Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235322e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235322e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          ghCVkHFAPsKLaU6nF6UhAwCeHnhyaZgngXMe2pVWrDE=
Subject key identifier:   79:FA:C1:D7:47:F2:EC:51:80:39:C1:C3:AC:46:67:11:95:9C:28:46
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       03171083289161DDC7229229EFFE47187B253F19
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235322e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 05 Mar 2024 18:17:41 +0000
ROA not before:           Tue 05 Mar 2024 18:12:41 +0000
ROA not after:            Tue 04 Mar 2025 18:17:41 +0000
asID:                     28050
IP address blocks:        200.74.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:17:10:83:28:91:61:dd:c7:22:92:29:ef:fe:47:18:7b:25:3f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Mar  5 18:12:41 2024 GMT
            Not After : Mar  4 18:17:41 2025 GMT
        Subject: CN=79FAC1D747F2EC518039C1C3AC466711959C2846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:d2:f7:08:cb:ed:df:22:fd:48:ba:1f:6e:
                    30:67:bc:d6:54:a6:9b:b9:0d:f6:df:03:a7:4c:c2:
                    9e:e7:35:5c:88:b2:a8:54:25:22:fc:b1:96:8e:6c:
                    0c:76:02:65:58:9a:c6:8d:6b:4e:ac:aa:18:80:73:
                    13:7b:30:1b:86:c8:2e:3f:53:3b:9e:b7:e5:30:f7:
                    3a:25:85:01:3f:ca:62:7e:09:83:c8:0d:cb:58:13:
                    61:bb:b2:5f:e1:12:65:72:91:fa:bc:09:10:cd:e1:
                    eb:5a:6c:de:50:1a:80:5f:90:ff:85:25:3a:2f:4a:
                    96:ab:15:d9:66:05:50:89:71:62:de:05:24:df:5e:
                    22:0b:51:0c:7a:77:42:4a:56:0e:92:d4:3c:06:30:
                    30:9c:1f:25:81:2d:82:ac:10:ec:46:c9:4a:1b:3f:
                    1b:fa:18:6a:7d:b7:b3:d7:1a:2c:40:14:10:7a:6b:
                    1d:08:d7:d5:fc:a2:c0:4b:83:7c:0e:1a:d2:ab:a7:
                    5b:6b:b7:14:fa:c6:75:2e:e7:e7:8e:0a:2f:19:da:
                    33:ab:83:87:87:bf:7a:33:93:c3:82:ce:01:a0:b3:
                    f6:ca:d7:49:76:f9:bb:c1:43:cf:85:4d:6a:0d:7f:
                    27:4a:1c:1f:f5:33:f3:af:28:02:cb:08:63:0e:fa:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FA:C1:D7:47:F2:EC:51:80:39:C1:C3:AC:46:67:11:95:9C:28:46
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235322e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:14:a8:ea:52:6a:c2:a3:71:d3:e9:39:da:1a:12:0b:55:
         ef:a4:8e:63:f7:4a:bf:7e:83:27:bc:00:ca:05:3a:bc:12:1c:
         0a:53:30:3b:0d:e9:4a:e0:be:60:3d:07:cb:88:d6:fa:d2:b7:
         76:f8:8f:39:b4:c6:2f:20:9f:d0:77:1e:e3:73:ba:39:7e:9e:
         36:df:9c:37:e3:eb:a9:02:c5:4c:16:6d:ef:c8:06:53:1b:a0:
         b9:77:7e:d9:62:87:59:30:13:12:78:b2:42:04:64:1f:05:20:
         71:e3:35:50:0a:09:41:4e:f3:92:10:1f:50:4c:72:71:a1:59:
         50:d2:a2:6a:80:45:79:02:84:0b:89:6f:dc:fa:a8:54:23:ec:
         e5:1b:56:e2:fa:63:52:22:37:ab:d8:12:7d:64:2d:6a:7f:36:
         cf:2b:7c:91:52:a7:0b:5a:96:41:9a:8a:a4:62:de:da:11:17:
         cb:84:e7:14:3b:b1:57:dd:c5:9b:de:45:c8:c3:f1:0b:89:0b:
         58:75:a4:12:11:24:d8:4c:6b:52:a1:50:1c:d9:71:ad:62:c4:
         52:3e:20:65:da:ea:a3:50:bd:12:b0:8a:37:b6:b1:c9:e5:1f:
         90:4b:aa:ad:f3:5c:7c:79:d8:6e:b0:62:2d:98:f5:69:4f:dc:
         eb:d9:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org