Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3230302e32342e3133362e31362f32382d3238203d3e20323636393034.roa
File:                     3230302e32342e3133362e31362f32382d3238203d3e20323636393034.roa (raw, json)
Hash identifier:          jMFAswZ4e/9c4duV9ChsBo/1JEMOEAxLgiF4Q+7ii2Q=
Subject key identifier:   A3:2E:5B:8D:D9:4B:0C:17:AF:34:6C:A4:81:16:10:FB:92:57:06:0F
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       6ED58D6B32CADA971519F12133A1903938229226
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3230302e32342e3133362e31362f32382d3238203d3e20323636393034.roa
Signing time:             Fri 06 Sep 2024 11:50:01 +0000
ROA not before:           Fri 06 Sep 2024 11:45:01 +0000
ROA not after:            Fri 05 Sep 2025 11:50:01 +0000
asID:                     266904
IP address blocks:        200.24.136.16/28 maxlen: 28

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d5:8d:6b:32:ca:da:97:15:19:f1:21:33:a1:90:39:38:22:92:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Sep  6 11:45:01 2024 GMT
            Not After : Sep  5 11:50:01 2025 GMT
        Subject: CN=A32E5B8DD94B0C17AF346CA4811610FB9257060F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2a:00:77:10:c8:2d:94:a3:e3:25:26:4c:4d:
                    17:d0:ea:b2:6b:c9:bd:ff:67:ba:1d:4d:9c:19:1e:
                    52:c6:ca:a9:be:b9:31:1b:33:82:db:a0:74:dc:d5:
                    56:68:60:d0:4e:ee:99:d2:89:a6:13:10:72:9e:23:
                    93:a4:4a:b9:33:d7:d6:34:03:2c:7c:db:4a:1f:61:
                    83:6f:8b:d4:5f:84:e5:a1:ca:6e:82:2a:bc:73:2e:
                    04:aa:80:98:9c:39:9f:86:76:17:26:1f:81:46:60:
                    f7:69:31:55:88:d6:21:3f:72:44:7b:dc:18:1d:d7:
                    52:28:14:1e:41:15:85:c5:7c:7f:b5:81:c5:6a:a6:
                    9c:84:83:b9:d5:2b:89:85:d7:41:67:f4:7c:d0:37:
                    f4:78:4b:a3:35:24:79:5a:d0:c7:2d:85:18:c3:d0:
                    88:19:3a:53:60:7c:a6:71:e9:c7:85:32:e0:4b:61:
                    2f:8f:26:72:6b:9a:fc:ec:a5:fe:1a:c8:85:52:98:
                    bd:69:80:44:b5:6b:0c:81:f1:72:30:40:c4:f3:70:
                    90:7d:c4:8d:51:3d:65:b7:ac:a7:88:76:75:13:b1:
                    05:70:ea:26:0a:6c:41:08:d3:00:29:fe:ad:1b:1f:
                    f5:cc:39:4d:fb:68:60:e0:7d:7f:99:f3:8b:f4:02:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2E:5B:8D:D9:4B:0C:17:AF:34:6C:A4:81:16:10:FB:92:57:06:0F
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3230302e32342e3133362e31362f32382d3238203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.136.16/28

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:c8:ea:a8:74:0c:a5:27:27:f1:13:4a:05:b4:fc:d7:08:
         28:db:18:37:2f:67:a6:e4:79:99:e3:1b:28:8f:09:7d:9e:99:
         42:0f:2a:d3:4a:24:a4:73:d8:66:2d:c3:c4:05:e4:54:e1:ea:
         e6:51:a2:4d:b2:8f:17:90:db:f3:9c:72:db:ff:07:f1:c9:5e:
         14:d4:79:7d:b8:18:1a:88:1d:e1:54:37:f3:e6:8f:b8:84:73:
         7c:12:49:63:62:b8:03:dd:8b:4f:8b:5a:92:24:68:e1:c1:9c:
         d1:00:4d:c8:e9:93:f0:52:3a:3d:aa:ab:3e:fa:a1:1e:fc:2c:
         4b:b8:c5:24:29:d0:24:49:fc:41:76:f3:33:64:dd:8c:9c:49:
         4d:05:34:05:f3:1d:63:85:43:fe:17:85:0a:24:12:bb:2d:80:
         6a:c4:bf:9c:34:58:3c:7d:41:65:db:c9:c4:89:1f:76:a1:d2:
         4f:18:01:f5:d1:4f:1d:38:10:1b:59:36:26:72:f5:83:21:dd:
         67:01:9a:97:27:7e:4f:84:b3:1d:a8:aa:9d:5f:40:23:0d:5b:
         29:70:23:b8:96:94:f3:37:16:5b:17:4a:b2:77:96:c1:00:b0:
         54:70:f3:ed:a7:66:44:86:99:d1:22:88:93:24:af:ed:6e:57:
         58:7d:a4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org