Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134372e302f32342d3234203d3e203238303237.roa
File:                     3230302e31302e3134372e302f32342d3234203d3e203238303237.roa (raw, json)
Hash identifier:          XKc+Bp8nGx6luIpdyYbjcCPH5frbGTLCmSYYIykJfiw=
Subject key identifier:   ED:49:6E:80:96:11:B2:D7:A5:6A:84:E0:74:5A:34:38:8E:C9:13:A9
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       41A10E1265B0E3B5D1EA07B37792AE28854C7B8C
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134372e302f32342d3234203d3e203238303237.roa
Signing time:             Tue 05 Mar 2024 17:51:37 +0000
ROA not before:           Tue 05 Mar 2024 17:46:37 +0000
ROA not after:            Tue 04 Mar 2025 17:51:37 +0000
asID:                     28027
IP address blocks:        200.10.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a1:0e:12:65:b0:e3:b5:d1:ea:07:b3:77:92:ae:28:85:4c:7b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Mar  5 17:46:37 2024 GMT
            Not After : Mar  4 17:51:37 2025 GMT
        Subject: CN=ED496E809611B2D7A56A84E0745A34388EC913A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:ec:89:9d:23:75:33:eb:a2:da:be:93:42:
                    67:51:ac:94:58:50:bb:ac:9d:be:d3:6e:e5:1d:ac:
                    ff:98:42:5f:98:4f:f6:c6:de:c0:be:57:38:6f:80:
                    22:36:8a:73:cf:b1:ad:c3:70:ca:3c:f6:8e:c6:16:
                    3d:9c:42:bb:f5:4e:8d:70:cf:ed:1d:f2:d2:3d:cc:
                    e7:01:41:b8:64:04:d5:b5:16:9a:f1:fa:f0:0e:c5:
                    1f:94:c0:a5:d7:b2:ab:4a:19:d0:58:c1:c4:8e:9a:
                    ee:76:63:64:9f:07:28:ee:89:81:cb:c4:f4:ae:57:
                    93:60:cb:db:66:d0:f3:25:c7:bf:b1:7b:6b:f9:73:
                    35:09:fd:7b:18:f4:20:e7:52:d7:14:1c:97:49:27:
                    88:69:93:73:c1:42:97:b5:b2:56:c2:44:9c:b0:6c:
                    44:11:d7:a5:70:51:18:55:2d:51:cd:cf:e6:cc:d3:
                    e4:f9:d2:2c:b2:2d:4d:78:56:8f:0c:80:41:81:de:
                    29:f7:a2:f5:68:e0:f2:c3:74:da:1b:51:b6:94:8e:
                    d4:72:63:5e:4a:d7:0f:45:a0:65:b6:4a:db:96:59:
                    23:82:79:bf:8a:f6:5b:54:0c:03:1f:e3:06:55:66:
                    59:4f:69:f1:bf:74:3c:8e:9b:22:6e:4e:e2:55:36:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:6E:80:96:11:B2:D7:A5:6A:84:E0:74:5A:34:38:8E:C9:13:A9
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134372e302f32342d3234203d3e203238303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:93:4d:4e:8f:92:15:33:07:2a:46:26:a1:ef:dd:4d:9d:49:
         e8:5c:a2:40:55:bd:54:50:96:e6:1f:b3:d7:f8:35:08:a2:63:
         6d:75:0e:2b:46:73:5d:e8:01:29:4b:f0:0c:00:5d:70:23:57:
         00:5a:bc:81:39:75:f3:05:e7:bf:98:7e:31:00:3e:dd:8c:2c:
         4c:3d:fb:ba:28:40:fe:14:6d:96:82:11:41:33:94:d1:e0:0c:
         e6:6e:64:13:a7:ea:74:1c:06:d3:03:ce:a7:4e:8c:22:0d:e9:
         32:f6:e3:2c:c4:61:a5:80:51:52:f0:a9:e4:ef:0c:f7:21:b3:
         3c:f0:05:b6:a8:3b:0c:42:1a:88:82:3d:d0:73:4a:43:2c:83:
         a3:56:95:d5:d5:37:9b:8e:bc:dc:8d:0f:51:5c:74:0b:57:7e:
         0a:92:ad:51:7c:5d:37:67:83:18:44:f9:a1:7c:4d:8d:cc:2b:
         8e:8e:99:14:7f:76:45:5d:77:be:91:7b:8d:da:c5:f2:b0:97:
         d6:70:d3:5f:dc:dd:87:76:e7:d1:45:79:75:50:2e:0a:e1:fa:
         79:7a:3f:e3:d8:21:1f:99:4f:7f:59:52:cf:47:6e:31:69:f4:
         e3:2e:85:4b:10:4b:0e:5f:f3:34:74:fe:d4:aa:7b:ba:62:49:
         ad:34:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:12:05 2024 by rpki-client on console-ams.rpki-client.org