Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233302e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233302e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          Sfr+7Mc/Hf53Q+sw9N11Fud9PjuGkronbTRFghET1Aw=
Subject key identifier:   BB:5A:09:28:31:3A:72:E5:B5:C7:58:A4:E0:58:DF:51:1E:15:FA:31
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       136DE5DABF0B79AE8B0D29858D49C1424741FADE
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233302e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:18 +0000
ROA not before:           Tue 05 Mar 2024 18:12:18 +0000
ROA not after:            Tue 04 Mar 2025 18:17:18 +0000
asID:                     13381
IP address blocks:        200.112.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6d:e5:da:bf:0b:79:ae:8b:0d:29:85:8d:49:c1:42:47:41:fa:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:18 2024 GMT
            Not After : Mar  4 18:17:18 2025 GMT
        Subject: CN=BB5A0928313A72E5B5C758A4E058DF511E15FA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:e2:4f:65:bb:2d:5e:40:b7:4a:a1:cc:e7:
                    a9:f1:93:3b:06:f8:a5:aa:fc:46:27:0a:fe:bb:7b:
                    6d:1b:c2:14:40:73:5b:a3:f7:a9:ff:d1:7d:6e:7a:
                    93:7c:ca:7a:25:3d:8c:87:7c:08:fb:05:49:dd:be:
                    db:fb:8e:23:03:31:f0:42:12:45:80:9d:a8:f4:7f:
                    0b:73:e3:c3:d7:3f:69:0e:45:cd:a4:e9:7c:c4:81:
                    08:3b:ff:0a:16:5a:95:cc:18:8b:f0:ea:b5:8e:62:
                    65:b7:c5:5f:54:4e:95:a1:1e:f5:2c:a7:fc:09:37:
                    66:73:c3:9e:b7:5c:6e:eb:25:fb:bd:d8:e6:72:90:
                    f2:06:c0:5b:5b:ae:d5:65:0e:ac:17:99:80:85:02:
                    5e:01:92:b4:c3:89:eb:61:fc:37:cf:de:33:ff:05:
                    16:4c:dc:9c:ab:7e:2c:83:28:b6:de:c7:c6:29:83:
                    68:d4:ab:2a:e1:d1:07:8e:03:f6:18:e7:ff:02:d1:
                    fa:63:5b:09:98:c1:bb:be:0a:06:e3:8f:07:16:1c:
                    80:7d:4d:c9:4f:f5:4a:97:ad:61:3f:94:2c:45:3a:
                    81:79:f0:a4:74:83:97:74:3e:97:87:43:3b:88:a0:
                    de:95:e2:e8:88:c6:79:ab:4d:49:56:d5:8f:68:6c:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5A:09:28:31:3A:72:E5:B5:C7:58:A4:E0:58:DF:51:1E:15:FA:31
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233302e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d6:de:c6:1c:25:86:34:26:48:dd:fc:11:d1:d4:23:bf:c5:
         ba:ac:8d:ab:a8:30:ee:5c:95:0e:d1:65:b4:68:9d:3f:e7:69:
         3a:22:7c:3a:0a:b2:c9:86:fe:a9:4d:1a:b3:0e:ae:17:34:bb:
         30:b5:c2:4c:62:72:b4:fc:4d:25:fc:0d:82:d5:12:bd:1f:d5:
         48:37:0c:50:9f:54:6a:63:e5:43:b5:1c:ea:55:ae:f9:e6:55:
         4b:12:66:e2:27:59:b8:1f:45:05:14:d4:b1:3a:a3:95:77:8a:
         f1:92:be:a0:97:f2:e4:ac:50:cb:e0:fa:73:c6:25:54:33:19:
         11:b4:6a:17:a7:92:78:df:37:b9:0f:af:bb:7c:4e:bd:fc:bf:
         86:2b:ce:9f:87:15:19:09:75:fb:7b:e9:bb:0b:85:ff:bc:43:
         b4:f3:79:19:48:3e:15:6d:6a:e7:1d:98:00:56:96:6a:27:82:
         af:1c:ec:d9:b7:6f:f6:4f:c4:00:0d:70:79:e2:38:89:1b:f7:
         ba:f3:56:a1:8e:e5:cb:1a:d7:18:03:d9:0f:fe:59:cf:d2:6b:
         ff:4d:40:56:b4:73:12:ac:ea:4c:e7:92:31:47:9c:c6:ba:40:
         90:08:dd:34:f5:49:fe:c1:87:63:84:16:bb:88:97:52:4e:69:
         d0:66:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:18:25 2024 by rpki-client on console-ams.rpki-client.org