Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31302e302f32342d3234203d3e203138373334.roa
File:                     3230302e35372e31302e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          e+HrTVTFU3bx1cmk81avOlAJdTqJVxm8cSWx4V8DPHA=
Subject key identifier:   42:44:C3:8D:55:4F:B4:22:71:CB:83:3C:02:DE:18:92:7B:6D:0C:EE
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       4F0FD3645C1EAD85283A0249F6F814E80445765C
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31302e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:36 +0000
ROA not before:           Tue 05 Mar 2024 17:45:36 +0000
ROA not after:            Tue 04 Mar 2025 17:50:36 +0000
asID:                     18734
IP address blocks:        200.57.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0f:d3:64:5c:1e:ad:85:28:3a:02:49:f6:f8:14:e8:04:45:76:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:36 2024 GMT
            Not After : Mar  4 17:50:36 2025 GMT
        Subject: CN=4244C38D554FB42271CB833C02DE18927B6D0CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:be:5a:b3:7e:f8:9a:30:35:f7:81:af:d5:
                    fb:ff:a8:2a:e1:c1:f0:5d:3f:a1:a6:80:0e:e8:94:
                    8d:9f:9c:85:02:25:91:0f:1c:15:63:c5:e4:f2:4e:
                    c5:2d:f4:f0:98:c1:fc:8b:43:7c:49:1d:a4:b2:e1:
                    8d:61:0a:81:35:ee:5e:12:4d:75:f4:33:00:f7:a4:
                    32:1e:31:b5:d6:81:15:40:47:5a:4d:db:3c:c7:10:
                    6c:b5:1e:8f:83:cc:b0:0f:4b:59:92:1a:7b:18:08:
                    af:b0:0b:b6:58:24:b2:5d:d8:f5:50:b6:b3:7e:88:
                    e2:e2:a9:16:c0:9b:88:16:c7:17:6c:9e:fc:50:89:
                    68:fa:e2:8f:88:68:e7:a7:77:30:41:c4:f9:4f:21:
                    3f:96:80:4c:03:9d:16:39:07:5c:f3:ac:d0:99:d8:
                    48:3f:8a:7d:c6:90:cd:00:ed:ed:9b:5e:e9:77:8d:
                    a1:78:a0:38:91:64:ab:03:98:f3:f6:13:ca:2b:bf:
                    3a:31:5d:d5:b9:dc:6a:c9:63:ff:5b:20:18:47:71:
                    46:c1:6c:07:41:99:ba:d0:f7:a8:c4:35:a7:20:c2:
                    bb:fe:4a:23:0e:74:9d:92:5c:8e:ed:6a:98:12:cf:
                    64:7e:78:d8:f1:10:b2:31:9b:f3:60:c1:01:ff:d1:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:44:C3:8D:55:4F:B4:22:71:CB:83:3C:02:DE:18:92:7B:6D:0C:EE
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31302e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f4:59:51:e4:16:a9:c1:5e:3a:e4:55:34:f6:6a:00:a6:70:
         4c:d7:77:75:e0:39:a2:3e:2b:02:c1:99:11:8d:c0:78:ee:47:
         e8:8d:5d:9a:aa:b0:35:16:16:24:d2:db:b8:1c:de:70:78:b5:
         08:20:d7:bf:ea:0b:0b:9f:e5:b5:ab:8e:8c:e9:95:04:01:44:
         a4:27:1e:ec:a4:27:98:3e:4c:1e:49:e8:90:a6:f3:b8:74:cc:
         bb:c9:5b:07:ec:13:bb:8f:53:e3:bf:84:7c:5d:6b:fe:6e:98:
         96:59:d2:57:7b:f2:ba:a9:e8:4f:a5:cb:6f:5d:ec:58:5e:0e:
         89:b2:cf:4d:7f:ae:a5:1f:ee:b2:bd:05:68:8e:26:44:c6:f0:
         43:8c:5d:92:c0:99:18:4e:a1:b1:23:91:6e:55:e3:97:fc:af:
         8e:cf:87:87:1a:b2:2d:29:46:5c:fb:d4:83:4c:89:2f:a2:34:
         85:6a:c6:e6:e6:be:ab:68:07:c9:2a:68:d2:f6:b4:7d:e2:15:
         f9:d3:0b:5b:2d:92:d1:87:4d:9c:ca:0f:58:64:05:f3:06:f9:
         a4:cb:b6:13:10:c3:69:40:aa:12:dd:2d:89:fc:e3:08:13:fd:
         2a:4d:d9:b8:4a:78:f1:c6:16:50:14:f5:76:c9:b4:47:74:82:
         e1:52:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org