Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e34332e302f32342d3234203d3e203237383138.roa
File:                     3230302e34372e34332e302f32342d3234203d3e203237383138.roa (raw, json)
Hash identifier:          eO4QMalbKo2JpG8v07TUQUwog7cZyBqKCpaTy+hnYjk=
Subject key identifier:   FE:36:CE:A2:D7:2A:40:9E:B6:B7:9D:1B:D0:08:21:C1:81:23:A2:6E
Certificate issuer:       /CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
Certificate serial:       288F5451FB6EAFC2E7765512B7B101685AE0DD73
Authority key identifier: 44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e34332e302f32342d3234203d3e203237383138.roa
Signing time:             Sat 27 Jul 2024 13:00:00 +0000
ROA not before:           Sat 27 Jul 2024 12:55:00 +0000
ROA not after:            Sat 26 Jul 2025 13:00:00 +0000
asID:                     27818
IP address blocks:        200.47.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8f:54:51:fb:6e:af:c2:e7:76:55:12:b7:b1:01:68:5a:e0:dd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44945F4BEB703CFE14279DF14204FA30F21DEE4C
        Validity
            Not Before: Jul 27 12:55:00 2024 GMT
            Not After : Jul 26 13:00:00 2025 GMT
        Subject: CN=FE36CEA2D72A409EB6B79D1BD00821C18123A26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:05:0f:13:a2:0e:f3:20:ad:29:d9:52:8a:
                    8d:52:43:d3:f8:01:97:09:96:c9:6b:a3:26:7f:a6:
                    cb:c2:05:ce:d8:aa:b9:b6:7a:35:35:1c:1d:8e:32:
                    2c:00:f6:bb:01:b2:28:94:11:64:cc:6e:e9:da:31:
                    83:cb:8a:05:5b:8d:69:6a:7e:4d:72:92:f6:ee:2f:
                    bd:9f:52:4b:66:35:06:3f:9c:cc:0c:2f:29:db:70:
                    82:a2:59:40:50:f0:a9:5d:eb:26:48:95:fe:dd:1a:
                    b9:91:2b:e7:98:a8:db:c2:40:0d:95:ff:20:fb:cc:
                    d6:5c:2c:de:58:16:2e:3d:2b:aa:84:0e:1b:48:aa:
                    7d:56:c0:e2:c2:b5:ab:1a:15:b8:60:52:e2:85:5d:
                    e8:88:44:07:d3:47:0e:0d:33:e5:9f:72:7e:3e:1d:
                    05:6f:e7:d4:df:ab:d8:53:0b:cc:34:f0:65:34:e5:
                    50:9c:39:c7:33:94:0e:c8:f1:e9:2e:bd:57:95:a5:
                    03:e4:bf:49:5e:07:08:e9:b5:6b:f6:30:9b:09:66:
                    0d:d3:5c:0b:94:27:eb:74:ec:53:3e:cc:30:1e:f9:
                    cf:09:da:c1:9c:48:54:39:6c:a1:ec:5a:af:8e:06:
                    96:19:8e:38:eb:52:be:3a:c3:b5:e0:0d:79:2a:3b:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:CE:A2:D7:2A:40:9E:B6:B7:9D:1B:D0:08:21:C1:81:23:A2:6E
            X509v3 Authority Key Identifier:
                keyid:44:94:5F:4B:EB:70:3C:FE:14:27:9D:F1:42:04:FA:30:F2:1D:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44945F4BEB703CFE14279DF14204FA30F21DEE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517FA0375B142313417DE6D7664FFDB91AFAB973CD1FB4D932BC3B4A788BBEB5/0/3230302e34372e34332e302f32342d3234203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ed:37:bb:b3:b0:06:15:13:8c:f6:6c:dc:e6:d9:39:7a:e5:
         6f:e4:d4:21:8c:b5:8a:2f:2d:b2:bd:80:0c:ee:09:6e:46:5c:
         85:ba:60:4d:7f:91:90:1b:7f:f5:de:44:a1:36:0a:cb:88:3c:
         fd:62:07:5f:5b:e1:62:e2:63:05:82:16:91:96:de:c2:e6:6c:
         c1:26:6a:0f:6f:ad:dc:b1:81:7a:7f:01:04:4f:7e:e8:29:08:
         4d:9b:19:a1:42:7a:7b:38:a1:72:0c:25:aa:0d:af:e8:45:e0:
         fe:1b:07:db:03:63:e3:f5:c8:6c:d8:51:26:74:99:b1:a5:07:
         05:56:66:da:96:72:cf:bf:34:ee:05:14:96:2b:ac:ca:6b:77:
         d5:72:23:db:03:c4:95:41:38:80:d8:47:3b:1f:55:fc:26:86:
         c0:5c:fb:01:29:6e:f4:a1:15:ae:2c:0e:dd:4e:d9:55:2b:f1:
         e5:51:52:bc:c1:4a:d6:27:fe:b2:a5:ca:4a:52:af:61:ff:d9:
         6c:62:c9:49:08:fd:2d:f3:49:fb:81:45:b0:fe:c8:77:28:4a:
         3c:ed:e7:26:f2:f7:86:96:00:51:5c:71:af:c1:da:da:3e:c8:
         a4:e6:63:bf:7f:f9:d1:12:97:ec:af:11:36:f2:3d:7f:3b:62:
         be:0b:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org