Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e302e302f31392d3234203d3e203231353735.roa
File:                     3230302e3131302e302e302f31392d3234203d3e203231353735.roa (raw, json)
Hash identifier:          IA6G5QnvChE9/qeLDdRLxPOCioRJebKSdDzBZQwAWzE=
Subject key identifier:   37:D0:4D:F2:3D:EA:C4:BE:EE:0B:73:75:09:A7:E5:86:0F:E0:37:6E
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       238F0149CE2B0D0DE13BA04A961B3F1E8B601133
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e302e302f31392d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 17:56:43 +0000
ROA not before:           Tue 05 Mar 2024 17:51:43 +0000
ROA not after:            Tue 04 Mar 2025 17:56:43 +0000
asID:                     21575
IP address blocks:        200.110.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8f:01:49:ce:2b:0d:0d:e1:3b:a0:4a:96:1b:3f:1e:8b:60:11:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:43 2024 GMT
            Not After : Mar  4 17:56:43 2025 GMT
        Subject: CN=37D04DF23DEAC4BEEE0B737509A7E5860FE0376E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:5a:a0:f9:e9:f8:f7:01:be:6a:b3:c7:be:
                    de:96:f3:3a:bd:d5:2b:0f:24:19:68:a1:85:67:52:
                    3a:dd:51:0a:69:ca:83:24:97:a4:e8:e3:4c:a7:46:
                    17:bf:7c:3a:08:0b:a1:e9:55:03:8a:b2:1a:82:9b:
                    1a:b0:71:46:ca:ea:af:7f:ae:e4:7f:72:8c:a7:82:
                    85:76:d0:ac:56:8e:7b:76:d8:a9:69:a4:0c:6a:37:
                    72:8a:40:b1:d5:3a:bb:f2:25:36:d8:52:b9:23:e8:
                    73:d6:63:cc:9e:a7:d2:c3:83:be:34:20:1c:d6:66:
                    4a:f3:f5:87:a2:44:bd:55:d6:a2:63:66:e6:c9:c2:
                    9c:15:d0:e4:2d:5c:94:d7:bc:4a:1f:f1:60:8b:01:
                    86:22:ce:bf:e3:d5:12:70:4c:73:f4:7a:92:9b:5c:
                    af:9c:3f:b5:f0:71:b7:b5:c1:2f:ff:13:b3:80:57:
                    e4:f7:1e:a8:ae:8c:84:69:7a:e5:b8:b4:9c:ba:6f:
                    5c:65:e6:97:a1:c6:24:71:24:47:dd:0e:37:d0:9c:
                    71:b8:20:bb:2c:47:67:3c:84:d5:8b:c6:3a:1a:82:
                    70:e2:29:65:1a:b0:0a:45:4b:27:c3:f6:50:2b:8d:
                    16:42:ae:e6:16:28:79:70:3e:bf:c7:04:49:7e:81:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D0:4D:F2:3D:EA:C4:BE:EE:0B:73:75:09:A7:E5:86:0F:E0:37:6E
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e302e302f31392d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:29:e6:2b:97:83:db:5f:00:66:be:79:41:47:fe:d0:ba:13:
         26:1b:7d:da:21:8c:ef:e6:ba:63:de:21:46:7a:1f:dc:e6:ae:
         80:6b:b3:dc:ad:81:d4:da:ed:55:81:7e:52:34:67:c7:c3:3c:
         eb:d2:44:ae:95:28:10:5c:09:ae:52:d2:b1:27:8d:47:75:06:
         e8:e8:98:3b:7a:17:54:00:c6:0b:53:9f:c0:2c:55:22:40:39:
         0e:1a:0c:35:37:be:7b:11:b5:d1:fd:19:dc:de:9c:5d:29:ed:
         22:04:19:fc:c7:3b:12:78:4a:7d:17:78:b7:52:e2:ff:41:94:
         d9:9d:d6:57:0c:b1:88:5c:b4:89:95:56:16:eb:19:28:b7:c1:
         af:8d:f0:10:af:8f:e4:5e:26:6e:b1:e2:a7:d8:86:a5:c8:df:
         07:a4:d2:ae:36:ff:d1:e3:98:3c:99:67:1f:f2:89:00:7f:72:
         30:a9:29:bf:f3:88:ba:f9:c9:aa:c4:8e:ff:72:3a:ab:52:d2:
         b6:f3:16:33:40:0d:34:33:bf:9f:d7:f7:ca:6c:2d:e5:de:90:
         60:db:08:07:5e:82:1d:87:25:4b:be:15:6b:15:5b:21:79:28:
         52:01:9f:6b:f7:62:a7:93:3e:a0:dc:72:ea:0e:b5:25:1e:5c:
         b1:be:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org