Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa
File:                     3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa (raw, json)
Hash identifier:          GMteXKvWzMvl4ajeR5WaBHfSFXFgArKdLJcM+NDdtWU=
Subject key identifier:   67:9B:6B:9F:19:9A:62:FC:30:EF:A4:31:53:65:1C:C8:96:40:6D:71
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       2A263F7988FCE6755652852D914D1B943D960E58
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:10 +0000
ROA not before:           Tue 05 Mar 2024 18:12:10 +0000
ROA not after:            Tue 04 Mar 2025 18:17:10 +0000
asID:                     13381
IP address blocks:        200.112.242.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:26:3f:79:88:fc:e6:75:56:52:85:2d:91:4d:1b:94:3d:96:0e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:10 2024 GMT
            Not After : Mar  4 18:17:10 2025 GMT
        Subject: CN=679B6B9F199A62FC30EFA43153651CC896406D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:45:8d:f9:96:90:18:cf:2a:78:23:93:32:61:
                    47:b3:1b:67:c7:39:d7:50:f2:26:0f:69:5f:6c:9f:
                    7a:10:9c:22:7b:bb:0f:04:3b:6b:2a:0f:22:81:25:
                    9e:4b:33:0d:2f:6c:93:a9:50:31:71:b9:a6:bd:cc:
                    bc:1e:76:41:c3:38:3d:6d:17:c8:c4:47:45:31:fa:
                    21:9b:77:40:35:69:8c:dd:ab:ff:9e:04:6e:ef:42:
                    44:8e:c9:4a:7a:74:17:f1:b4:d7:a6:a0:b8:3f:a1:
                    21:6f:a9:66:3f:7d:37:09:4c:d8:2a:e0:55:01:7d:
                    06:bc:04:8d:a9:09:d2:fa:6c:a1:8f:06:9d:3c:7d:
                    c5:75:e9:76:63:1b:b8:ee:13:1d:de:50:1c:f4:7a:
                    c7:24:d4:00:02:8f:e9:24:fd:8b:87:f8:c4:1f:87:
                    0c:a4:8b:67:30:8f:44:d3:e5:a3:b2:1e:20:29:b9:
                    5b:d5:29:b7:e5:3d:d4:14:64:2a:7c:7a:25:21:bd:
                    54:fd:25:3e:37:c9:fa:8c:7c:98:ea:ba:91:e4:20:
                    f5:6c:7e:2a:1c:e0:14:55:92:49:a1:6c:cc:fa:54:
                    f5:e1:5d:c5:de:e8:5f:0f:a8:9a:b1:64:87:c7:f7:
                    61:d6:17:86:d9:0f:68:dc:86:e2:c7:27:bf:62:0b:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9B:6B:9F:19:9A:62:FC:30:EF:A4:31:53:65:1C:C8:96:40:6D:71
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:da:d2:77:6e:f8:4e:2b:70:3f:1f:06:4c:09:f3:e9:db:80:
         bc:3c:22:76:97:e7:5a:30:73:1b:a6:0d:5f:69:86:11:b7:03:
         58:db:97:fb:a4:dd:d4:3c:58:a0:c7:1d:93:19:17:95:10:8d:
         a8:2b:4c:45:85:10:10:ba:47:00:7f:bb:57:c3:e9:76:d3:07:
         d0:62:02:44:c3:d3:85:68:05:ae:78:5b:0e:4a:62:30:05:bc:
         d0:ad:2d:db:44:8c:a4:fc:5d:20:41:bf:8b:4e:eb:88:9f:64:
         ff:08:e1:84:23:44:09:5d:d0:df:2f:44:73:22:a6:14:75:fd:
         b6:f3:c7:e9:82:36:49:35:43:b2:a4:da:b7:27:12:68:9b:e5:
         19:1b:b1:5f:19:65:3b:cd:14:d4:ba:d9:49:6e:9f:70:01:a8:
         c4:a5:9f:dd:b9:26:8d:14:1f:77:ed:03:24:16:e3:c5:f7:ef:
         eb:b8:b8:30:55:f8:44:01:b6:ec:b6:0c:8f:2d:98:83:2d:67:
         20:68:db:38:2c:fa:cc:04:dd:01:c5:e6:e9:2b:6b:65:9d:f8:
         3b:70:66:61:80:4a:ec:0a:9c:c1:f9:f7:93:78:f8:0b:5c:7c:
         3c:50:53:68:a2:42:7e:c4:fd:34:34:3b:55:73:71:ab:db:4d:
         04:67:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:02:08 2024 by rpki-client on console-fra.rpki-client.org