Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e36302e302f32342d3234203d3e203631343832.roa
File:                     3230302e3132362e36302e302f32342d3234203d3e203631343832.roa (raw, json)
Hash identifier:          HXIn6uVPyUblbBWK52gNq0FuS1BPLrAwkKZ5nfUVNCQ=
Subject key identifier:   8A:25:7F:5E:78:81:4F:FD:1F:7B:DB:38:AC:50:1E:0E:4A:91:69:83
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       6C0FBFA2A6E7C3022281EAF44CF57719C92AAF56
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e36302e302f32342d3234203d3e203631343832.roa
Signing time:             Thu 25 Jul 2024 16:50:00 +0000
ROA not before:           Thu 25 Jul 2024 16:45:00 +0000
ROA not after:            Thu 24 Jul 2025 16:50:00 +0000
asID:                     61482
IP address blocks:        200.126.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:bf:a2:a6:e7:c3:02:22:81:ea:f4:4c:f5:77:19:c9:2a:af:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: Jul 25 16:45:00 2024 GMT
            Not After : Jul 24 16:50:00 2025 GMT
        Subject: CN=8A257F5E78814FFD1F7BDB38AC501E0E4A916983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:03:ed:ad:1d:d9:6e:2b:fb:e5:9a:29:57:
                    59:98:fe:fa:22:6f:97:22:28:d4:3f:a9:08:9a:3b:
                    9a:25:0b:5f:bc:cf:c3:78:3d:79:ee:53:a9:1f:8e:
                    1a:79:0a:c9:7e:c3:2e:86:37:5e:a2:1e:c6:b2:16:
                    fa:e9:0f:46:1a:a4:7d:a0:26:2b:81:03:c5:fb:c9:
                    14:93:cd:29:b6:d8:82:c5:cf:6f:95:c0:9e:0f:5f:
                    1d:54:5d:ac:cd:8e:ee:64:a0:a3:eb:a3:16:01:48:
                    56:4d:64:b2:b3:cc:0c:91:7d:7b:24:78:5d:05:7a:
                    d1:df:0c:79:0a:5e:01:8c:b8:bf:90:a5:cd:ee:a7:
                    77:0a:6d:4e:17:2f:d4:ad:4b:d3:56:f6:fa:82:ef:
                    6a:54:b4:1f:57:be:36:cf:54:23:f8:ff:b9:a6:42:
                    13:66:51:1c:6d:d0:77:33:7d:13:c2:9c:40:f5:26:
                    a9:5f:ed:93:a7:23:c6:f4:d6:b8:41:26:37:66:13:
                    c9:fd:fd:92:51:ce:d1:55:97:93:42:d6:cf:f5:20:
                    e2:eb:f3:2a:ff:44:ab:d0:c9:e0:f0:23:52:37:5c:
                    44:62:67:e3:14:3f:1c:d5:c0:da:b0:b7:b4:63:a2:
                    e9:30:fa:77:85:4b:2c:bc:77:59:8b:83:1b:40:4b:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:25:7F:5E:78:81:4F:FD:1F:7B:DB:38:AC:50:1E:0E:4A:91:69:83
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e36302e302f32342d3234203d3e203631343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:12:72:5f:86:57:47:db:63:e4:42:f3:94:0a:d1:a9:69:06:
         8d:9b:8b:2a:6f:83:68:b1:41:84:e7:fd:27:10:7f:32:22:1a:
         53:53:e3:85:9d:73:b3:f7:2c:c0:b6:1e:db:3e:a4:cf:d4:8d:
         02:dd:0f:96:d7:3a:8a:d8:4a:16:81:71:e4:02:c9:e6:40:cd:
         cf:ab:d6:c4:66:17:a8:3c:7b:5b:71:10:c1:cd:d9:cd:ba:78:
         c4:21:4f:d1:d6:e3:11:f8:4f:c6:4b:68:09:47:34:ce:26:6b:
         62:22:e4:69:4a:ff:3a:84:61:2d:34:12:de:cd:01:75:ea:14:
         d4:1f:7b:9f:38:c2:1d:fd:71:25:44:b6:3c:68:d9:cc:d3:48:
         34:35:8e:ab:a3:13:04:0d:fe:29:37:85:f1:52:82:78:14:6b:
         bd:92:e7:4b:bb:10:48:05:13:a2:ce:b8:e1:3f:8a:61:d9:5f:
         25:54:4d:6b:49:26:b6:7c:e6:c6:13:d2:ad:97:bd:b3:26:3b:
         38:22:6d:30:d1:ea:33:0f:45:25:1d:47:90:bd:24:33:31:1c:
         f2:ac:bf:71:13:05:7a:8d:1d:8b:e6:b7:f5:42:92:45:e8:60:
         c3:d2:5d:a9:70:9e:82:ab:ed:62:7c:94:d6:e7:8d:e6:3f:d2:
         43:6a:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:11:04 2024 by rpki-client on console-ams.rpki-client.org