Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32342d3234203d3e203631343832.roa
File:                     3230302e3132362e35322e302f32342d3234203d3e203631343832.roa (raw, json)
Hash identifier:          lqcis/5Pb+IEZw2f3LAwNtzLcqwYRIF2QxC5KTL1AxQ=
Subject key identifier:   29:A9:D0:66:A8:57:CB:2B:1F:CC:B9:C5:72:37:36:A5:85:D8:E7:00
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       275B93EAAAB12D635578014F663FEE56452C9065
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32342d3234203d3e203631343832.roa
Signing time:             Thu 25 Jul 2024 16:50:00 +0000
ROA not before:           Thu 25 Jul 2024 16:45:00 +0000
ROA not after:            Thu 24 Jul 2025 16:50:00 +0000
asID:                     61482
IP address blocks:        200.126.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5b:93:ea:aa:b1:2d:63:55:78:01:4f:66:3f:ee:56:45:2c:90:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: Jul 25 16:45:00 2024 GMT
            Not After : Jul 24 16:50:00 2025 GMT
        Subject: CN=29A9D066A857CB2B1FCCB9C5723736A585D8E700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:29:73:52:cb:43:f3:22:3b:83:cc:fe:86:
                    da:99:cb:be:9d:50:6b:d7:29:16:a2:19:f1:a4:83:
                    85:4a:c8:7c:f8:42:c4:7d:40:39:63:5f:d2:ea:99:
                    9d:86:bc:95:ea:df:a0:b9:26:e4:dc:ba:cf:16:ee:
                    7a:9b:3e:4d:7a:fd:2a:ea:ed:f5:ca:f4:3e:4a:01:
                    d6:c0:df:96:00:0e:d2:98:21:4f:c4:da:d2:8c:45:
                    e6:b6:bb:6e:ba:5f:75:6e:a4:dd:33:9e:1b:0e:8c:
                    86:cc:51:dd:25:1e:ad:56:e5:6b:62:c5:99:36:21:
                    26:ac:d0:5f:20:98:1f:ec:34:38:b3:cd:d1:71:b7:
                    f9:5f:40:9d:4a:8e:3d:2f:82:89:f9:c3:8b:b7:52:
                    5d:59:4e:9d:35:c7:06:2d:db:71:62:5a:39:5b:cd:
                    f2:11:bb:2d:9b:8f:29:41:0e:02:44:e7:af:12:f3:
                    55:48:a6:c6:5a:ec:f9:20:14:8a:55:2a:b3:e1:62:
                    79:a9:b6:8b:1e:96:9a:cb:fa:4b:0b:ad:9d:50:36:
                    71:7f:cc:a3:05:17:19:88:47:79:3c:5b:6b:7f:c3:
                    74:40:7d:49:be:0d:49:5d:7f:82:51:5d:ef:9d:f8:
                    32:07:71:84:b4:30:0a:5a:81:8f:c3:4b:f0:54:58:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A9:D0:66:A8:57:CB:2B:1F:CC:B9:C5:72:37:36:A5:85:D8:E7:00
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32342d3234203d3e203631343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:90:24:41:57:c4:3f:6e:72:c9:f7:70:c5:32:0b:5f:2c:9f:
         f5:6f:21:68:9a:cf:c5:4c:03:44:86:ac:76:02:01:8f:8a:d4:
         fe:b6:07:f2:dc:d2:54:ca:31:61:5d:32:53:08:60:d1:c4:b2:
         87:bd:cd:cc:99:ec:8b:85:09:35:85:a2:4e:67:66:55:a7:5e:
         b0:9a:19:2f:f8:77:66:43:95:da:39:86:93:b3:4f:03:28:3c:
         93:7e:b3:9b:06:7d:5e:74:b7:7b:29:b3:44:a1:0d:f7:f3:91:
         c8:58:13:db:7b:98:4d:49:9c:7b:3e:f4:02:9c:fc:8a:ac:fd:
         aa:4c:ac:6a:59:2d:54:f9:cd:8e:6a:22:18:aa:12:8c:af:c0:
         ba:a5:5d:c7:8f:15:6b:81:44:0b:c6:7f:a9:fd:44:9c:06:f1:
         b1:42:ff:f2:0c:74:23:fa:95:45:7e:fe:68:10:72:93:5b:9d:
         90:f6:48:9a:e0:77:6e:91:98:c1:7a:d7:8e:9d:e7:a2:f1:8f:
         e3:cf:9d:df:60:57:79:e5:a2:06:8b:3d:2b:08:4f:b9:73:07:
         4b:5f:77:19:f1:23:e5:a5:07:ef:e1:f8:ef:87:38:a2:24:70:
         73:18:5d:d5:b6:da:24:f7:41:b5:b1:11:e8:b7:75:54:f2:ca:
         53:7f:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org