Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/3230302e3132342e3132362e302f32342d3234203d3e20323632323031.roa
File:                     3230302e3132342e3132362e302f32342d3234203d3e20323632323031.roa (raw, json)
Hash identifier:          b14K+S8K3WkKx2kWPflv1ieXrfNpWVy1jSWeIHgc0As=
Subject key identifier:   C4:63:F7:F8:EE:9A:56:1E:0E:C3:EA:D4:50:C2:4C:C0:42:AA:88:CE
Certificate issuer:       /CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
Certificate serial:       6B9BE093198CC87B3A51D76676CB3F0759CDCE9D
Authority key identifier: 4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/3230302e3132342e3132362e302f32342d3234203d3e20323632323031.roa
Signing time:             Tue 05 Mar 2024 18:00:36 +0000
ROA not before:           Tue 05 Mar 2024 17:55:36 +0000
ROA not after:            Tue 04 Mar 2025 18:00:36 +0000
asID:                     262201
IP address blocks:        200.124.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 09:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9b:e0:93:19:8c:c8:7b:3a:51:d7:66:76:cb:3f:07:59:cd:ce:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
        Validity
            Not Before: Mar  5 17:55:36 2024 GMT
            Not After : Mar  4 18:00:36 2025 GMT
        Subject: CN=C463F7F8EE9A561E0EC3EAD450C24CC042AA88CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:23:3f:a7:d1:1f:92:16:f9:e3:f0:a8:fd:
                    4f:90:af:5d:20:6d:62:14:a7:3d:b6:8e:21:3e:a3:
                    a0:4f:9b:7f:17:a9:20:ce:73:8a:58:b3:bc:1e:ec:
                    7e:d9:aa:23:eb:bf:50:9f:2d:9f:44:6a:20:f4:0c:
                    46:89:26:39:d4:ad:55:66:c8:7c:8d:d8:34:4a:ee:
                    3e:2e:f7:07:87:dd:ef:bb:e9:da:3f:b2:68:74:04:
                    b3:60:76:15:59:71:71:93:12:30:12:71:22:fc:5e:
                    49:0c:92:f9:f8:99:28:c0:62:6b:38:d6:d7:5f:61:
                    bd:36:13:f3:13:29:40:df:2b:84:1c:5c:a1:8a:6f:
                    e4:18:84:d3:85:0d:32:68:92:50:69:cb:52:d0:0c:
                    00:69:2b:55:81:e2:01:9a:21:2a:14:29:45:8f:38:
                    31:34:98:f1:ef:c4:3a:cf:16:8f:0a:d6:1c:d4:35:
                    38:9c:11:6e:87:4d:49:95:ff:46:24:2f:ea:45:d5:
                    e1:4b:ab:fa:de:5f:fe:67:ba:2a:8d:dd:47:90:67:
                    52:04:bd:9c:33:0d:f7:6d:99:08:d5:24:78:d9:f4:
                    67:8f:3e:44:45:fc:c8:e4:62:ad:0d:95:3d:58:39:
                    1e:89:d4:37:d8:7d:9e:73:06:f7:8c:9d:c7:2e:ed:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:63:F7:F8:EE:9A:56:1E:0E:C3:EA:D4:50:C2:4C:C0:42:AA:88:CE
            X509v3 Authority Key Identifier:
                keyid:4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/3230302e3132342e3132362e302f32342d3234203d3e20323632323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:73:06:79:99:ea:45:4e:aa:da:3b:47:3e:ed:13:6c:ba:1e:
         d8:37:11:6a:6f:b9:87:58:c8:9e:74:6c:5d:0c:25:0b:af:91:
         cd:31:61:cd:0f:2b:d9:11:83:14:21:f6:08:61:fe:63:33:4c:
         d0:16:38:55:78:8d:a3:02:23:b5:39:6a:4d:0d:7b:f4:56:43:
         c0:fb:56:0b:55:47:92:94:50:db:66:cf:12:2a:64:93:54:9a:
         3e:13:40:0d:37:9d:9b:cb:0e:a3:e0:d1:a2:4d:10:58:2c:60:
         e8:02:38:08:fc:fd:f1:1d:ec:19:b2:10:7a:5d:03:97:a1:a4:
         0a:bb:a0:e9:ac:be:fe:88:28:2c:ae:85:ee:a2:4f:5a:61:25:
         cb:65:f1:9f:8e:1d:98:45:36:e8:9c:c2:47:7c:dd:9b:82:c4:
         c5:75:7a:85:cb:95:80:8f:17:58:53:3b:cc:f7:cc:db:fa:97:
         69:bf:20:63:c6:70:15:11:80:50:c9:31:c7:b3:e1:04:e7:f4:
         8e:6e:2c:f6:5a:ce:5d:2f:a8:ea:60:41:6b:52:03:c0:d9:8d:
         78:49:10:55:70:f3:7b:7f:79:0f:43:51:fa:34:ab:5b:38:7f:
         8b:84:27:de:aa:cc:bc:ef:30:76:42:e0:cb:6e:61:d6:95:c5:
         70:d0:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:23:21 2024 by rpki-client on console-ams.rpki-client.org