Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e382e302f32342d3234203d3e203138373334.roa
File:                     3230302e35372e382e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          8SMn4UEBUvNoO4KRxt338xFNcrTSGZfUh7xo1snzCYs=
Subject key identifier:   C0:D9:64:B4:FC:0C:CF:44:7A:0C:96:F4:1E:42:71:6D:A3:6D:8B:F6
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       16F9BA868E2A74202BD71372853A9E2F2DD948D7
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e382e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:39 +0000
ROA not before:           Tue 05 Mar 2024 17:45:39 +0000
ROA not after:            Tue 04 Mar 2025 17:50:39 +0000
asID:                     18734
IP address blocks:        200.57.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f9:ba:86:8e:2a:74:20:2b:d7:13:72:85:3a:9e:2f:2d:d9:48:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:39 2024 GMT
            Not After : Mar  4 17:50:39 2025 GMT
        Subject: CN=C0D964B4FC0CCF447A0C96F41E42716DA36D8BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:1e:f3:b1:e3:e5:ed:d2:dd:70:8f:3e:94:
                    91:bb:cb:51:e3:19:ec:53:62:0d:51:8f:0f:5b:a9:
                    05:2e:92:e1:d7:60:fc:0c:ff:d5:51:f2:a1:bc:21:
                    34:25:20:6a:d1:d6:2c:de:88:28:6d:50:55:ff:74:
                    59:21:54:dd:a5:4f:35:09:fc:e7:cc:bd:1d:55:22:
                    c4:a8:85:06:fc:ba:bb:f0:39:f7:9e:de:b7:af:56:
                    cb:eb:44:3c:de:f6:05:c5:d9:76:87:ca:3e:68:93:
                    66:5d:9c:cc:80:6e:ef:78:fc:ce:f7:91:28:18:9f:
                    23:18:b1:aa:a4:87:89:0a:0f:94:c7:e6:52:57:ec:
                    a4:79:84:0d:6a:e8:70:8c:a9:fa:c5:5a:1a:a5:3a:
                    23:d5:d8:2f:0a:c7:d1:8f:10:ea:9b:22:dd:92:0f:
                    27:d4:5e:1f:20:27:6f:aa:d4:dd:27:65:76:dd:48:
                    e2:15:52:d1:e6:f5:82:e0:2d:28:a1:a3:94:78:bd:
                    b5:e6:ed:58:11:0b:b0:05:93:bb:c6:de:1b:87:85:
                    35:33:5b:50:dd:e7:2c:6f:de:6b:59:53:d4:12:5e:
                    de:9c:c9:2c:8b:99:43:b1:6d:49:13:a1:34:3b:45:
                    ba:2a:c7:16:d2:14:c8:37:d1:d8:75:22:2c:cb:35:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D9:64:B4:FC:0C:CF:44:7A:0C:96:F4:1E:42:71:6D:A3:6D:8B:F6
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e382e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:a3:8c:28:84:b6:72:99:7f:0a:e1:d2:ab:52:f3:75:e7:
         05:bd:e9:c6:a8:06:b1:f1:47:57:c7:a4:32:d8:f0:a1:51:93:
         36:7a:cb:55:0e:26:46:c2:2e:84:1e:0d:bf:06:e4:4f:33:47:
         3f:d2:26:a8:41:05:f7:2e:26:4e:9c:a2:52:d6:a1:0f:ae:3d:
         ed:36:f7:10:48:9e:a6:b2:f4:bd:b0:01:e3:d1:4c:4a:6e:95:
         e1:1f:95:e2:fb:7f:09:cd:d8:15:17:46:7b:aa:2c:d4:24:b5:
         16:00:e4:f3:90:2f:c8:d7:f7:00:b7:ca:33:62:b3:d8:f0:44:
         36:8d:26:6e:2e:88:45:70:e0:98:f7:dd:de:3a:a7:10:ed:0a:
         d8:3e:39:8f:f6:4c:68:a4:25:d7:2a:96:6f:ac:80:62:05:02:
         d0:57:41:cd:86:95:82:d0:26:f2:36:af:ee:23:ea:eb:d4:c5:
         3d:fb:a3:82:50:92:5c:bb:43:b4:72:e6:89:4f:b4:06:d1:29:
         ed:bf:80:4b:1e:f7:23:64:80:aa:2f:f4:4d:6e:25:41:18:0c:
         33:5c:db:4c:a4:1a:56:85:91:62:58:7b:c1:8b:54:ec:f4:1a:
         9a:35:1b:93:86:c5:9a:ca:77:95:75:49:74:42:3a:c3:04:2f:
         ba:c1:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org