Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232372e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3232372e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          nfTncmj6Yn/oRACbG/jwCd3OxDeAx/h10mh79bPFq1g=
Subject key identifier:   32:9C:9B:D6:EC:49:71:9F:D9:ED:F1:0A:DC:DD:C5:E5:29:70:0E:5E
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       35C30D797C1F0165B4DFAF764E7B7C06234F47EA
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232372e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:13 +0000
ROA not before:           Tue 05 Mar 2024 18:12:13 +0000
ROA not after:            Tue 04 Mar 2025 18:17:13 +0000
asID:                     13381
IP address blocks:        200.112.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c3:0d:79:7c:1f:01:65:b4:df:af:76:4e:7b:7c:06:23:4f:47:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:13 2024 GMT
            Not After : Mar  4 18:17:13 2025 GMT
        Subject: CN=329C9BD6EC49719FD9EDF10ADCDDC5E529700E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:81:ea:e4:38:c7:e8:41:16:5c:44:55:aa:
                    4c:2e:1e:73:9d:4d:4b:e1:5b:3a:15:f7:39:0d:86:
                    67:28:6e:d3:52:ad:2a:b8:8d:a6:80:53:54:d0:d3:
                    d7:45:1b:60:ab:4b:88:34:8a:0f:c4:20:ce:77:7f:
                    57:dc:b2:89:ae:dc:4f:81:19:2a:ca:36:cd:9b:84:
                    46:a7:a5:94:54:6a:01:5f:d5:13:8c:e3:50:9c:c3:
                    c1:81:ae:b7:35:61:68:68:70:49:2b:5e:55:27:34:
                    a4:c0:a9:78:4e:87:bd:eb:23:d6:b5:66:c8:98:87:
                    d9:80:38:2c:b8:49:54:2f:ca:32:6b:81:e8:e6:d8:
                    16:57:e9:5e:91:55:ab:b9:61:ac:f5:09:3b:c3:80:
                    5c:f1:52:17:79:9a:75:64:c6:0b:e6:c0:a7:bc:8b:
                    81:4c:1b:18:d0:6a:96:d4:d5:39:b3:e9:4f:ae:a2:
                    81:80:8d:b9:86:04:a2:22:b5:cf:00:4d:ce:4a:eb:
                    03:59:62:2c:eb:c8:2d:95:34:51:c7:07:79:9d:04:
                    38:be:0e:b8:78:e4:2a:d4:81:3f:ac:e8:df:29:91:
                    80:d9:bd:f6:20:0c:ba:a2:d0:49:0c:0a:37:e6:e7:
                    ca:55:8a:1c:98:4d:cf:5a:e3:5b:b2:1e:b9:0a:f8:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9C:9B:D6:EC:49:71:9F:D9:ED:F1:0A:DC:DD:C5:E5:29:70:0E:5E
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232372e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:3e:57:38:51:9a:1b:96:ed:4a:ec:75:87:bd:27:1c:20:8a:
         4c:d9:97:e3:e6:4c:8f:06:1b:3d:fc:e1:52:7d:01:75:c0:22:
         87:5d:71:d2:39:14:1b:0b:cf:ca:38:a5:19:c4:f3:eb:c2:00:
         61:ad:fa:c9:27:14:6e:8e:60:3a:19:34:81:8f:68:a7:ea:e1:
         a5:78:5a:8d:af:e9:c9:67:bb:54:99:e0:d5:e0:99:15:96:3a:
         79:7c:23:de:c9:ca:f8:a9:1f:8c:3b:d7:f2:9c:67:04:2b:98:
         c9:be:fb:6e:2e:78:c2:4a:84:e1:d0:85:ae:05:1f:6c:fe:73:
         52:34:97:b8:7b:64:92:1a:cd:db:33:29:2b:d1:45:28:ef:4a:
         cb:9e:c6:7b:b4:42:41:a0:ed:7f:d5:6d:00:cc:7c:94:2e:17:
         c1:c5:51:ec:4c:3e:56:e1:75:f5:9e:17:08:4e:d7:cf:30:61:
         0d:21:6e:5c:aa:0b:86:42:41:70:1c:39:74:9d:86:eb:56:04:
         41:ec:a2:ab:9b:23:87:8e:9d:60:e0:54:0d:bb:4a:09:d6:05:
         6b:ed:e8:2d:48:3a:9e:a8:39:f2:02:66:85:e4:12:ba:42:e2:
         97:74:0d:79:34:4e:36:ce:ea:ba:e0:06:eb:c8:cd:f7:72:c6:
         f3:c8:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org