Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/3230302e3131352e3132322e302f32342d3234203d3e20323732393639.roa
File:                     3230302e3131352e3132322e302f32342d3234203d3e20323732393639.roa (raw, json)
Hash identifier:          ua7FRO0EaPvmqEUfiSatjRF26rYABYKN7qw61iCXeno=
Subject key identifier:   BD:47:CF:54:EE:92:65:F0:B8:E0:67:2E:91:29:E5:57:5A:5A:F7:16
Certificate issuer:       /CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
Certificate serial:       5769499C566D2B00E6A7C44D33DCB896D71DFD62
Authority key identifier: 4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/3230302e3131352e3132322e302f32342d3234203d3e20323732393639.roa
Signing time:             Tue 05 Mar 2024 18:14:01 +0000
ROA not before:           Tue 05 Mar 2024 18:09:01 +0000
ROA not after:            Tue 04 Mar 2025 18:14:01 +0000
asID:                     272969
IP address blocks:        200.115.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl
                          rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:69:49:9c:56:6d:2b:00:e6:a7:c4:4d:33:dc:b8:96:d7:1d:fd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
        Validity
            Not Before: Mar  5 18:09:01 2024 GMT
            Not After : Mar  4 18:14:01 2025 GMT
        Subject: CN=BD47CF54EE9265F0B8E0672E9129E5575A5AF716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:e8:9c:eb:fa:30:ce:8d:d9:5c:37:86:a7:
                    1d:4d:37:a8:fd:30:01:2b:85:67:3d:50:31:40:7b:
                    71:18:aa:07:10:12:77:55:d1:e0:56:7e:46:de:7e:
                    54:70:76:f2:d8:6f:89:2e:f6:aa:aa:5b:4a:54:08:
                    54:f3:fa:e0:0c:9a:7a:6b:0a:b5:3d:ac:08:c3:94:
                    76:7f:ac:af:b0:34:33:d8:c8:e3:73:4b:38:d2:f7:
                    94:91:65:11:68:60:d0:5e:15:30:15:bf:bc:2a:32:
                    23:ef:11:14:6f:5e:a5:7f:c9:d5:eb:e6:92:0e:c8:
                    00:4e:3b:9d:ee:51:34:55:86:44:98:91:c3:29:39:
                    42:06:16:af:da:3a:55:3f:88:30:91:13:4b:39:97:
                    12:92:bc:8e:c9:21:ef:90:ae:08:57:75:12:c6:80:
                    52:e3:a1:e4:fc:38:6f:0c:a0:60:34:d6:b8:f4:91:
                    56:41:d1:c4:52:6d:32:54:8f:4b:64:87:2a:a5:90:
                    00:ce:a3:3b:97:ee:df:77:52:e1:b7:eb:49:4e:3e:
                    0c:1f:ca:e3:ae:41:45:a1:12:c3:d9:7d:e7:73:33:
                    27:9f:d3:bd:1b:8e:84:de:1a:99:8f:2b:bd:3c:18:
                    50:c2:58:54:78:05:3f:17:55:03:e1:ab:ae:99:36:
                    bb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:47:CF:54:EE:92:65:F0:B8:E0:67:2E:91:29:E5:57:5A:5A:F7:16
            X509v3 Authority Key Identifier:
                keyid:4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/3230302e3131352e3132322e302f32342d3234203d3e20323732393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:cc:55:f8:d2:af:dd:cd:5c:5a:4a:2d:6f:41:4c:cd:52:
         b6:25:de:1e:ae:81:81:19:b2:44:ca:23:1b:58:1e:fd:2b:50:
         22:04:c7:5d:39:3b:f8:cd:c4:8c:1c:df:a7:b8:69:41:49:c3:
         07:cb:14:f7:99:cd:b9:bb:26:95:12:88:38:bd:35:31:aa:32:
         af:22:f5:8d:6f:98:6e:41:ac:36:27:97:fd:be:33:8a:d5:b5:
         4f:df:37:02:ff:2c:3e:8b:16:59:cc:65:21:80:b4:39:a6:e9:
         12:17:8c:ff:4c:85:ea:18:19:12:96:c3:c4:4e:f4:3b:6a:e5:
         3f:64:d1:0a:31:14:d5:b1:0f:1d:ff:ab:49:83:86:13:a7:cd:
         ec:fb:6c:bd:78:d2:3e:f7:12:0a:39:ec:10:8c:6d:c1:46:e7:
         4c:db:58:ed:9d:22:82:1b:26:7a:2f:25:14:10:79:7c:9a:3f:
         0b:6b:80:f4:05:9d:02:49:58:ed:26:f5:20:ef:18:64:32:fb:
         3b:c2:02:5c:54:1a:9e:dd:85:f1:b0:44:28:b1:1f:41:b9:f7:
         b7:5e:ee:19:55:a0:44:72:91:c7:a8:bb:15:bd:d7:69:11:21:
         b9:06:a8:e9:3a:2d:87:60:75:40:27:f5:76:78:d8:74:e8:b5:
         48:91:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:48 2024 by rpki-client on console-ams.rpki-client.org