Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232352e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3232352e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          vQq4Ohu0mVZKfhVAte9tEzESOsPSOjblKvA08TzKJAM=
Subject key identifier:   F6:00:05:3E:66:2F:53:0F:5E:0D:36:72:D4:DC:6F:FD:87:68:38:FA
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       19A49FF9B6AB7CCC954E9D3894F3401FEE9D8422
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232352e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:12 +0000
ROA not before:           Tue 05 Mar 2024 18:12:12 +0000
ROA not after:            Tue 04 Mar 2025 18:17:12 +0000
asID:                     13381
IP address blocks:        200.112.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a4:9f:f9:b6:ab:7c:cc:95:4e:9d:38:94:f3:40:1f:ee:9d:84:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:12 2024 GMT
            Not After : Mar  4 18:17:12 2025 GMT
        Subject: CN=F600053E662F530F5E0D3672D4DC6FFD876838FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:0c:7c:65:20:66:a0:41:ee:1f:59:04:e6:
                    b6:ee:2c:c6:63:be:cc:04:09:af:6f:81:08:98:94:
                    ae:07:84:e3:34:f2:8a:3b:11:ae:13:2f:e0:34:08:
                    e9:b4:98:0d:27:f1:9a:21:ab:d5:27:c2:fd:2c:14:
                    12:f1:e9:c6:4b:8d:32:2f:aa:6a:4f:de:88:74:c0:
                    a8:2f:cd:69:f0:06:51:50:6e:ca:21:77:ca:6a:2a:
                    c5:05:25:7f:1f:c5:d5:50:48:d9:76:5c:b1:7f:93:
                    8a:e4:dd:be:2c:79:ef:45:79:c0:60:5b:da:b5:74:
                    33:da:f5:17:ed:01:60:5c:5a:2e:2e:4a:35:f0:73:
                    29:49:66:d3:73:76:e2:3d:69:cd:22:2b:00:5c:65:
                    c5:db:a3:09:40:cc:28:e4:12:d1:37:b7:65:35:b1:
                    9f:ce:b0:6c:9e:44:8f:57:eb:a5:e4:d4:94:be:70:
                    d4:79:33:9f:13:0a:51:ce:30:ba:19:86:a3:74:25:
                    2e:5e:3c:29:f5:ef:07:a3:65:fa:c6:6b:3d:66:22:
                    6a:1c:47:bc:d4:5f:cf:a7:c5:73:ec:be:8a:7c:95:
                    bb:4c:93:c0:b3:58:18:99:aa:9d:30:2f:ac:f5:5e:
                    6e:61:d7:a3:0e:41:6c:90:a4:35:e7:c0:7e:58:af:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:00:05:3E:66:2F:53:0F:5E:0D:36:72:D4:DC:6F:FD:87:68:38:FA
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232352e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:0d:19:6c:31:3c:00:40:f2:1f:f5:68:9e:b0:a8:7c:0b:
         47:f8:a9:ea:d8:0e:2b:63:24:68:21:84:e8:ae:21:31:5f:09:
         ed:ec:39:7d:e9:2c:97:50:f7:f6:a2:ee:ea:0d:47:9d:b5:e1:
         9e:50:3b:fe:ed:76:35:a4:c1:bb:8d:03:f1:4e:1b:7e:58:b2:
         49:e2:74:b6:c6:67:4b:b9:82:a5:09:cb:19:1e:65:a3:f5:da:
         2c:dc:d0:db:26:c2:55:9a:ea:51:d4:5a:a1:0f:70:8d:0c:b7:
         65:df:9c:af:cf:b5:09:ca:70:7c:9c:e4:91:c3:87:b9:3d:5a:
         20:1a:16:3f:9a:28:e4:1b:e3:ab:40:d0:39:2e:66:e1:17:27:
         63:1e:8a:54:d1:8c:29:0d:4b:fa:61:77:57:45:e0:98:e7:d3:
         00:00:4e:49:53:e8:e7:c7:5a:c0:2b:5f:5b:59:6a:11:08:f6:
         3c:e7:c3:78:d6:ce:2d:67:7c:a4:f3:d3:62:1c:c6:37:f2:5d:
         42:ef:df:40:8f:d4:c4:5e:05:cd:6a:9e:84:06:cc:36:42:95:
         84:f3:13:b9:00:ea:bf:b9:a7:87:a2:cb:dc:68:d2:fa:49:76:
         25:3a:87:03:a1:06:74:70:05:87:31:1d:63:0d:75:8d:40:df:
         15:52:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:03:23 2024 by rpki-client on console-fra.rpki-client.org