Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233322e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233322e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          OYx7BPaPdeu5kqnoUvWQhG9UqqMx5wvM45Fv+O2MyT4=
Subject key identifier:   70:0A:AB:7E:FF:A9:B5:95:6B:91:8D:26:96:AE:BF:26:A7:BC:BF:54
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       7A9CC9D343758E12FB6ED01970CCB71C8857DE98
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233322e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:17 +0000
ROA not before:           Tue 05 Mar 2024 18:12:17 +0000
ROA not after:            Tue 04 Mar 2025 18:17:17 +0000
asID:                     13381
IP address blocks:        200.112.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9c:c9:d3:43:75:8e:12:fb:6e:d0:19:70:cc:b7:1c:88:57:de:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:17 2024 GMT
            Not After : Mar  4 18:17:17 2025 GMT
        Subject: CN=700AAB7EFFA9B5956B918D2696AEBF26A7BCBF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:8c:f7:e8:97:81:99:1b:5b:83:c4:d7:14:
                    23:a9:e9:0a:b0:f8:8c:6c:94:da:1b:c4:6a:a4:ad:
                    3a:fe:2c:9c:90:79:88:3a:0b:54:99:f6:04:78:16:
                    7e:15:4a:1c:de:0e:4d:04:44:e5:66:f8:bf:9a:3a:
                    59:25:db:87:68:fa:a1:03:2f:76:84:33:13:c8:f9:
                    a5:d9:4e:1a:59:3a:f4:49:a7:51:5b:b1:4c:ba:9a:
                    33:f8:98:e8:8e:d1:ce:7a:3d:3a:a7:21:f6:3e:11:
                    29:3b:45:63:a3:23:66:94:9e:62:bd:36:bf:76:6c:
                    d6:dc:c1:85:5d:e6:7b:65:eb:d1:9e:6f:2c:7d:57:
                    0f:04:b5:78:40:43:54:31:7a:ca:49:45:b7:e5:4e:
                    fd:b3:78:d9:13:cd:aa:66:94:c2:74:ea:33:37:50:
                    b8:84:6e:4e:ff:67:7e:c8:35:04:97:a6:82:51:85:
                    f4:26:88:06:97:e1:68:e8:b0:4e:8d:d2:ab:b9:92:
                    f2:65:63:b9:a4:dc:2d:a1:be:66:be:b3:47:1b:0a:
                    f0:b2:fc:aa:0c:29:a3:27:cb:43:8c:ac:f5:4e:ae:
                    54:22:c9:f5:af:50:b1:79:3c:89:2b:ee:87:34:ef:
                    75:ed:34:72:71:3e:a6:35:16:dd:06:ec:b4:dc:68:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0A:AB:7E:FF:A9:B5:95:6B:91:8D:26:96:AE:BF:26:A7:BC:BF:54
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233322e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:5c:e8:15:8f:5c:b5:24:b4:84:e5:30:dc:7f:7f:9f:d5:db:
         dc:fc:f8:5e:a9:92:37:33:55:a7:a7:f0:78:0a:72:8b:cb:5c:
         a1:65:75:ce:2e:b5:ab:48:0f:28:d2:f2:e1:e5:cd:e1:cb:26:
         eb:a8:57:7f:bd:c6:eb:45:2b:0e:02:41:cc:6c:20:3f:10:fd:
         6b:35:c3:8f:ad:e2:bd:bd:e1:13:7e:82:2a:5c:e4:2e:79:c6:
         6d:69:c8:25:64:41:09:fa:b8:4e:9e:51:98:91:76:5e:02:b9:
         98:6a:44:89:bd:12:44:59:9f:36:69:de:da:75:2b:d1:4d:df:
         3c:c0:f9:ef:d5:f9:4d:6e:cc:07:1c:6c:59:2b:bd:e0:b7:2a:
         c3:b4:e8:81:5b:ff:73:23:14:6c:b2:14:29:bf:97:bc:58:4c:
         3a:9d:8b:a6:ea:8b:d5:e3:cf:68:66:c0:ed:0e:0d:73:11:3d:
         74:f6:41:2e:7b:95:28:78:fd:6f:47:4f:55:5f:df:02:9a:75:
         02:a9:d2:98:26:89:04:33:a8:e0:c3:9a:bc:01:ea:99:b7:06:
         66:6b:a9:43:28:76:3e:55:f1:4b:f3:e6:2e:9f:e6:cd:8e:db:
         bc:6b:bd:eb:ba:38:0d:9d:77:b5:8d:33:45:ea:8b:a5:ac:36:
         57:b4:09:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:18:25 2024 by rpki-client on console-ams.rpki-client.org