Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203231353735.roa
File:                     3230302e3131302e33322e302f32302d3234203d3e203231353735.roa (raw, json)
Hash identifier:          4pb+ciHyHaneVmHG42GJv+2Ca+xwGE06NgoTau0Il7g=
Subject key identifier:   39:D9:CF:85:4E:43:0C:FC:39:A0:40:0E:C4:8A:EC:2C:98:C1:BF:90
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       595E0C0F4239B712FDEF78E8729EA7A93C319C83
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 17:56:49 +0000
ROA not before:           Tue 05 Mar 2024 17:51:49 +0000
ROA not after:            Tue 04 Mar 2025 17:56:49 +0000
asID:                     21575
IP address blocks:        200.110.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5e:0c:0f:42:39:b7:12:fd:ef:78:e8:72:9e:a7:a9:3c:31:9c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:49 2024 GMT
            Not After : Mar  4 17:56:49 2025 GMT
        Subject: CN=39D9CF854E430CFC39A0400EC48AEC2C98C1BF90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:d1:f0:62:94:28:bd:0e:29:82:fb:42:9b:
                    05:32:97:3d:ff:75:94:0a:72:36:95:4b:53:22:e6:
                    30:08:08:05:82:94:08:d3:16:22:ec:40:22:2c:f4:
                    4e:69:5b:4c:c8:f4:df:b1:53:a9:47:91:a0:8d:cb:
                    d4:e8:c0:60:b6:8f:ad:a6:8b:fa:a8:8a:52:a2:43:
                    34:a2:62:60:65:cb:78:2a:a4:48:f1:52:7f:38:76:
                    8a:e4:d9:cc:38:74:8d:19:a6:fd:0b:4c:bd:8f:5e:
                    9b:e0:27:3d:61:58:f1:22:3a:fb:37:3c:c2:0b:14:
                    50:b2:c8:cb:be:9b:6d:02:5b:7d:35:16:2a:e7:82:
                    d6:8d:3c:8b:ad:26:e3:21:b6:6b:d2:9f:b2:53:f5:
                    24:3e:3f:bb:4d:9d:51:b9:03:88:0b:54:58:66:f1:
                    f7:bb:e5:78:3c:7a:e5:21:23:d3:b1:60:98:d0:7c:
                    65:a8:a3:86:fa:ef:9c:34:ca:e2:12:b6:8a:97:ba:
                    13:6b:a2:92:b6:4e:1c:a0:db:ec:59:4d:54:ba:21:
                    48:80:ac:b3:c6:54:fb:e6:0c:1e:8a:93:3b:9e:10:
                    39:ad:c0:cf:85:b5:14:e6:1c:13:63:91:84:70:40:
                    ad:c1:a3:f0:4d:6f:b6:6d:cf:f4:d9:48:67:be:42:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D9:CF:85:4E:43:0C:FC:39:A0:40:0E:C4:8A:EC:2C:98:C1:BF:90
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:1f:6d:ae:0f:e4:22:f9:a3:45:41:a2:0f:65:4e:1d:76:46:
         85:0c:46:f9:da:8d:c1:ca:45:7b:f8:f7:8f:24:a4:f4:8e:6c:
         27:ec:de:f7:23:c9:c5:15:1a:89:ac:c0:85:77:65:0e:a5:a8:
         f9:c8:05:ec:90:9a:84:e1:f0:91:72:85:5f:fd:09:94:a9:8e:
         50:b3:f0:45:5f:bb:60:06:c4:1a:8a:44:74:ab:5b:db:13:62:
         c7:39:a7:d1:2a:ea:6c:27:8b:ae:d5:47:c4:47:63:92:97:05:
         49:09:1c:17:6e:a7:4f:20:06:f4:e8:71:df:b3:d5:05:28:6b:
         f0:57:1b:5b:3e:1c:6a:23:59:82:f3:59:8b:f9:f8:fb:27:b6:
         8b:79:a0:f6:b1:95:6e:4a:c9:19:49:f5:9a:66:a3:56:6d:8b:
         33:84:95:55:d5:15:76:51:86:bd:1d:0b:aa:83:c2:f8:ca:9f:
         12:04:a5:5c:d7:0c:29:4e:17:81:fd:d8:0f:c4:a8:bd:21:6f:
         c0:3f:47:67:68:8d:23:8b:25:ab:5b:bc:d9:93:c7:38:ec:07:
         9f:60:0b:69:1e:f1:39:81:7b:df:7b:7c:3b:92:e5:31:40:e2:
         0b:6f:f5:70:40:9e:da:92:c1:b8:7d:fa:3c:3b:26:ac:4e:4a:
         1c:14:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:31 2024 by rpki-client on console-ams.rpki-client.org