Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/3230302e32342e31322e302f32322d3234203d3e20323632323536.roa
File:                     3230302e32342e31322e302f32322d3234203d3e20323632323536.roa (raw, json)
Hash identifier:          t6RKV27trBmFNSXS6YPYV1xbJczsgWSrALd35li7Hvs=
Subject key identifier:   90:90:69:22:DA:95:85:08:39:35:5F:9E:74:54:98:EC:B3:9D:87:C1
Certificate issuer:       /CN=410286DB57C8E11037CA1FA15398D477DB32FDE9
Certificate serial:       1D11E1D9FA4794230F6B4E3DC3A73F72E44E721D
Authority key identifier: 41:02:86:DB:57:C8:E1:10:37:CA:1F:A1:53:98:D4:77:DB:32:FD:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/3230302e32342e31322e302f32322d3234203d3e20323632323536.roa
Signing time:             Tue 05 Mar 2024 17:40:50 +0000
ROA not before:           Tue 05 Mar 2024 17:35:50 +0000
ROA not after:            Tue 04 Mar 2025 17:40:50 +0000
asID:                     262256
IP address blocks:        200.24.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 14:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:11:e1:d9:fa:47:94:23:0f:6b:4e:3d:c3:a7:3f:72:e4:4e:72:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410286DB57C8E11037CA1FA15398D477DB32FDE9
        Validity
            Not Before: Mar  5 17:35:50 2024 GMT
            Not After : Mar  4 17:40:50 2025 GMT
        Subject: CN=90906922DA95850839355F9E745498ECB39D87C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:f5:ee:c9:33:8c:a7:42:1d:ae:b8:1e:07:
                    c5:6f:88:b8:e7:46:26:ec:b5:96:45:c4:66:cb:c9:
                    7e:e6:6d:c2:76:d6:66:15:a7:26:49:00:a7:6a:42:
                    46:28:61:1d:9a:ef:cb:a7:e2:96:e0:86:a8:76:53:
                    de:6f:a9:fe:e1:50:e0:e9:24:e6:e2:33:97:77:32:
                    8a:98:03:f5:38:f2:f8:a5:7d:ce:c6:4c:cc:04:99:
                    5f:38:c0:42:c0:41:d4:36:30:74:13:76:54:60:b3:
                    e9:db:b9:27:e6:b2:f5:ce:ba:9d:28:54:4f:b4:85:
                    7c:dd:b9:ce:d8:46:52:57:79:ee:76:a0:e8:01:59:
                    db:ac:01:52:58:d7:70:f5:5e:8c:90:76:db:8b:a9:
                    93:9f:d3:52:d9:7d:7f:e2:d4:99:26:72:63:84:a0:
                    fb:a0:81:c6:9e:a9:8b:dd:78:2d:97:e8:ff:a6:bc:
                    37:36:82:2d:4d:83:79:9c:cc:96:22:fe:f7:0f:51:
                    5a:1e:1c:a7:97:58:81:55:19:6e:d3:4a:5e:e0:5f:
                    a4:38:50:ab:35:14:77:41:0d:73:c3:0a:e8:fe:27:
                    7a:cb:b4:32:9f:b5:80:ed:c0:06:b3:a9:68:d5:86:
                    e3:ec:67:e0:bb:9a:d0:b2:5b:71:ab:90:23:02:1f:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:90:69:22:DA:95:85:08:39:35:5F:9E:74:54:98:EC:B3:9D:87:C1
            X509v3 Authority Key Identifier:
                keyid:41:02:86:DB:57:C8:E1:10:37:CA:1F:A1:53:98:D4:77:DB:32:FD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/3230302e32342e31322e302f32322d3234203d3e20323632323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:de:e1:f5:2c:04:20:f6:5f:7b:58:1b:a6:1c:57:08:97:a6:
         a0:17:f0:e1:ef:a0:30:bf:44:d4:17:d7:74:d7:be:d8:26:2e:
         bc:a2:e3:5d:30:70:35:82:6a:96:42:63:51:89:21:7f:34:92:
         a7:b9:8d:e6:fc:45:2d:a3:e1:57:1c:da:dc:eb:84:5e:cd:73:
         6b:f4:3d:14:4f:67:56:33:43:98:50:aa:7b:6c:7e:df:36:58:
         27:64:a9:39:42:9f:bc:3d:e4:67:46:5f:2d:31:71:2f:55:c6:
         09:19:91:35:20:96:56:74:c4:c0:24:f1:73:96:79:f3:a1:0a:
         8f:7d:93:f1:4b:ed:bb:08:bd:4b:c4:cd:f4:4c:5a:32:12:c2:
         b2:c6:30:a4:72:e7:be:99:ae:6f:74:77:e7:dc:eb:1c:6f:55:
         b5:5d:c3:29:b4:09:d5:4d:f0:ea:70:4f:84:77:89:7e:ac:f4:
         8d:58:7a:e3:b5:a1:4a:5e:39:f0:1b:30:a0:98:8c:86:cd:51:
         f3:1f:6b:81:bc:79:27:31:91:e1:65:ca:15:78:4d:bf:c6:a7:
         65:4e:05:e4:c0:7e:9a:7f:c5:23:ea:b8:02:dd:97:09:e5:ef:
         16:6e:89:17:12:6c:eb:ea:b2:d3:50:30:32:ae:b2:9f:75:bc:
         7f:1c:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 17:46:55 2024 by rpki-client on console-fra.rpki-client.org