Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232342e302f32302d3234203d3e203133333831.roa
File:                     3230302e3131322e3232342e302f32302d3234203d3e203133333831.roa (raw, json)
Hash identifier:          3/iTAsaWqb9ql/QrumHmWxk82L14p2xrsq3HplqFZow=
Subject key identifier:   92:A4:CD:0D:4C:E7:0C:95:D2:AE:E7:D6:43:6F:5E:F9:2F:02:05:FF
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       1B814AE5906D57626756A350D98CC46BE63336ED
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232342e302f32302d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:13 +0000
ROA not before:           Tue 05 Mar 2024 18:12:13 +0000
ROA not after:            Tue 04 Mar 2025 18:17:13 +0000
asID:                     13381
IP address blocks:        200.112.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:81:4a:e5:90:6d:57:62:67:56:a3:50:d9:8c:c4:6b:e6:33:36:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:13 2024 GMT
            Not After : Mar  4 18:17:13 2025 GMT
        Subject: CN=92A4CD0D4CE70C95D2AEE7D6436F5EF92F0205FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:7a:d4:6b:cf:80:bd:34:54:dc:43:43:ec:
                    2e:17:5e:fc:63:db:a4:12:f6:e8:54:4b:ec:6c:fe:
                    59:60:65:d8:1d:96:7d:be:37:70:6c:f4:b5:3c:f2:
                    cc:bc:c7:f5:d2:08:c2:8f:f6:cb:f8:06:c1:c5:9d:
                    5e:2d:1e:2e:18:79:41:1d:d5:11:b1:85:83:0c:64:
                    ea:b1:25:14:ed:bd:ed:62:eb:b8:1d:b7:dc:4d:16:
                    cf:55:f6:18:00:bc:4a:03:e5:d8:39:84:f0:84:db:
                    7e:db:c8:18:3d:20:44:f2:44:56:43:ab:11:61:6e:
                    b5:6f:a2:c0:8f:53:ce:5f:8c:46:84:8a:81:71:ba:
                    d9:04:c8:1c:33:e4:5f:e9:4f:c0:a7:60:e1:64:9e:
                    11:87:14:7d:2d:40:ae:61:60:53:58:a9:76:c3:29:
                    19:66:b9:06:f1:43:4d:4e:2a:ad:f5:a8:09:a2:a2:
                    2f:21:29:d6:27:b6:e5:66:9f:6b:c7:dc:c5:be:e4:
                    21:97:8b:69:05:07:76:3e:0f:3f:56:e5:4a:f0:89:
                    a5:42:97:b3:07:65:2b:2f:0b:11:84:8f:85:6c:6a:
                    6b:b5:f6:e9:a7:b2:93:64:64:a8:e7:a9:9e:6e:ea:
                    ec:03:e8:b5:71:1c:43:4f:03:a5:7e:14:7f:a8:a1:
                    9b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A4:CD:0D:4C:E7:0C:95:D2:AE:E7:D6:43:6F:5E:F9:2F:02:05:FF
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232342e302f32302d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e3:8a:8d:94:e9:1b:73:a3:d4:6c:61:5f:20:55:d3:ea:d3:52:
         d0:a0:1c:fc:ca:89:6c:c4:14:2b:4c:a6:24:d0:d5:59:7c:c7:
         43:a5:31:c7:e4:41:86:e2:5b:90:bf:f9:6b:20:bf:59:77:ce:
         1b:b6:2e:33:8c:1f:ef:7a:ed:e5:fe:5d:c0:79:1c:6a:63:3b:
         61:dc:12:08:58:2d:50:b2:e9:1a:ed:70:b3:36:8b:a0:d2:82:
         05:72:42:06:02:52:21:65:d4:eb:05:d2:8b:ad:c6:2e:7c:f8:
         dd:0a:31:06:15:af:ce:57:be:a2:e5:aa:80:95:50:19:86:6a:
         e4:31:e1:3b:f2:63:82:9f:fe:2d:57:2b:f0:3a:b6:3a:4a:5d:
         8d:dd:70:15:e5:7d:87:88:30:a2:3b:5b:61:bc:77:98:d6:aa:
         9d:46:17:06:70:69:12:1a:22:2c:1d:64:33:a6:42:8e:28:78:
         55:1f:f7:e0:90:db:6e:7c:1d:11:03:63:14:e6:0d:91:49:b1:
         82:7d:45:4c:93:c7:2c:92:47:66:e6:5f:12:84:2e:3a:f3:c2:
         7a:32:72:03:ad:fb:b4:27:e0:76:b5:a2:1b:79:97:6c:94:fe:
         5b:2a:0c:c6:46:1f:c0:c9:28:d8:e8:3d:35:62:04:da:e9:bf:
         a4:91:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org