Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235332e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235332e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          i3Vr+FlYvKisojbgs0ceJKX1DY9U5gH9/c4Tq/5ZhHM=
Subject key identifier:   B8:D9:ED:23:74:DF:7F:1F:A3:E1:E5:2B:D5:EC:83:61:87:DA:6F:A5
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       1A1238FD7C3AA98115A71A9BE32D5E10FB0AF1D3
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235332e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 05 Mar 2024 18:17:42 +0000
ROA not before:           Tue 05 Mar 2024 18:12:42 +0000
ROA not after:            Tue 04 Mar 2025 18:17:42 +0000
asID:                     28050
IP address blocks:        200.74.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:12:38:fd:7c:3a:a9:81:15:a7:1a:9b:e3:2d:5e:10:fb:0a:f1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Mar  5 18:12:42 2024 GMT
            Not After : Mar  4 18:17:42 2025 GMT
        Subject: CN=B8D9ED2374DF7F1FA3E1E52BD5EC836187DA6FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:e0:d2:52:54:ee:80:8c:df:aa:78:b7:c3:
                    4c:47:00:63:0c:b9:6d:2b:81:ea:33:82:86:45:49:
                    01:04:b1:d4:88:5f:c6:5f:0c:4e:86:54:46:53:e6:
                    06:bf:6f:83:a2:a4:e9:bb:6d:2d:b5:df:63:d0:14:
                    f3:e1:28:bb:9f:47:51:1b:14:0f:0f:84:dd:d0:7f:
                    a1:f7:1a:80:e6:3d:4c:b7:d2:75:dd:53:ca:60:b6:
                    99:7f:6a:06:06:76:84:56:c1:32:e6:15:31:bb:d5:
                    bc:cd:4e:fd:ec:29:f9:e3:2c:27:bb:50:d1:d9:69:
                    f1:62:6f:f7:60:4b:4f:a3:f0:f3:df:b1:22:37:a3:
                    bf:45:03:66:ea:18:93:5b:b7:83:42:b5:3e:a2:88:
                    eb:48:53:07:9f:d1:57:86:b4:69:99:eb:ab:a4:1e:
                    92:c5:60:01:ac:91:f5:46:23:a5:57:54:48:68:a8:
                    a3:2a:23:f6:5c:a4:ae:18:b7:1d:2b:3b:9d:05:30:
                    28:7c:f2:93:c1:ba:41:b8:42:3b:19:e5:3c:61:51:
                    50:a3:00:bd:0b:19:f0:b0:61:cb:55:54:be:4f:04:
                    f1:d2:aa:e5:bd:9f:d5:86:e7:d4:06:38:39:4a:9b:
                    75:d6:0f:d7:41:70:b8:61:b3:ec:11:3f:7c:93:a4:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D9:ED:23:74:DF:7F:1F:A3:E1:E5:2B:D5:EC:83:61:87:DA:6F:A5
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235332e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:59:50:ed:44:c0:a1:d9:da:d4:c8:fe:eb:51:fd:ea:95:5e:
         90:a4:96:59:f7:32:e0:e1:7d:eb:6e:84:f2:40:ea:4e:60:d7:
         a1:23:af:e6:f8:b1:b1:c4:1e:3b:7b:27:94:87:f8:df:19:78:
         b6:1d:f6:95:2f:13:51:57:7f:76:3b:d1:c8:d3:96:1f:25:7b:
         ff:e6:98:ee:5f:b6:28:49:e9:6a:36:ff:ff:42:43:ad:e8:62:
         94:00:e7:b3:a9:94:ef:5a:fc:1f:8f:f8:eb:e0:34:21:e0:dd:
         1e:bc:9b:e6:bc:ba:3b:3b:15:87:13:9f:14:56:9f:2c:d7:fc:
         46:03:45:a5:75:e3:9f:7d:aa:95:13:5c:a3:a2:68:d7:bf:2e:
         58:4d:38:98:a3:60:f4:5b:8c:a6:dc:23:2b:9c:cd:d2:ab:eb:
         83:b3:81:44:1d:c5:e8:ed:fc:46:ca:2f:54:c2:7b:4e:d3:b9:
         31:db:5f:3d:db:97:b6:32:a9:e7:ad:50:6e:c5:f3:2d:6c:85:
         51:3b:58:53:b7:77:d5:76:e7:d1:9b:d7:53:5b:37:d3:07:5c:
         28:71:5c:1f:c5:e0:eb:bc:28:28:8c:6a:6e:6b:69:42:c4:92:
         96:1b:df:63:1b:f6:e9:c3:fd:87:9c:5d:9d:fe:c7:4d:2d:a5:
         fb:1d:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org