Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e34382e302e302f31362d3234203d3e2036313437.roa
File:                     3230302e34382e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          hNTzee+pBOKyzXFfOwOjIEtiT9p7CBsmT6cBiy6xpLw=
Subject key identifier:   0F:EA:A9:B5:7E:51:48:AF:DB:CF:34:1C:FE:46:52:D7:37:1E:2D:BF
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       4464D5703695341A7F72D3A1E24055D67E68CC55
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e34382e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 18:20:59 +0000
ROA not before:           Tue 05 Mar 2024 18:15:59 +0000
ROA not after:            Tue 04 Mar 2025 18:20:59 +0000
asID:                     6147
IP address blocks:        200.48.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:64:d5:70:36:95:34:1a:7f:72:d3:a1:e2:40:55:d6:7e:68:cc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:59 2024 GMT
            Not After : Mar  4 18:20:59 2025 GMT
        Subject: CN=0FEAA9B57E5148AFDBCF341CFE4652D7371E2DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:0d:0e:9a:50:4e:da:4b:74:ef:a8:36:ff:
                    34:ff:dc:86:bc:b9:ad:fb:d7:6a:3f:b1:6b:5a:52:
                    71:14:c2:15:86:d8:60:72:85:f5:06:fc:ff:6e:cd:
                    10:68:ef:17:e5:c2:ad:5b:10:dd:f4:51:bc:9b:7a:
                    b2:bc:4d:a2:4d:c9:80:54:78:d3:38:f2:53:33:22:
                    e5:92:7b:b2:34:dd:ba:1a:db:c2:7b:c4:21:21:5d:
                    e5:32:30:8e:18:4e:58:81:02:d4:d7:bb:f8:f9:12:
                    46:a9:23:95:64:37:b0:f7:4e:5d:ca:0e:96:88:f3:
                    de:16:c3:dc:10:0c:2d:a4:31:c1:d8:de:b1:16:24:
                    2b:8b:c1:4e:4c:f7:fe:4c:51:4c:01:cb:50:d6:cb:
                    ff:9c:b7:2a:57:1f:a5:16:99:c3:d4:f6:a5:26:2f:
                    32:66:4b:43:fd:79:66:63:4d:2c:cc:97:f5:09:48:
                    ac:db:ee:93:66:8c:d8:29:49:e5:89:a0:2d:9f:bc:
                    12:d1:56:0c:0e:a0:0a:46:f3:47:b6:ef:1a:8a:9c:
                    3f:cb:76:62:ee:f9:a1:63:a5:cc:28:ed:8e:01:aa:
                    dd:51:78:a7:80:54:e8:fc:7a:5f:2a:a9:6e:10:bb:
                    40:c8:5e:c8:da:01:8b:d2:bf:64:21:6c:8d:16:6a:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EA:A9:B5:7E:51:48:AF:DB:CF:34:1C:FE:46:52:D7:37:1E:2D:BF
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e34382e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:de:06:04:8f:75:f9:4f:ec:89:6e:71:19:e5:68:e9:8a:31:
         f7:af:59:fb:b8:df:f4:a4:03:ee:00:88:9f:1b:d3:c8:04:cc:
         0f:81:ec:ba:cf:ca:6b:fb:87:55:20:06:bf:5c:b7:d8:1d:17:
         07:83:a2:e2:6f:10:e7:d2:bb:c5:02:7a:c7:9c:ed:fa:00:74:
         3c:b5:65:b9:a4:f3:ec:19:21:92:46:ff:df:a0:70:75:db:b1:
         f7:5f:2d:21:55:d1:c7:74:ba:27:42:28:b3:f5:f1:6e:36:df:
         df:10:1d:ec:4f:55:da:3b:1e:7d:be:c1:ab:6c:e1:dc:d4:2d:
         a7:61:72:f4:c0:20:6a:d2:5c:2c:75:5c:1b:96:17:54:da:43:
         9e:8d:04:e2:47:24:89:65:ba:2c:a8:f1:9a:ed:44:f2:dc:82:
         0a:42:de:7d:01:e7:c8:96:81:d3:b4:b8:b3:4f:2b:85:8f:50:
         0c:8d:98:55:4a:96:9c:8f:62:51:17:78:95:c7:b8:9e:55:3a:
         92:2f:3f:d8:e7:23:76:45:01:6b:a1:db:1b:e8:5c:03:05:e0:
         c1:5c:c3:34:76:10:93:44:19:6c:3c:5e:35:44:40:6d:35:e7:
         cb:e9:16:35:a1:9b:36:93:08:b6:8c:0a:89:14:5e:af:e1:d8:
         07:31:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org