Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa
File:                     3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          6XOjIUwYTd6KuqX0iC2mUFe//LDcF+RfxwPIoAo/tfQ=
Subject key identifier:   D1:76:B7:F7:DA:14:F8:12:81:E4:1E:1A:79:72:63:46:05:AD:D4:3F
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       47FBA15F9E988905679407AB66BF073194AC0C8A
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa
Signing time:             Wed 11 Sep 2024 14:35:04 +0000
ROA not before:           Wed 11 Sep 2024 14:30:04 +0000
ROA not after:            Wed 10 Sep 2025 14:35:04 +0000
asID:                     11556
IP address blocks:        200.115.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fb:a1:5f:9e:98:89:05:67:94:07:ab:66:bf:07:31:94:ac:0c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Sep 11 14:30:04 2024 GMT
            Not After : Sep 10 14:35:04 2025 GMT
        Subject: CN=D176B7F7DA14F81281E41E1A7972634605ADD43F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:bd:5b:0c:37:18:38:3b:33:3b:7f:ce:6b:
                    73:db:02:3e:eb:f2:10:72:bc:6f:32:d0:a8:74:75:
                    36:ad:98:b7:cb:ac:65:d4:fd:5a:44:6a:8b:26:65:
                    14:4f:be:db:b3:c2:b9:5a:c1:f4:e3:92:44:e9:80:
                    05:70:de:b9:1f:b5:c9:94:9a:92:eb:9d:ef:6a:48:
                    30:b3:29:ae:34:f4:27:54:cb:df:37:38:f3:8e:27:
                    d0:9e:69:4b:eb:a3:f4:3e:90:2c:4e:e6:ab:4a:52:
                    2a:c4:4e:a5:7a:f4:6c:b8:ea:d3:e2:e1:51:a6:0c:
                    9c:af:55:4f:ec:c0:84:1f:b6:12:1d:88:0b:95:fc:
                    d8:eb:9f:ca:2b:cc:94:f7:91:44:92:2e:5d:22:57:
                    41:f7:36:5b:f5:f2:8d:3d:89:42:1e:26:22:67:b1:
                    62:44:fe:f8:34:d7:8c:01:2a:56:a0:c8:f0:c9:cb:
                    ab:21:fa:7a:54:93:c2:9f:ba:e4:1b:db:c2:66:59:
                    3f:35:2f:06:ac:2f:cf:74:24:33:a5:b7:2e:4c:72:
                    7b:58:b5:df:d2:e2:43:77:9a:07:05:63:61:26:6f:
                    98:c9:1e:df:44:36:c0:21:3e:4b:ea:c1:d3:f4:e3:
                    55:c3:7e:df:99:f6:4f:65:31:d5:2d:f7:a6:e0:03:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:76:B7:F7:DA:14:F8:12:81:E4:1E:1A:79:72:63:46:05:AD:D4:3F
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:db:31:72:16:f5:9f:a1:80:68:2a:83:2e:88:2a:08:b6:d6:
         81:04:75:ba:db:0f:5b:a9:22:bf:fd:b7:a4:47:93:04:c5:75:
         c5:0d:55:58:b1:83:67:e2:a6:a4:05:b2:d8:3e:d5:c8:d0:f2:
         c5:14:92:e9:57:1a:e4:07:3c:2f:3f:03:0e:30:a7:8f:be:66:
         b3:ba:97:8a:c9:c5:47:05:30:77:28:ce:31:a8:3b:9e:22:dd:
         29:ba:b3:2f:d6:46:7d:54:23:1d:a7:19:ef:37:4d:0b:1a:69:
         9e:e9:c9:bf:a1:8b:b2:4d:d2:b6:68:eb:0c:d3:56:ad:fd:bb:
         41:48:a5:36:5a:9c:1d:0a:26:07:92:6e:41:8a:a3:6d:9f:1d:
         ba:a9:9c:2c:3e:90:58:89:f2:12:07:f6:74:4f:d7:0c:5d:cf:
         05:99:77:51:dd:7d:05:e4:87:4b:2c:20:11:6f:90:78:35:4b:
         dd:67:48:b6:17:b1:1e:f2:94:d3:43:06:7c:9b:61:f6:20:6e:
         cc:c7:2d:fb:12:a1:e9:4a:39:6f:a6:5d:ed:40:7f:65:1f:ba:
         f4:8b:83:ac:73:08:a4:9f:20:8d:81:85:8c:ed:30:23:ca:77:
         48:e4:2e:04:94:a4:a5:a0:3f:2c:b5:60:22:84:d8:ad:8c:f4:
         1b:29:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:24 2024 by rpki-client on console-fra.rpki-client.org