:72:6a:31:f8:db:1a:aa:57:d1:9a:54:
         e2:94:22:86:6e:10:fc:88:09:87:4d:c6:fe:c9:e5:a8:e5:92:
         ad:db:0c:34:7e:66:ac:67:7b:6f:97:4a:63:9d:8d:2d:7e:8d:
         8f:cc:30:34:d9:bf:d9:66:92:4e:2e:2e:84:24:d6:65:f0:2b:
         77:2d:db:73:d5:f8:2b:70:4e:cc:9f:d4:a7:b0:40:05:0a:f5:
         0b:20:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org