Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235302e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235302e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          T6XMyWurL6lj5HRObI2ZbaeHlEoFInB1NCGCuAr80wI=
Subject key identifier:   91:B7:00:CA:11:94:4D:04:EA:45:CC:66:F9:23:66:D3:78:CF:85:06
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       6D747847EC819FEB42D6734C2A5918055129B2DE
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235302e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 05 Mar 2024 18:17:41 +0000
ROA not before:           Tue 05 Mar 2024 18:12:41 +0000
ROA not after:            Tue 04 Mar 2025 18:17:41 +0000
asID:                     28050
IP address blocks:        200.74.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:74:78:47:ec:81:9f:eb:42:d6:73:4c:2a:59:18:05:51:29:b2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Mar  5 18:12:41 2024 GMT
            Not After : Mar  4 18:17:41 2025 GMT
        Subject: CN=91B700CA11944D04EA45CC66F92366D378CF8506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:be:7e:4c:35:f6:72:99:4b:1f:60:46:76:
                    82:2e:b4:4b:35:8d:60:a1:35:4b:77:af:63:8c:03:
                    27:c1:eb:01:0f:2e:c9:68:8e:6c:89:41:a2:aa:ac:
                    13:ae:c5:b5:81:80:41:fb:24:6f:b0:92:de:00:c9:
                    19:00:14:1c:59:3d:42:13:a4:9d:c3:a6:b4:c7:5e:
                    9b:37:d7:71:a6:fd:b1:18:d7:fc:04:5a:57:bc:9d:
                    36:31:fe:f9:49:f1:b2:cf:9a:c2:84:e5:aa:29:6e:
                    07:d1:52:fd:70:ab:7d:c9:24:e0:cd:10:ae:37:eb:
                    83:82:3d:22:af:3b:9f:7a:18:99:3d:56:98:be:14:
                    4b:43:80:0f:05:94:33:9f:66:e9:94:25:c0:07:73:
                    b4:6d:07:8a:44:37:5e:4f:f4:00:7b:1c:f0:94:0c:
                    77:9c:7b:b5:e6:4e:a4:c1:f9:a2:24:2e:2f:29:7b:
                    fd:03:8e:5a:74:e7:13:d6:c1:d9:65:0f:da:b4:4e:
                    10:93:91:20:e7:e6:2a:96:1f:af:dc:76:76:6c:2a:
                    9a:4d:16:e7:bf:b6:96:51:2d:69:29:88:8d:de:4b:
                    5e:9a:8e:ba:99:da:57:35:c5:b3:8d:b1:ab:c2:e1:
                    bc:2a:4b:b7:fd:d7:ea:25:32:43:b7:f2:09:ad:d4:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B7:00:CA:11:94:4D:04:EA:45:CC:66:F9:23:66:D3:78:CF:85:06
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235302e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:38:d2:8a:9a:e6:12:73:d1:17:75:28:54:45:59:c4:ef:47:
         06:24:51:3e:cc:7d:19:7a:f6:05:01:1c:23:32:c2:9b:32:fc:
         cd:19:77:ea:df:d9:f1:62:86:28:5d:58:c2:f0:7d:14:1f:96:
         78:3a:02:e1:c4:6b:23:aa:87:e8:e0:bd:d7:c6:80:df:db:f9:
         61:fa:a5:a0:bd:b2:71:26:89:88:7f:a7:7c:f8:b2:76:45:14:
         44:6a:f4:d8:6b:c1:3a:f7:ed:9e:41:6d:5d:4e:a7:86:fc:b7:
         47:ee:7e:31:98:18:47:9a:b5:91:42:30:0b:e0:8f:cd:c1:ec:
         18:5a:6a:3e:87:79:ff:16:d9:a5:55:1f:1c:1e:5d:5c:1f:29:
         84:b6:0a:c9:88:7a:36:35:d0:12:c1:23:c1:68:01:f0:d8:38:
         aa:99:90:72:f0:6e:a5:24:04:b0:b9:1f:e0:9a:1e:03:d6:d7:
         44:40:19:87:fe:d4:4a:74:fd:c6:25:c4:8f:ae:a9:66:56:87:
         1d:43:2e:49:c5:82:b6:2f:6d:04:e9:de:84:4f:9a:6b:97:15:
         7f:ce:c2:c2:af:f1:82:88:7a:78:89:b6:9a:fe:0c:53:86:fc:
         8c:a3:d7:11:e6:2d:49:c9:df:d2:77:e2:e6:be:1f:0c:74:6d:
         ce:82:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org