Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32352e302f32342d3234203d3e203139313830.roa
File:                     3230302e3131302e32352e302f32342d3234203d3e203139313830.roa (raw, json)
Hash identifier:          ag2DPxzdG2DEOkkNAKZHLmvhDG/hG/nVIe/wwnpIusw=
Subject key identifier:   DE:07:D1:71:00:52:BD:0E:5A:AB:DE:5E:55:2A:CB:C9:C4:DA:B7:44
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       1CF3896C15B405C225A40AE0821BCC7EE935DA89
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32352e302f32342d3234203d3e203139313830.roa
Signing time:             Tue 05 Mar 2024 17:56:43 +0000
ROA not before:           Tue 05 Mar 2024 17:51:43 +0000
ROA not after:            Tue 04 Mar 2025 17:56:43 +0000
asID:                     19180
IP address blocks:        200.110.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 20:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f3:89:6c:15:b4:05:c2:25:a4:0a:e0:82:1b:cc:7e:e9:35:da:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:43 2024 GMT
            Not After : Mar  4 17:56:43 2025 GMT
        Subject: CN=DE07D1710052BD0E5AABDE5E552ACBC9C4DAB744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:98:97:34:bf:4e:9d:a8:41:49:a8:67:df:
                    82:48:64:61:da:fb:b0:a5:54:b9:7c:3e:79:43:cc:
                    2d:6b:fb:79:8f:39:d6:dc:35:43:af:fd:46:0d:f9:
                    30:81:90:98:df:94:c4:1f:fb:1f:be:66:30:fc:87:
                    53:99:92:53:cc:d1:63:f8:6d:00:23:21:01:ad:9a:
                    1a:14:8b:d2:fe:e2:13:28:ad:bc:43:9d:6b:5c:64:
                    cc:a0:bb:2c:cb:bf:a3:32:0f:27:00:3b:08:4a:1e:
                    27:28:f3:29:e9:cf:2f:d7:c2:11:5d:a9:2d:56:bd:
                    be:ea:4b:8f:f7:d4:3d:7e:41:10:5e:3d:ca:a3:d6:
                    c9:68:2c:ff:f5:69:dd:12:fd:0f:3e:5d:6d:94:9b:
                    f8:af:01:67:e8:b7:44:20:83:38:ec:6a:7f:4d:c8:
                    3a:aa:51:f7:fb:95:5b:2d:a9:6c:64:d6:8e:ea:54:
                    14:8b:bf:b5:53:7c:37:0c:6d:de:5f:42:fc:0e:5c:
                    75:60:24:dd:f0:92:80:e3:16:de:ea:f3:9f:3e:b4:
                    b5:25:3d:2f:3f:93:16:c7:29:fb:54:13:d1:bb:34:
                    9d:74:70:c0:01:5a:20:ff:fe:3f:96:1f:6f:09:a1:
                    9e:3e:a7:d4:60:5d:06:d4:12:2d:9b:56:c9:5f:04:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:07:D1:71:00:52:BD:0E:5A:AB:DE:5E:55:2A:CB:C9:C4:DA:B7:44
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e32352e302f32342d3234203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:42:e9:b6:34:94:d0:61:2a:80:fb:a5:9a:8b:cb:da:87:d9:
         2b:71:e0:6a:9e:5e:28:6c:b0:10:17:52:28:15:a3:f8:3c:bb:
         c7:00:f6:0d:bb:0c:60:9f:25:0e:6e:99:41:00:bc:6e:36:f7:
         bd:8e:40:f9:74:aa:44:7b:4d:bf:7f:00:c0:b5:41:26:d1:25:
         fc:e2:86:59:46:10:9a:51:2a:eb:31:95:5e:b9:cf:3e:8b:f2:
         a1:c1:e4:73:94:7c:bb:79:b8:e6:40:87:45:ae:79:1f:dc:0d:
         39:85:09:0c:4c:50:1f:f2:47:f7:a5:fb:f6:f8:78:5f:e2:c0:
         9c:24:73:f6:a4:bf:3a:9e:2b:bc:26:f6:53:88:09:cf:b6:46:
         e3:83:9d:e4:5d:8f:db:45:bb:22:9e:ef:ae:59:bc:45:73:5f:
         21:0e:20:30:d8:00:73:4e:44:f6:fc:ef:a8:a7:aa:26:c0:0b:
         19:e2:67:a6:16:27:f3:26:a2:50:45:25:f1:84:93:95:c6:f7:
         2e:51:52:e3:13:2e:c8:37:df:7c:0c:82:0a:69:f5:9c:e9:fd:
         01:06:be:95:18:55:c7:9b:73:94:90:ba:ce:3c:43:43:9b:91:
         74:20:8b:07:f1:c5:50:8e:4d:01:63:27:62:4a:5b:df:0a:47:
         7b:39:f9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 01:30:59 2024 by rpki-client on console-ams.rpki-client.org