Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203131353536.roa
File:                     3230302e33332e3132352e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          QK1p0jtc9g/EFbxdTdRmHFAoY4prwDg5vhhMLuzBcqs=
Subject key identifier:   9D:04:5E:DE:D4:37:D9:E3:D1:9F:12:41:22:C2:07:04:CD:A2:31:DF
Certificate issuer:       /CN=4352D0B4346D5D44265C096102BC7A3DA168ED26
Certificate serial:       7EDD0C68F1CED4AC59E8E73CA65D6396FD86BA55
Authority key identifier: 43:52:D0:B4:34:6D:5D:44:26:5C:09:61:02:BC:7A:3D:A1:68:ED:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203131353536.roa
Signing time:             Wed 20 Mar 2024 14:00:00 +0000
ROA not before:           Wed 20 Mar 2024 13:55:00 +0000
ROA not after:            Wed 19 Mar 2025 14:00:00 +0000
asID:                     11556
IP address blocks:        200.33.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:dd:0c:68:f1:ce:d4:ac:59:e8:e7:3c:a6:5d:63:96:fd:86:ba:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4352D0B4346D5D44265C096102BC7A3DA168ED26
        Validity
            Not Before: Mar 20 13:55:00 2024 GMT
            Not After : Mar 19 14:00:00 2025 GMT
        Subject: CN=9D045EDED437D9E3D19F124122C20704CDA231DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6b:c3:6b:c8:18:e6:06:27:12:ab:cb:19:52:
                    2b:32:a7:36:2e:ce:c3:32:51:d3:36:cb:32:bf:ea:
                    78:10:8a:05:1b:f1:59:08:0c:5a:04:91:54:45:3e:
                    1a:06:22:6b:d3:7c:bc:71:9f:51:26:0e:ee:3d:d6:
                    f7:0d:6d:7d:ca:94:9f:ed:66:bd:75:4b:50:fc:3a:
                    25:54:ec:83:32:a8:3d:04:23:29:2b:5f:39:d1:b3:
                    03:89:db:48:e6:cf:cb:8c:dd:52:e7:26:3c:7c:f9:
                    a1:bb:ee:b6:22:29:09:c7:ac:23:b6:66:a4:d6:a5:
                    73:56:a0:7f:65:5e:85:a0:ad:18:c7:2a:51:d8:d8:
                    01:02:ef:aa:d3:fb:33:24:8b:55:42:b2:e1:c7:be:
                    79:7d:cc:3b:a6:56:7b:03:89:f9:d7:04:02:a0:d5:
                    14:71:86:71:bd:a6:dd:12:e6:45:4e:24:be:c1:69:
                    a3:b7:dc:c0:db:fa:75:19:2e:83:30:59:e4:1a:b2:
                    fc:31:b4:a0:b8:67:ac:d2:22:6f:bb:8d:96:fb:e8:
                    34:85:73:49:08:39:54:10:e3:87:0c:96:e6:ef:46:
                    ef:df:81:03:ab:dc:a7:07:37:db:0f:92:e3:7e:8c:
                    e1:03:a4:e3:71:a4:85:cc:c6:53:5b:a5:89:a4:c3:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:04:5E:DE:D4:37:D9:E3:D1:9F:12:41:22:C2:07:04:CD:A2:31:DF
            X509v3 Authority Key Identifier:
                keyid:43:52:D0:B4:34:6D:5D:44:26:5C:09:61:02:BC:7A:3D:A1:68:ED:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:56:5f:f9:03:f9:f3:ca:3f:a5:6d:e5:eb:dc:8a:21:ec:
         fd:69:7e:f1:de:0e:0d:cf:38:f5:41:ee:f1:ac:df:f0:6c:8f:
         d8:c6:1f:8c:fe:a7:2a:4f:94:7d:00:f6:dd:83:23:ee:2b:50:
         5b:ff:b2:a6:0d:e8:10:23:8e:61:47:22:47:0e:5c:67:25:12:
         00:b1:75:2f:f3:30:c9:c0:66:ba:bf:6c:07:8a:e3:a5:ce:b6:
         08:37:54:cd:39:12:51:e4:24:81:8c:94:a4:92:53:cb:f1:84:
         ee:e1:d4:08:06:b1:1a:f1:84:45:56:09:12:0b:18:7b:93:89:
         67:a6:bd:b3:4b:99:03:74:fd:d6:be:29:54:c7:c4:f3:77:df:
         65:03:81:ed:e3:84:c2:6a:b1:c1:ee:3d:47:03:38:01:6f:06:
         90:33:d8:cf:4f:bd:b7:ca:ea:87:45:bf:e5:8d:2f:8d:61:7d:
         af:8c:ea:2f:46:ad:32:d5:31:c2:7b:19:43:91:9c:c4:4b:99:
         13:1e:be:f1:6a:e4:c9:35:6d:eb:24:4a:18:da:56:b4:4f:cf:
         68:89:b2:3a:72:45:0b:e2:cc:3a:7f:cc:da:b2:e7:4c:fa:2f:
         40:dd:0f:72:85:86:8b:a7:8a:27:d6:4d:37:a0:bd:f5:d2:82:
         14:8b:ed:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org