Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235332e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3235332e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          s7/aX99vJHhDPqTBOmpxjbUksYay/qluR/q22SZdvHw=
Subject key identifier:   C9:DD:D6:1A:3B:D7:82:58:B9:4F:A7:12:85:CA:C2:CE:DF:EE:25:96
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       7DE2204636C24E26BA250DEA51D0D84ED0552DB0
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235332e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 05 Mar 2024 18:17:10 +0000
ROA not before:           Tue 05 Mar 2024 18:12:10 +0000
ROA not after:            Tue 04 Mar 2025 18:17:10 +0000
asID:                     13381
IP address blocks:        200.112.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e2:20:46:36:c2:4e:26:ba:25:0d:ea:51:d0:d8:4e:d0:55:2d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Mar  5 18:12:10 2024 GMT
            Not After : Mar  4 18:17:10 2025 GMT
        Subject: CN=C9DDD61A3BD78258B94FA71285CAC2CEDFEE2596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:21:75:54:51:64:8c:e3:60:70:ea:58:9c:
                    a8:79:f1:6d:e3:0f:2c:7c:19:c2:72:e6:a6:cf:a7:
                    f8:7e:7f:4f:75:45:d7:98:ad:7f:d4:5a:36:ce:21:
                    c6:98:3f:47:75:a7:69:38:02:7a:bb:79:4c:3b:0f:
                    5d:75:10:8f:80:18:f6:ff:c5:e1:45:d8:77:11:ef:
                    05:8b:05:3b:aa:56:52:42:9d:b6:0e:76:c1:cd:da:
                    24:1e:00:b8:92:d9:e5:56:ce:93:2a:21:9b:af:21:
                    55:da:62:13:1a:27:96:0a:6a:e2:3d:6c:32:9d:cc:
                    90:dd:c6:a4:af:a4:6d:3a:2d:cc:4c:a9:58:4e:8a:
                    2f:55:dc:2a:d6:4d:55:7b:8a:01:d6:a2:27:de:7c:
                    70:63:08:5f:43:85:a2:1f:3b:55:d3:76:68:46:7e:
                    4b:f9:b0:97:3f:26:ae:f6:63:6b:0b:14:1f:d8:82:
                    5d:ad:4a:4b:a1:e1:11:af:d6:5a:86:36:dd:c0:ad:
                    e4:5b:f2:e4:ea:6c:94:78:ad:1c:86:36:84:71:f3:
                    36:db:9b:9e:03:b4:ab:70:09:96:96:50:62:99:3f:
                    82:10:e4:d0:1f:b7:11:4e:6c:94:92:f9:75:65:33:
                    db:bb:e1:a0:b9:21:dd:d8:0d:6e:f1:69:2c:0e:40:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DD:D6:1A:3B:D7:82:58:B9:4F:A7:12:85:CA:C2:CE:DF:EE:25:96
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235332e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c5:63:24:22:0a:88:f2:0d:e8:db:4e:66:dd:d9:dd:7e:c5:
         48:49:63:b3:8f:26:ab:42:cb:ec:1f:e9:cb:10:2e:37:5a:6b:
         c8:66:e5:97:82:ea:40:10:cb:df:c4:c1:5d:7e:4a:79:a5:ae:
         39:61:52:fa:8e:f3:1f:5d:00:4d:db:02:32:c6:aa:2b:9e:33:
         6d:d7:eb:25:c6:d0:6a:cf:b5:df:b4:e9:e5:6e:48:0a:18:85:
         c5:3e:e3:60:74:5a:35:3c:93:d9:54:15:5f:02:f6:28:6d:8a:
         e3:bc:8b:00:6d:42:cd:be:9f:ec:2d:0c:8e:cb:a9:9c:7b:a6:
         19:b7:eb:f2:cd:a3:0e:a8:d1:6e:c1:4a:7b:82:50:22:5f:df:
         f3:af:9b:05:54:fb:10:a5:e6:e6:fa:2a:58:26:3a:d7:32:fe:
         d7:c5:12:d9:7f:63:4d:00:cc:be:19:bc:5b:ab:00:27:71:bf:
         8f:06:b7:9f:66:cd:24:59:82:01:81:52:61:fb:5a:7d:7f:7a:
         6b:f6:de:c8:80:b4:cf:fa:57:d2:ce:62:6e:3e:4c:cd:9e:9f:
         7d:7f:0f:31:48:d0:77:33:33:c7:6e:e4:0d:96:75:5f:4d:e5:
         80:fc:ac:e8:32:6d:8e:2f:3e:b2:da:b7:d8:65:ed:23:b7:a3:
         0b:27:25:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org