Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234392e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3234392e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          XmJrlypqsMw3uZ4J6wRVLffITR5m23pcCif/+SSy7U8=
Subject key identifier:   CF:74:CB:DE:B2:AA:48:19:A9:94:D0:76:6B:22:26:83:98:A1:FF:FB
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       6CFCC1361A381FECC69FA4EE96892293A7348F50
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234392e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 05 Mar 2024 18:17:43 +0000
ROA not before:           Tue 05 Mar 2024 18:12:43 +0000
ROA not after:            Tue 04 Mar 2025 18:17:43 +0000
asID:                     28050
IP address blocks:        200.74.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fc:c1:36:1a:38:1f:ec:c6:9f:a4:ee:96:89:22:93:a7:34:8f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Mar  5 18:12:43 2024 GMT
            Not After : Mar  4 18:17:43 2025 GMT
        Subject: CN=CF74CBDEB2AA4819A994D0766B22268398A1FFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:4d:fa:0c:dc:dd:2e:ab:65:30:08:69:19:
                    17:d6:07:44:18:02:e9:a0:2f:35:70:a8:af:22:6b:
                    67:89:da:9e:38:e4:77:c2:17:77:86:82:a2:19:af:
                    06:b6:3f:ac:8b:31:3d:32:57:8b:3e:32:50:11:a3:
                    39:d5:8b:a0:37:e8:b6:04:0c:aa:a4:66:c9:e9:c9:
                    2b:4c:47:74:bb:21:a1:15:de:35:40:d7:34:36:da:
                    50:5a:08:76:2b:f4:db:52:a3:a4:be:4b:ee:1d:30:
                    80:5c:48:fd:6a:e7:ea:09:98:32:fa:a1:5e:fc:63:
                    0f:1d:b9:9c:6c:fc:5d:fa:6d:9e:ea:a7:fc:8c:32:
                    12:79:57:af:bc:ea:40:bc:f7:68:7a:d4:ce:22:c5:
                    a0:c4:35:f1:a9:4b:ed:3a:29:95:f6:46:31:e5:78:
                    10:27:6a:ca:a5:fe:e0:e3:fb:73:9a:f2:12:b7:80:
                    71:00:4c:83:18:12:93:4d:9a:c5:9d:e6:72:bd:c6:
                    e3:05:8d:e0:f8:05:e6:01:4d:a4:e7:d9:36:6c:17:
                    a7:9e:42:c1:74:39:a5:d3:e8:bd:ca:84:a6:50:1d:
                    95:56:6b:57:6c:6b:f2:22:5e:ea:d6:99:85:c4:a2:
                    25:b3:73:99:46:b7:24:06:bc:76:c0:53:f5:10:f3:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:74:CB:DE:B2:AA:48:19:A9:94:D0:76:6B:22:26:83:98:A1:FF:FB
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234392e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:ff:94:60:e1:6e:12:ef:ff:96:e4:af:e5:9a:e4:f0:64:
         ce:86:5a:d9:f2:a2:ee:12:59:5d:2a:1f:0a:76:81:bc:cd:46:
         bd:9a:c1:b8:25:7d:fa:ba:10:8a:24:b1:7e:2e:56:82:4a:d6:
         18:35:ab:71:76:de:24:de:fe:60:20:27:94:32:13:b9:9b:6b:
         42:f1:1b:86:6e:eb:9d:1e:23:7e:bf:fa:5a:7c:84:05:f6:34:
         3c:09:c5:09:33:82:bb:fb:37:b5:4f:d4:8e:74:ae:c0:83:d8:
         de:85:37:8a:c2:4d:d3:35:2d:42:2c:37:e7:72:47:3f:e1:8f:
         2a:52:28:48:ff:4d:98:22:ec:f4:60:30:bf:07:21:53:06:cf:
         9d:d5:c3:48:d5:6f:d2:f6:dd:bc:81:05:de:f5:64:9f:39:d1:
         6b:6a:41:89:96:72:b6:93:7d:06:f3:49:11:87:4a:8c:fb:b0:
         48:e8:e8:ce:a6:02:b4:1d:82:13:1d:db:3c:9e:c4:24:ce:2e:
         af:d2:03:f8:a0:0e:e3:c4:20:e0:67:2b:f3:21:e2:46:ca:f5:
         b4:91:25:0d:c3:a5:b2:f2:bc:ec:eb:88:d5:16:46:41:d6:1d:
         34:d9:67:cd:8b:63:02:e7:c9:ad:a6:34:c7:39:eb:f3:cc:bf:
         c9:47:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org