Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3232382e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          HQqbNEZnET6aN4kRBha4eB+Bu8DD198mbBtFFGtyap0=
Subject key identifier:   F7:AD:04:66:8C:9F:13:B5:DC:E9:66:C0:CA:32:1F:2F:0F:E7:0B:AC
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       467A289B287624DB8A004E2858AE2B7B07CFE18E
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:11 +0000
ROA not before:           Tue 05 Mar 2024 18:12:11 +0000
ROA not after:            Tue 04 Mar 2025 18:17:11 +0000
asID:                     13381
IP address blocks:        200.112.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7a:28:9b:28:76:24:db:8a:00:4e:28:58:ae:2b:7b:07:cf:e1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:11 2024 GMT
            Not After : Mar  4 18:17:11 2025 GMT
        Subject: CN=F7AD04668C9F13B5DCE966C0CA321F2F0FE70BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:11:ca:04:02:8f:22:be:dc:33:0f:22:26:
                    e8:df:11:d7:73:43:28:86:f6:2e:36:eb:24:15:ae:
                    55:1c:06:a3:f1:c2:54:49:5b:ab:2d:1d:e8:8c:4b:
                    8d:66:68:80:57:7b:35:dd:ec:63:e4:29:db:5f:f2:
                    26:69:d2:b0:45:0d:70:87:28:de:c5:35:fb:28:f6:
                    81:49:dd:fb:04:11:a0:39:22:a0:2a:71:dd:c4:54:
                    aa:13:e1:62:f7:da:9a:7f:81:66:80:09:78:4f:97:
                    80:17:95:69:85:d2:65:64:54:28:1d:a9:1b:59:9d:
                    b0:95:a2:bc:30:7b:ad:59:63:c4:d6:98:99:87:da:
                    94:e8:f3:b3:96:ce:01:6e:61:c9:b7:99:08:a3:67:
                    d5:26:8b:62:c2:b0:7a:4a:55:4b:7f:93:a1:42:ee:
                    11:19:50:83:5a:9c:8d:8d:6a:5d:d5:82:38:24:02:
                    58:c2:2e:4f:75:08:01:4c:81:ca:50:57:a7:d1:73:
                    f1:3f:ac:de:2b:29:cd:39:38:5c:7b:4c:3d:c6:00:
                    43:f5:33:60:85:a2:4c:57:6d:3c:13:75:1a:19:28:
                    9f:9c:ff:14:11:f2:ea:fb:a2:dc:fd:a4:52:db:35:
                    7b:64:bd:ec:19:41:67:b2:73:d9:06:89:a9:b6:47:
                    31:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AD:04:66:8C:9F:13:B5:DC:E9:66:C0:CA:32:1F:2F:0F:E7:0B:AC
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:6e:c0:98:70:a9:43:1c:08:0c:2e:57:a4:80:8e:e2:83:fd:
         2a:fe:dc:f5:ec:fc:33:25:f8:15:55:83:07:a9:03:67:df:e9:
         4f:3b:75:08:cc:8a:27:e7:c4:d2:1b:64:6b:d5:e6:67:e5:97:
         54:2b:93:24:55:4a:20:32:ee:6e:6b:c2:1a:74:0a:f5:bd:37:
         af:06:9a:5f:6b:1d:65:ad:e2:64:ef:3c:2d:d8:7f:60:71:27:
         fb:3e:1d:c7:41:30:4a:eb:30:c7:ed:0f:99:ad:50:26:24:32:
         27:b6:38:05:5f:76:0c:18:ad:fb:44:8c:dd:0f:26:4a:60:89:
         f7:c4:24:bc:ef:8c:fc:f1:c7:da:8f:ec:63:20:4e:4a:4a:8c:
         de:d2:86:ca:93:fc:73:01:30:32:b0:b1:f1:27:eb:b0:cd:41:
         ff:8f:f0:ca:cd:64:e4:98:7d:aa:bb:0a:2e:b0:5d:4b:c7:8f:
         96:dd:6b:0d:e0:86:01:38:9f:00:c8:56:5a:16:5d:91:5d:2b:
         5b:e6:74:92:ec:63:58:7b:af:1c:d6:f8:9a:33:1e:81:42:3c:
         63:59:02:7b:bf:58:9a:a0:66:32:a8:de:d7:03:00:80:c7:cf:
         b6:9e:e4:5a:62:84:99:c9:e2:bf:42:ee:24:f6:f9:45:1e:a6:
         ce:59:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org