Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e20323730303734.roa
File:                     3230302e312e3131322e302f32342d3234203d3e20323730303734.roa (raw, json)
Hash identifier:          kiAYIzrp30Q0NbhG8OH04X1xed0b9eU9fUm1Jpi+rBo=
Subject key identifier:   DC:22:C1:EF:A9:1A:21:26:4C:2D:78:A8:E0:A1:A6:E5:9D:C5:05:1A
Certificate issuer:       /CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
Certificate serial:       158360AD61EB2A41E158F4392F6B117D292FCE79
Authority key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e20323730303734.roa
Signing time:             Tue 05 Mar 2024 18:14:09 +0000
ROA not before:           Tue 05 Mar 2024 18:09:09 +0000
ROA not after:            Tue 04 Mar 2025 18:14:09 +0000
asID:                     270074
IP address blocks:        200.1.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:83:60:ad:61:eb:2a:41:e1:58:f4:39:2f:6b:11:7d:29:2f:ce:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
        Validity
            Not Before: Mar  5 18:09:09 2024 GMT
            Not After : Mar  4 18:14:09 2025 GMT
        Subject: CN=DC22C1EFA91A21264C2D78A8E0A1A6E59DC5051A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:af:3d:13:d8:f2:28:bf:6e:e7:64:cf:5e:
                    36:f9:d9:60:a5:52:45:80:85:cb:d2:dd:61:bd:10:
                    84:6f:2d:4a:cf:18:70:c2:85:c1:ca:97:69:17:ac:
                    dd:a4:49:6c:8a:fb:84:9f:e1:e0:b1:e0:49:7b:2f:
                    ed:50:11:f7:76:9b:ad:6f:7f:8b:71:de:e5:67:07:
                    fe:cc:60:07:c9:b7:2a:86:b8:1f:69:e3:44:be:98:
                    ff:37:ac:03:37:9e:dd:c0:66:6a:39:aa:a1:ad:c1:
                    7b:08:97:01:e8:eb:88:96:4d:cb:88:63:cf:74:68:
                    98:ce:c4:0a:6c:db:da:e8:a3:33:fe:c4:de:2e:40:
                    5d:d7:a4:14:da:29:7a:da:5f:99:05:1e:bd:ae:f4:
                    3d:b5:4b:d1:a9:b1:ea:d1:8f:13:12:65:90:ac:be:
                    3b:e0:09:9e:d2:ec:0c:74:11:64:fe:a7:fb:b6:71:
                    3d:9a:f7:26:8f:dd:7b:31:c9:35:80:1e:f5:f9:a2:
                    f9:81:be:ba:c5:76:7d:20:ec:71:d1:f5:be:50:ed:
                    4d:18:99:4a:37:9c:53:f7:b3:a1:0c:3e:11:40:1d:
                    2d:2b:b4:58:11:d0:ef:9b:7b:4f:f6:bf:f7:33:9e:
                    0f:d4:83:00:17:65:88:6c:54:ca:b9:22:15:f2:5c:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:22:C1:EF:A9:1A:21:26:4C:2D:78:A8:E0:A1:A6:E5:9D:C5:05:1A
            X509v3 Authority Key Identifier:
                keyid:FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e20323730303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d2:66:29:76:57:18:d0:f2:45:a5:6a:3d:97:d6:3b:d0:48:
         73:bd:5d:f0:cb:e2:61:7f:4e:65:6d:d2:26:fd:16:02:64:07:
         0b:62:4c:c0:3e:0a:65:4b:f5:d6:9b:23:77:69:7b:16:cb:ae:
         c7:d4:d2:da:df:fc:5f:66:b9:d4:5b:83:ea:c7:d0:87:ae:47:
         9d:dd:22:9a:71:41:fd:71:b2:f6:4c:22:2c:aa:19:fc:8e:82:
         b5:ef:59:ee:c8:aa:1d:96:41:66:7c:f8:79:e9:ca:38:f8:2d:
         cc:a6:3e:50:cc:fd:b7:88:61:cd:48:3b:b1:5a:a1:39:94:af:
         aa:4e:58:8e:62:68:5e:05:95:8b:a4:6b:87:1f:01:be:a4:dd:
         f6:fc:8f:5b:6b:77:8b:62:1f:91:c0:1b:7e:34:b2:88:35:fa:
         3b:c1:14:04:77:ee:88:6c:7a:05:a4:cc:8b:73:c0:df:73:74:
         d7:4c:a4:9e:da:db:f1:3a:aa:77:b8:dc:35:b0:40:f1:9d:5a:
         4e:19:c1:89:72:53:b9:8e:39:a2:f9:fe:2f:a0:1f:ab:88:d1:
         01:22:f3:6a:08:22:c7:a0:13:5b:b0:0b:b5:f9:b3:a2:a9:0b:
         df:87:0a:9c:03:b1:79:d2:19:84:76:1b:a0:0a:af:e4:b3:53:
         b6:f4:b7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org