Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32322d3234203d3e20323730303735.roa
File:                     3230302e31302e32382e302f32322d3234203d3e20323730303735.roa (raw, json)
Hash identifier:          QkQPrX7uif/F8/HdjykdiTQFRKsJ5H8fNPXsNMhkWO4=
Subject key identifier:   D4:19:5C:36:0C:15:CB:81:64:7C:58:B2:5D:63:AE:5F:95:21:F9:92
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       5289DA8BD1803A1798FFF2789D1AD1A5A84B9BEF
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32322d3234203d3e20323730303735.roa
Signing time:             Tue 05 Mar 2024 17:46:55 +0000
ROA not before:           Tue 05 Mar 2024 17:41:55 +0000
ROA not after:            Tue 04 Mar 2025 17:46:55 +0000
asID:                     270075
IP address blocks:        200.10.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:89:da:8b:d1:80:3a:17:98:ff:f2:78:9d:1a:d1:a5:a8:4b:9b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Mar  5 17:41:55 2024 GMT
            Not After : Mar  4 17:46:55 2025 GMT
        Subject: CN=D4195C360C15CB81647C58B25D63AE5F9521F992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:f0:b7:05:f7:61:dc:49:49:1e:e7:48:8d:
                    7b:bf:db:69:ad:7f:b0:55:e0:9e:6e:ef:2c:cd:3b:
                    87:e1:9b:53:23:c7:39:e4:0b:f6:7e:f5:c0:4b:0d:
                    48:5e:be:7d:11:d6:30:f9:80:50:9e:0b:b7:ef:ca:
                    74:0f:2c:1a:0a:7c:49:fa:a6:87:a7:c9:e7:75:9b:
                    b0:5a:72:d5:43:24:67:3c:4b:cf:10:b7:82:e8:fe:
                    97:c0:05:32:fa:61:71:d6:37:79:a2:f7:30:32:cb:
                    c6:07:a4:74:91:5d:4c:1b:a4:d5:74:dc:66:b8:cb:
                    88:4a:21:6b:b0:e1:a9:8d:2f:52:1f:e6:cb:9c:04:
                    90:fd:98:ca:c2:cf:87:85:73:4c:65:78:13:a9:88:
                    4f:67:87:5b:56:61:49:84:d6:93:90:de:19:b1:e3:
                    5d:05:2a:64:e6:90:42:28:71:b4:ae:7d:19:8a:ab:
                    b6:51:f2:dc:e5:cd:09:31:d1:a7:93:77:f4:d9:75:
                    6d:46:0b:08:c8:bb:ad:e6:ed:2d:4d:d5:91:5a:ea:
                    cf:1f:d7:7c:86:43:1f:b1:93:70:c7:bb:9e:92:c3:
                    86:ff:77:4c:12:33:23:4e:73:70:56:ce:19:fa:04:
                    f6:f5:da:60:00:81:34:cc:91:fb:42:34:18:dc:78:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:19:5C:36:0C:15:CB:81:64:7C:58:B2:5D:63:AE:5F:95:21:F9:92
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32322d3234203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:34:c3:86:c3:48:48:23:cb:71:b1:8b:27:1c:9e:a2:c6:cf:
         52:2e:d4:65:f8:02:39:28:b0:d9:fd:46:19:50:7f:98:e9:4d:
         a9:77:09:61:cb:9f:52:ce:d0:25:bd:61:72:7f:0a:44:dc:af:
         64:fe:8d:72:9b:74:11:00:26:8a:be:99:fe:8f:29:b9:da:93:
         99:68:df:df:70:37:93:21:7f:92:88:32:b2:4c:49:77:4a:db:
         5b:d7:72:c3:26:33:33:64:c2:09:b0:8b:89:b1:cc:42:68:0d:
         61:78:dd:2d:73:9a:5d:67:d0:77:62:cd:cd:7a:fb:a5:db:f9:
         66:1c:12:1f:4c:80:63:2f:4f:bc:72:72:ac:0e:0c:23:da:d2:
         4e:2b:1f:de:53:3d:9b:60:65:59:54:f8:a8:10:b5:73:e3:0d:
         08:ce:b5:53:68:a2:67:91:84:23:34:a8:83:7b:19:c2:98:fd:
         a2:49:74:a6:72:a4:61:66:c5:21:56:2e:aa:cd:bf:98:6d:1d:
         a3:40:5d:70:38:dd:46:0d:5f:4f:69:9a:ab:f8:a2:f7:66:a9:
         fb:e5:93:6f:e5:ad:77:c0:4d:33:c6:ff:8e:91:42:b0:47:4a:
         fa:bc:8f:93:df:64:7a:99:e8:b5:95:e1:b3:47:b9:4b:9f:58:
         ec:83:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:29 2024 by rpki-client on console-ams.rpki-client.org