Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234392e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234392e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          w/M8HYg4ZKz04iqEOnSWiW41Myku8qWMMEWJMsTlUgo=
Subject key identifier:   0C:3E:3F:5E:74:D1:13:99:A4:2D:73:6F:4F:89:26:B6:F0:D7:35:0E
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       7F33740AE469B08E3890094D333425A6A0B02527
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234392e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:14 +0000
ROA not before:           Tue 05 Mar 2024 18:12:14 +0000
ROA not after:            Tue 04 Mar 2025 18:17:14 +0000
asID:                     13381
IP address blocks:        200.112.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:33:74:0a:e4:69:b0:8e:38:90:09:4d:33:34:25:a6:a0:b0:25:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:14 2024 GMT
            Not After : Mar  4 18:17:14 2025 GMT
        Subject: CN=0C3E3F5E74D11399A42D736F4F8926B6F0D7350E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:53:52:fe:c4:a9:fd:14:f7:32:fe:58:13:
                    83:27:ae:b7:a3:c9:ad:e7:68:e9:d0:1d:4f:48:e7:
                    d5:e1:14:30:36:28:15:c5:64:0f:e2:a3:f4:ca:a6:
                    5f:02:55:f3:7b:f3:d7:e0:45:ad:4b:75:21:21:c7:
                    a0:71:cc:64:a2:80:b7:32:2b:53:a3:4f:7e:da:7b:
                    d2:44:27:e1:c7:76:d9:3f:7d:07:df:4b:ce:fa:d7:
                    a3:ed:60:86:fc:b0:bc:14:07:94:6b:89:ec:75:31:
                    15:95:93:3a:d7:ee:3e:9e:39:53:25:63:67:8e:09:
                    c6:d9:63:04:af:04:13:63:07:52:17:08:c3:6d:70:
                    20:61:38:48:06:97:82:ce:85:d7:77:b8:54:18:fc:
                    a4:58:d6:bb:e6:32:0e:d2:47:d3:7c:e8:99:4a:c6:
                    a1:84:7c:b0:ca:bc:2f:ce:f7:8f:fd:66:bc:71:0a:
                    ed:7d:b8:c1:3b:bd:d1:f0:52:d8:6e:a2:57:52:8d:
                    ac:0d:a7:a1:37:9c:22:f1:36:dc:51:c6:05:02:5f:
                    1c:2d:4b:6a:fd:28:dc:fb:84:1c:44:c1:0e:b0:9b:
                    b3:ea:9f:bb:10:4d:37:1f:7e:15:d1:e1:a3:cb:74:
                    0d:c7:7d:09:ab:a8:93:f4:0b:9b:3e:87:5c:28:37:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3E:3F:5E:74:D1:13:99:A4:2D:73:6F:4F:89:26:B6:F0:D7:35:0E
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234392e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:42:f9:44:db:2a:28:87:24:8c:76:cd:7f:4e:7e:bc:c4:da:
         ff:01:c5:a6:31:33:ea:fe:5b:8d:93:b6:c0:7c:2a:a3:4f:4b:
         af:cb:64:d0:16:46:92:90:76:92:c0:c2:70:f4:5d:ee:26:c2:
         48:41:ec:43:e9:92:5d:28:20:1d:97:93:70:66:03:6f:88:00:
         4a:14:f7:83:c9:46:8e:5c:84:2d:50:4c:38:89:03:7c:f3:89:
         cb:27:b9:04:1a:b8:d3:65:ff:ca:18:be:44:d4:1e:19:3d:be:
         1c:b3:a0:d7:70:b8:8a:86:04:51:b1:5c:47:00:3d:5f:2f:6d:
         f5:be:fd:1d:70:25:09:ef:f0:3b:5d:6e:30:5a:7d:8e:46:27:
         7f:76:e1:a1:29:78:d5:31:81:2d:c6:fd:e0:9a:3b:1e:c9:03:
         d9:97:f8:76:9c:8b:38:79:36:53:a9:b3:16:5d:df:81:5d:ee:
         8e:6a:7c:87:a6:83:a1:c7:0f:fb:16:6a:5a:ba:1d:53:6e:31:
         74:3c:de:68:2f:25:91:9e:a9:09:66:2e:d0:1d:de:67:f0:e6:
         c8:c4:ba:d6:3b:36:39:e9:cc:40:be:af:dc:09:8a:bf:fd:6e:
         fb:6c:58:ca:f4:b4:9c:23:91:7f:1c:26:24:a5:8b:5b:b0:ec:
         d7:75:33:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org