Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134372e302f32342d3234203d3e203237393437.roa
File:                     3230302e31302e3134372e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          0p1cBDcg/Q2m+XdySIkDpR8kq4luymgBQBtuf5Y2Fk8=
Subject key identifier:   13:C4:1A:EE:79:6C:37:1C:F4:B8:DC:16:4F:E5:DB:C4:B0:F9:68:E5
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       6D8207474A55E7AD79C686B32DA15344336760B3
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134372e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 02 Apr 2024 19:25:00 +0000
ROA not before:           Tue 02 Apr 2024 19:20:00 +0000
ROA not after:            Tue 01 Apr 2025 19:25:00 +0000
asID:                     27947
IP address blocks:        200.10.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:82:07:47:4a:55:e7:ad:79:c6:86:b3:2d:a1:53:44:33:67:60:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Apr  2 19:20:00 2024 GMT
            Not After : Apr  1 19:25:00 2025 GMT
        Subject: CN=13C41AEE796C371CF4B8DC164FE5DBC4B0F968E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:81:b8:ee:32:5f:a4:09:8a:de:2c:d4:0d:
                    7a:8a:ee:a3:9a:6a:d2:22:36:b5:f2:fe:a6:9d:9a:
                    e9:14:52:9b:5e:05:f1:94:ff:c1:db:13:1f:fc:8b:
                    79:1e:c0:d4:b0:02:47:dd:57:ec:bb:a2:e7:a6:62:
                    88:08:b9:0d:4b:7e:5b:b3:06:aa:51:f6:3e:bf:93:
                    07:4f:7e:0f:f4:63:e3:4d:d9:65:08:22:fe:c3:34:
                    e1:48:8a:0a:74:b5:33:69:9b:c5:23:3f:d1:95:14:
                    77:66:15:54:c5:56:f4:e4:d9:ac:04:44:e3:cf:1c:
                    51:60:36:f6:b5:91:90:9d:e7:f1:14:c1:ed:da:d8:
                    c5:58:02:61:02:01:2c:d6:f4:ef:2c:50:9c:cc:34:
                    08:de:ec:15:da:35:ba:e6:96:14:49:fa:93:70:af:
                    48:bf:90:05:c5:e2:08:68:04:d0:79:46:99:6a:d4:
                    bf:e6:8f:73:c1:c0:0a:d8:a9:43:07:55:ef:e0:6a:
                    bf:aa:47:16:fc:cc:36:54:9f:0e:85:53:8d:23:0d:
                    95:36:e4:b0:eb:c1:92:30:7d:9b:70:47:93:71:91:
                    d6:cf:57:cb:a3:11:4c:77:71:f1:2f:11:d1:8a:c3:
                    7a:f7:1f:4e:9a:64:97:9c:54:cd:4b:38:bd:e5:9c:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C4:1A:EE:79:6C:37:1C:F4:B8:DC:16:4F:E5:DB:C4:B0:F9:68:E5
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134372e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:ad:c0:8e:c6:3b:f1:42:c2:61:40:df:06:5a:ac:8c:9b:
         e2:51:83:37:85:73:5f:a0:59:eb:dd:ed:95:36:ea:ca:93:c7:
         7f:68:a9:0b:7a:85:70:55:f5:28:35:58:4c:88:1a:3e:01:f8:
         33:8c:be:da:74:2d:b4:d2:f6:40:01:63:ef:b3:61:fb:84:70:
         a1:cc:ae:48:4e:52:75:2d:35:6f:8b:f7:5e:e4:c6:bb:32:1f:
         16:80:19:d5:90:14:57:54:d8:85:1c:c8:4b:dc:45:1d:17:9c:
         43:33:92:80:8b:1b:2f:ab:72:8b:56:ae:38:96:ed:4e:54:47:
         a6:e0:88:2d:8a:26:f7:95:96:6f:31:45:d3:5c:8c:61:7d:dd:
         bb:7b:db:77:48:00:05:2e:7c:35:8c:df:75:9f:c6:45:7a:ef:
         f4:b3:9c:40:ec:f9:f6:70:ae:d1:c2:f3:27:c6:bf:92:37:45:
         14:bc:47:1f:cd:46:76:7b:a9:96:fd:5a:09:8b:21:8e:98:00:
         93:41:95:d8:4d:18:dd:08:79:9f:9c:db:71:77:d5:86:4e:60:
         12:d2:69:e0:5d:10:4c:bb:94:28:5a:4d:00:4f:fe:b9:0b:3c:
         0f:09:a0:9d:48:a4:32:27:28:67:73:4c:d4:05:9c:0b:0c:f6:
         37:83:ce:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org