Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203238303237.roa
File:                     3230302e31302e3134382e302f32322d3234203d3e203238303237.roa (raw, json)
Hash identifier:          QXeoKsSP7LAQ+/m5+mbbG84meQ6hz7rAGeMQnaaNCQI=
Subject key identifier:   1F:1E:9F:84:3D:04:4F:F2:4B:19:EE:FE:65:EE:87:D5:28:FB:88:01
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       226408A70DFB0A18CC5C792370E3216BA6F57476
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203238303237.roa
Signing time:             Tue 05 Mar 2024 17:51:37 +0000
ROA not before:           Tue 05 Mar 2024 17:46:37 +0000
ROA not after:            Tue 04 Mar 2025 17:51:37 +0000
asID:                     28027
IP address blocks:        200.10.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:64:08:a7:0d:fb:0a:18:cc:5c:79:23:70:e3:21:6b:a6:f5:74:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Mar  5 17:46:37 2024 GMT
            Not After : Mar  4 17:51:37 2025 GMT
        Subject: CN=1F1E9F843D044FF24B19EEFE65EE87D528FB8801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:cf:57:e9:e0:73:87:5e:b9:5e:9b:c8:91:
                    25:4e:ba:91:df:6b:62:b8:da:b9:2d:76:f9:8f:0e:
                    26:ea:46:4d:62:64:39:70:a1:23:69:69:fd:f7:42:
                    fc:26:1e:ec:a0:34:2c:22:9a:3d:5f:21:85:20:02:
                    a2:14:fa:2d:e6:99:f6:50:ba:f2:f4:b8:74:af:9f:
                    3d:55:9b:8d:be:d4:a4:13:4a:5b:43:e1:22:ac:2f:
                    72:ac:ef:bb:08:07:14:27:87:46:d5:a0:d1:dd:7f:
                    79:46:6a:10:5f:a0:39:be:18:4d:f0:c0:fc:aa:36:
                    b6:60:61:e0:a7:4a:8b:cc:f1:de:13:24:a2:05:6b:
                    8b:79:24:d7:75:fc:ee:71:cd:6d:8c:75:67:6d:df:
                    df:37:37:84:4b:0a:c8:85:f0:6f:d5:2a:5a:69:62:
                    26:f9:ea:2f:74:77:02:4d:d4:52:cc:84:98:cd:b3:
                    04:76:fb:12:b0:ce:6a:86:a3:aa:d2:bd:4a:52:5f:
                    0a:90:9f:2a:69:4d:8a:29:26:fe:5b:57:56:b7:12:
                    b4:bf:fb:33:55:c9:b4:43:aa:74:be:f5:94:c2:f5:
                    5d:74:59:72:16:7e:e9:15:69:d4:d1:01:b8:00:a1:
                    49:da:46:24:5c:95:41:61:a2:6c:bb:64:2b:ca:af:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1E:9F:84:3D:04:4F:F2:4B:19:EE:FE:65:EE:87:D5:28:FB:88:01
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203238303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:f2:db:3e:06:3d:75:96:14:29:31:04:51:d8:d3:bc:fd:41:
         77:b2:8c:c5:06:12:70:13:da:88:aa:2d:84:2e:6c:8e:30:be:
         e6:cc:9d:40:e0:cd:a4:89:a5:53:0e:65:c8:71:17:01:5c:85:
         dd:d5:3c:bf:c7:98:36:13:f6:34:ee:cf:56:f3:c4:dd:f7:c5:
         32:78:74:23:1a:ef:41:23:96:e1:0e:28:d4:a5:6b:7d:ed:65:
         4d:89:cd:41:cd:08:48:4d:ba:80:32:41:9f:59:66:60:be:c6:
         4c:95:fa:5f:e1:28:59:0f:62:86:16:a7:86:ed:ea:9f:9d:98:
         db:fc:a6:d7:4b:9f:f0:7b:a1:ff:c2:6f:ca:e7:e4:e6:7e:29:
         3c:53:56:53:e5:14:60:cf:69:84:d0:21:e2:7b:7e:cc:80:ed:
         f7:8a:2f:a0:b9:51:3c:1a:d9:1c:51:c7:a7:35:15:f0:c3:ad:
         19:28:2a:1c:7a:51:f9:d2:5b:e2:45:79:db:9e:b2:8b:39:d6:
         65:a3:ea:1f:c4:17:f7:3e:c4:a2:e5:12:2e:6a:73:55:d9:ca:
         2b:af:44:72:62:17:33:d0:0d:a9:dc:88:0c:b5:66:44:60:f4:
         a3:97:93:3a:5f:7a:23:42:2c:d9:89:7c:2e:0a:85:26:6d:17:
         0d:3a:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:37:09 2024 by rpki-client on console-fra.rpki-client.org