Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32322d3234203d3e203631343832.roa
File:                     3230302e3132362e35322e302f32322d3234203d3e203631343832.roa (raw, json)
Hash identifier:          96CPox5UtschQSSF1dFQlAQSmtfrO9uh2yYBabvlaf8=
Subject key identifier:   F7:22:4F:63:D1:19:8C:4C:C1:6C:9A:5F:A4:22:AB:A6:C5:00:40:64
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       6E70A83449D3B33DFDD37E1B05EDDD679A8A0502
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32322d3234203d3e203631343832.roa
Signing time:             Fri 26 Jul 2024 16:30:00 +0000
ROA not before:           Fri 26 Jul 2024 16:25:00 +0000
ROA not after:            Fri 25 Jul 2025 16:30:00 +0000
asID:                     61482
IP address blocks:        200.126.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:70:a8:34:49:d3:b3:3d:fd:d3:7e:1b:05:ed:dd:67:9a:8a:05:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: Jul 26 16:25:00 2024 GMT
            Not After : Jul 25 16:30:00 2025 GMT
        Subject: CN=F7224F63D1198C4CC16C9A5FA422ABA6C5004064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:26:c3:45:73:a8:03:fb:1f:f9:ba:63:6b:
                    f3:98:5b:54:8e:e5:e4:ad:9e:55:56:0d:86:58:83:
                    21:28:d7:71:60:b0:15:6c:17:c1:62:89:e0:5f:3d:
                    72:24:5c:30:dc:fa:10:3d:18:dc:0d:4c:37:41:8f:
                    23:b2:4b:0c:21:78:66:f7:6f:83:7f:93:83:9e:c4:
                    89:5a:b4:5a:a1:29:a6:d2:47:9c:82:30:03:bc:7e:
                    74:b9:ef:89:c5:ac:bf:71:45:66:6c:5c:85:f9:e6:
                    d4:8c:7d:eb:fd:99:03:0c:b6:16:7a:43:2a:15:30:
                    1b:97:2c:9f:bf:4b:18:35:82:c1:82:3b:b1:a8:f9:
                    4c:cd:93:61:35:67:50:31:36:44:3b:7e:ff:c4:51:
                    8f:4f:14:dc:8a:b9:7d:a4:73:e3:ee:6e:a8:7a:ab:
                    27:83:f3:c9:95:75:bd:c1:2a:b1:91:5c:b5:36:ab:
                    76:ac:35:5f:3e:95:e3:2a:4f:48:44:6d:bb:34:d6:
                    e0:10:65:7a:b9:3a:a5:72:c3:7b:62:d8:8e:d5:be:
                    6c:de:76:50:69:0d:c0:d7:e7:b8:a9:90:70:38:b8:
                    be:45:b6:b4:9b:7d:19:5a:b1:9f:80:c2:1d:2f:e7:
                    a3:e4:98:25:d5:e9:00:9b:8b:65:d2:1f:c8:a1:56:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:22:4F:63:D1:19:8C:4C:C1:6C:9A:5F:A4:22:AB:A6:C5:00:40:64
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32322d3234203d3e203631343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:be:16:e6:02:31:3c:18:d6:f7:61:71:c2:30:4e:1e:31:65:
         73:b8:f4:4c:f4:71:1c:b1:73:12:33:65:41:42:04:8b:ee:a5:
         e8:49:a6:f9:d1:ab:0e:06:60:93:b3:88:be:8a:49:15:37:0c:
         24:11:4d:5f:e0:38:83:6e:43:55:40:39:5c:3d:19:32:10:cb:
         d4:b3:77:c1:e6:36:a7:3d:6a:7b:fc:86:a0:f7:8f:d0:00:2d:
         d2:cf:e9:0e:a2:f2:ef:4d:b2:00:1b:b9:18:03:33:23:f2:fe:
         14:25:6e:b3:21:13:db:f4:47:4d:a6:37:3b:d3:8f:f3:af:b9:
         dc:f3:47:26:8e:19:b8:a4:cd:17:ac:45:6b:0d:d7:72:9f:0d:
         3d:48:bf:89:25:38:b3:73:eb:e0:8a:8f:3a:74:4c:bf:f8:14:
         99:b8:9d:25:90:81:38:f2:56:27:d6:65:23:86:49:80:26:93:
         d3:f8:ec:33:d5:12:85:a5:f9:0f:ee:11:a7:98:69:4a:48:5c:
         76:fa:33:19:69:56:32:92:bd:6a:82:42:46:8d:2a:d2:6a:e5:
         4e:d1:27:2f:45:39:2b:a3:ee:58:73:4c:12:61:63:88:a9:0c:
         92:3d:45:58:2b:4a:f4:4f:f1:56:86:b6:f1:36:a9:bb:fc:10:
         35:9e:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org