Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e3132312e302e302f31362d3234203d3e2036313437.roa
File:                     3230302e3132312e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          xuJqh1jhl4CyLoYEeitHkKhm+SSMH7yiXvXFG9sIcRo=
Subject key identifier:   27:8E:3D:95:8E:B7:80:80:F2:AA:B8:5E:63:C6:86:C1:09:F7:F7:11
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       49AEF82A3A203351FF699A6DF1A987C6A982B1A5
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e3132312e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 18:20:56 +0000
ROA not before:           Tue 05 Mar 2024 18:15:56 +0000
ROA not after:            Tue 04 Mar 2025 18:20:56 +0000
asID:                     6147
IP address blocks:        200.121.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ae:f8:2a:3a:20:33:51:ff:69:9a:6d:f1:a9:87:c6:a9:82:b1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:56 2024 GMT
            Not After : Mar  4 18:20:56 2025 GMT
        Subject: CN=278E3D958EB78080F2AAB85E63C686C109F7F711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:83:61:87:b4:9b:36:85:14:8f:36:4e:ff:
                    12:72:1f:cb:f6:54:5b:fc:25:c1:e6:cc:23:54:56:
                    9c:05:48:b6:de:90:72:7c:ac:b3:06:2b:46:2e:4b:
                    77:16:56:95:97:4a:69:af:e4:e3:03:7f:a6:d3:0f:
                    34:a2:6e:08:44:3c:45:37:fa:19:8b:96:0b:40:1f:
                    43:ae:18:bc:ba:85:c7:6f:2d:df:2f:fa:62:36:09:
                    f7:25:f8:b9:26:d1:66:b7:a1:0e:09:40:1f:e7:fb:
                    04:ce:76:69:26:54:76:10:44:4c:1d:10:62:19:e6:
                    03:b1:61:66:fe:e8:dd:80:67:9c:b6:aa:da:ee:91:
                    ba:e9:75:18:35:8e:d2:66:20:ff:ca:1a:5b:65:01:
                    b7:68:24:94:fa:b9:49:79:83:aa:83:3e:16:26:d8:
                    07:fa:c4:e1:77:7d:19:fd:15:e8:a5:2c:30:69:5c:
                    9b:8c:32:e5:fb:b5:7a:ec:c6:21:08:a5:87:58:fe:
                    79:48:1b:14:5e:07:6b:1b:6a:d1:41:6b:37:46:03:
                    1d:85:87:77:99:1b:be:da:14:87:dc:71:79:b7:01:
                    f1:d1:13:c3:f1:52:43:a7:5d:11:22:23:a7:a5:dd:
                    39:f8:29:29:83:f9:2e:d4:1a:08:2d:ba:e5:d8:78:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:3D:95:8E:B7:80:80:F2:AA:B8:5E:63:C6:86:C1:09:F7:F7:11
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e3132312e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.121.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:e2:cb:c5:02:d7:3b:c1:e2:62:d2:89:b2:6b:84:20:85:5d:
         56:82:a5:f1:60:ef:9b:0d:81:e3:53:25:cb:27:ab:87:f4:df:
         54:44:e4:98:e9:99:38:5b:3f:f6:21:1c:a7:5c:c5:3e:9e:c5:
         2a:ae:64:26:a3:b2:00:fe:77:59:b1:a1:da:d6:c3:6f:e4:49:
         0f:03:9d:6d:a4:80:01:6b:1b:b2:d6:35:c3:1a:77:b2:8d:5e:
         99:27:4d:f2:27:db:6a:c7:1c:84:c8:81:2c:ba:81:6c:49:00:
         d8:69:51:a0:e3:b3:ae:9f:85:e7:32:ac:cd:32:e1:f9:41:cc:
         35:70:ea:a3:d9:f1:fc:8b:d0:cd:76:67:85:33:b1:ec:d2:38:
         e2:2e:5f:d9:5a:a9:31:aa:e5:23:f2:72:1c:30:c2:62:f9:89:
         9b:61:75:13:e9:2e:f3:07:01:f5:fc:c2:a9:1c:bd:7c:f1:7e:
         65:81:e6:16:67:34:21:b2:a8:52:75:4f:e2:25:a0:71:0b:09:
         d5:80:f4:e9:e8:63:e6:e1:21:14:fa:f5:22:af:14:95:48:10:
         65:11:be:85:23:18:27:22:a3:a2:09:3f:e5:9c:29:91:dc:28:
         d7:a6:4b:ab:da:6d:a7:be:3d:28:ee:18:81:32:12:76:3f:a3:
         5b:5e:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org