Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235352e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235352e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          aYN8H+JZzZszD2BEq+34wnWMBYQLU6J2laq0yzXl2U0=
Subject key identifier:   54:38:CF:07:F7:F0:D4:05:82:B5:E8:11:60:66:9B:8C:55:06:84:4A
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       4AD6E1939A5733382E3BB7DE4063BC2E1DD0F19A
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235352e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 05 Mar 2024 18:17:42 +0000
ROA not before:           Tue 05 Mar 2024 18:12:42 +0000
ROA not after:            Tue 04 Mar 2025 18:17:42 +0000
asID:                     28050
IP address blocks:        200.74.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d6:e1:93:9a:57:33:38:2e:3b:b7:de:40:63:bc:2e:1d:d0:f1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Mar  5 18:12:42 2024 GMT
            Not After : Mar  4 18:17:42 2025 GMT
        Subject: CN=5438CF07F7F0D40582B5E81160669B8C5506844A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:9d:3b:31:c8:d3:99:67:84:9f:11:28:ea:
                    bd:f7:e0:16:5b:c1:cc:a6:c4:20:eb:c1:e8:d7:93:
                    96:ce:53:af:55:65:8b:88:e7:12:a0:92:00:f6:c8:
                    0b:20:f9:f0:76:67:e2:a8:93:c1:9d:69:76:8a:39:
                    0f:f7:8a:e2:72:c4:3f:b0:84:48:35:34:30:d9:8d:
                    d5:65:76:9d:bb:74:fe:0f:74:91:e5:c3:81:14:fa:
                    02:2c:a8:7b:7e:8b:42:99:d8:a5:56:58:16:e5:00:
                    d2:90:a3:e9:76:65:fa:1e:9b:85:9a:fd:5c:1c:a6:
                    b5:18:d7:08:7f:cf:41:a8:2e:ed:c2:c5:45:e7:ec:
                    55:ea:84:1f:32:d6:f9:79:7e:a4:72:32:f7:e6:6a:
                    75:e3:aa:ae:15:27:b9:72:3a:8b:11:b6:39:a0:a6:
                    0d:4d:e4:68:e9:3c:2b:83:ad:38:c3:1c:ed:a3:e6:
                    d1:fc:4b:8e:78:b1:20:41:37:88:64:53:ba:ff:36:
                    63:ba:7a:54:c2:e8:44:73:e5:6b:c1:ea:1e:91:b2:
                    f2:da:39:0f:44:15:97:e8:64:25:90:15:24:2c:a2:
                    4a:b1:60:83:e0:6f:f5:d7:64:45:0e:b7:26:72:13:
                    f2:c2:b8:35:89:7c:92:25:b5:52:14:9f:b8:95:66:
                    de:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:38:CF:07:F7:F0:D4:05:82:B5:E8:11:60:66:9B:8C:55:06:84:4A
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235352e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6d:50:a9:44:7c:1a:cb:e7:27:2e:f7:1d:ca:03:9d:a6:6d:
         f7:3d:0e:b3:0d:ff:48:ce:c7:a9:43:2c:ee:5b:67:6f:62:59:
         14:6b:c4:01:5b:44:22:d1:16:3d:74:cf:7b:ed:3f:91:70:76:
         5f:0f:78:af:9f:e9:73:72:53:41:da:53:1d:eb:26:1f:ec:96:
         c5:45:af:35:07:2a:fa:87:20:3b:23:a3:0c:69:ac:04:a7:39:
         40:70:58:c0:7f:1f:a7:a4:7c:cf:a6:f4:8d:66:f4:53:7a:e2:
         1b:ed:86:a8:7c:64:31:c6:b9:df:f8:b8:06:e4:4b:30:f7:04:
         05:98:41:0a:87:51:8f:74:b2:c4:6a:19:36:d4:02:d3:3f:d3:
         4f:6a:43:b1:2b:08:2e:a6:a8:e5:23:ce:e2:da:98:19:8a:0b:
         f4:61:5c:08:c5:e1:f5:1c:5a:6c:26:f2:71:16:bd:8e:17:45:
         a9:7e:15:d7:9a:5e:b2:52:95:07:c3:79:77:65:43:98:39:4a:
         39:4c:71:99:81:ab:c9:5c:28:3a:06:0b:d7:32:eb:42:4d:10:
         f8:ea:a3:46:fe:f0:6a:85:0f:d8:ac:7e:2a:cc:b2:d5:44:75:
         a8:21:83:b5:bb:37:d9:bd:7f:e7:f2:48:3f:50:58:d0:dd:53:
         20:e2:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org