Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35362e302f32342d3234203d3e203631343832.roa
File:                     3230302e3132362e35362e302f32342d3234203d3e203631343832.roa (raw, json)
Hash identifier:          TDVrD2J/jZ45SB+or+z7qirS/0555uU3UdBRyHH9PB4=
Subject key identifier:   46:B8:6C:12:B6:F7:5F:EA:F1:E5:B8:48:B4:44:48:33:F3:06:21:70
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       48580BB514745B21B65C7EEC8CB23BC0FE23638B
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35362e302f32342d3234203d3e203631343832.roa
Signing time:             Thu 25 Jul 2024 16:55:00 +0000
ROA not before:           Thu 25 Jul 2024 16:50:00 +0000
ROA not after:            Thu 24 Jul 2025 16:55:00 +0000
asID:                     61482
IP address blocks:        200.126.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:58:0b:b5:14:74:5b:21:b6:5c:7e:ec:8c:b2:3b:c0:fe:23:63:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: Jul 25 16:50:00 2024 GMT
            Not After : Jul 24 16:55:00 2025 GMT
        Subject: CN=46B86C12B6F75FEAF1E5B848B4444833F3062170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:f7:0b:81:2a:f2:08:ba:58:fb:a0:b6:04:
                    b0:b1:55:88:f7:1d:93:60:81:b5:9c:81:c5:17:9a:
                    63:c5:82:92:16:bb:aa:f0:1c:82:79:a1:d6:62:90:
                    6b:5e:54:81:d7:23:18:68:e3:ee:8d:d4:d1:50:93:
                    a9:c6:19:5f:8d:6b:3a:36:70:22:d4:ee:8a:21:69:
                    c8:09:d2:fb:20:d3:3c:8e:01:66:94:37:67:c4:e0:
                    3f:d4:87:61:a6:9f:c8:51:c4:69:d1:a1:d3:7d:24:
                    88:7e:2b:11:d2:7c:ef:74:4e:9c:58:63:a2:e5:6a:
                    b4:44:54:3b:3a:49:cd:2e:9c:6b:78:c9:37:25:45:
                    47:ef:6e:84:3f:61:dd:8e:ea:8e:e1:98:c2:8c:93:
                    32:a2:c2:37:d1:be:bd:54:17:2a:60:00:3f:82:4e:
                    4b:c2:69:5b:9d:1a:be:df:cb:9f:3e:0f:30:f0:48:
                    54:72:19:ca:3c:a7:5f:41:3d:8d:5d:88:c0:3c:77:
                    56:4e:67:8d:28:2d:1b:54:2f:f8:e9:8c:fa:27:19:
                    80:ff:04:f5:09:cb:94:8c:4c:c8:c0:46:47:37:f5:
                    d1:5f:9d:28:ae:1b:dc:d0:fb:15:42:6a:d5:ad:70:
                    24:0f:23:7c:fb:a5:2b:e0:8c:15:e3:55:c2:ba:e4:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B8:6C:12:B6:F7:5F:EA:F1:E5:B8:48:B4:44:48:33:F3:06:21:70
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35362e302f32342d3234203d3e203631343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:fe:c5:3b:a8:7e:07:5f:39:0d:f5:ce:e9:79:d9:7b:b4:a4:
         88:30:2a:33:a8:3b:a9:79:14:b3:0f:ca:60:04:5e:05:75:73:
         d5:f5:6d:71:ef:c1:a1:06:1e:8d:23:40:48:be:7c:f9:07:be:
         c6:2f:f7:4d:a7:90:3f:9a:27:47:b9:7b:04:de:2b:3d:24:0a:
         71:2b:ca:5b:7e:ee:db:fd:5f:37:3b:d4:f1:73:3c:f6:ac:ab:
         39:01:9a:95:ee:76:8f:10:99:75:54:22:54:cd:7b:fa:2b:6b:
         ca:44:a6:52:56:62:2c:61:ab:57:c2:fb:81:db:ae:25:2c:45:
         90:82:39:cb:19:a7:a6:25:76:1a:5b:91:83:05:90:a8:a8:db:
         0d:a4:1e:44:36:92:cc:a2:3a:8b:8b:fb:49:db:0e:c3:ed:6b:
         d8:b8:f8:58:65:1f:1d:97:26:45:c4:ac:94:80:78:d7:95:82:
         f8:9b:6d:0a:88:2b:7b:8d:98:e5:c0:ce:80:66:f5:1e:e2:e2:
         26:e0:8e:1e:f8:04:a6:8c:68:50:d9:39:95:73:ae:66:93:e3:
         b5:6b:b2:3a:62:a0:1e:04:30:96:eb:cd:1e:4f:ba:67:05:f2:
         78:f4:2b:23:ee:65:39:3b:f8:b7:3e:3c:a8:aa:84:65:ee:1b:
         2c:82:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org