Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e332e302f32342d3234203d3e203133343430.roa
File:                     3230302e35372e332e302f32342d3234203d3e203133343430.roa (raw, json)
Hash identifier:          iKo4RFaEq28S9Cj5dUkzUOlr27NyTvc/dmE0Pkm+QrQ=
Subject key identifier:   02:09:79:F6:68:4F:02:F2:20:4A:FF:1E:F3:41:DE:47:13:BE:8E:D5
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       072884456F7A8D550A9DCFD57BFFFE7D70A42109
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e332e302f32342d3234203d3e203133343430.roa
Signing time:             Tue 05 Mar 2024 17:50:36 +0000
ROA not before:           Tue 05 Mar 2024 17:45:36 +0000
ROA not after:            Tue 04 Mar 2025 17:50:36 +0000
asID:                     13440
IP address blocks:        200.57.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:28:84:45:6f:7a:8d:55:0a:9d:cf:d5:7b:ff:fe:7d:70:a4:21:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:36 2024 GMT
            Not After : Mar  4 17:50:36 2025 GMT
        Subject: CN=020979F6684F02F2204AFF1EF341DE4713BE8ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:f0:66:23:2e:ad:27:ce:da:43:75:ae:87:
                    fb:a2:50:76:97:17:0a:21:76:cb:dc:9f:4d:70:26:
                    85:8d:9d:d9:7c:7a:ad:08:2a:07:b5:62:22:50:2a:
                    14:7b:30:3c:ac:ea:37:5a:e4:aa:ea:01:16:da:6a:
                    5f:2d:96:4c:ca:2e:35:ab:a3:cc:25:bb:32:87:83:
                    f9:5d:d2:a0:ea:b5:8d:cc:d6:c8:a1:5f:5f:60:07:
                    9a:4f:83:0c:75:c2:e3:e1:64:26:53:81:ef:74:10:
                    42:bf:c6:89:87:73:41:53:fd:b5:9d:fb:57:55:53:
                    ab:ea:66:c7:42:3a:f7:ce:79:6d:95:34:d9:f6:77:
                    cc:4f:91:5a:f4:42:66:24:7a:c3:27:09:11:54:c2:
                    80:ef:64:35:f4:e7:f0:4d:b8:1f:8d:5e:95:9e:09:
                    1c:07:68:af:51:92:ec:b7:74:5c:86:cd:74:54:88:
                    58:32:2b:f5:4e:6d:68:9e:fe:e0:43:54:0b:ee:2e:
                    a0:c7:62:4b:e5:e0:34:c0:04:7f:30:55:6a:18:27:
                    81:df:2c:12:65:98:f3:d6:8f:02:07:3f:d7:74:a5:
                    35:93:43:d2:8d:8d:0a:b4:72:02:9e:e0:11:75:40:
                    40:b3:b6:47:e6:38:62:31:9b:42:fb:a1:24:45:e2:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:09:79:F6:68:4F:02:F2:20:4A:FF:1E:F3:41:DE:47:13:BE:8E:D5
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e332e302f32342d3234203d3e203133343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:23:b3:67:f8:8c:b2:a1:79:9b:8c:e6:32:b7:60:9f:80:15:
         ca:1f:bf:66:cc:31:af:ef:01:bb:0f:86:cd:48:f0:22:52:6a:
         d6:47:99:c0:62:06:8c:11:78:47:05:c5:72:ca:21:db:aa:9e:
         15:c4:2e:7f:e8:c5:d8:48:8e:97:08:5b:fa:ba:c8:39:98:87:
         f1:14:3b:9a:77:a8:db:77:22:cb:05:bc:0d:80:7f:53:26:01:
         14:fb:31:a2:b8:50:f9:b6:73:d9:6b:43:f3:ec:10:d5:33:f2:
         17:39:17:4b:30:2a:3c:1e:e9:c9:d9:5d:0a:1c:5d:f2:1d:4e:
         07:59:33:b8:e4:46:d8:70:18:5a:5d:86:07:f0:7f:79:3c:d2:
         9c:55:9f:98:2a:e3:13:b9:87:97:7b:31:2c:4b:c8:5d:17:42:
         8b:f4:19:dd:c1:40:6b:87:41:d8:92:e4:41:51:18:ea:5a:cc:
         a5:36:7a:a1:6a:79:fb:e6:a9:30:35:85:79:24:07:78:59:14:
         c3:08:80:22:dc:33:af:1a:26:9a:53:13:8e:5f:ae:cb:06:69:
         4e:a5:1c:20:0f:34:d9:c1:40:ee:02:7d:7c:56:0f:b9:ad:80:
         de:20:34:d5:ba:7a:c2:fe:21:7c:66:ec:d2:31:eb:13:a5:9f:
         31:3f:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org