Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35332e33322e302f31392d3234203d3e203139333332.roa
File:                     3230302e35332e33322e302f31392d3234203d3e203139333332.roa (raw, json)
Hash identifier:          DyTBT+5ee4QHFcre+JvQSzqBBBepyMngfjdTz1qD6I8=
Subject key identifier:   11:3D:49:15:6E:C9:EA:53:B9:BD:3A:45:21:2A:B6:91:56:E7:CA:27
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       51CF6FDBAA04BF6C7E97EC31FBD6D3C682601C8F
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35332e33322e302f31392d3234203d3e203139333332.roa
Signing time:             Tue 05 Mar 2024 18:05:41 +0000
ROA not before:           Tue 05 Mar 2024 18:00:41 +0000
ROA not after:            Tue 04 Mar 2025 18:05:41 +0000
asID:                     19332
IP address blocks:        200.53.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cf:6f:db:aa:04:bf:6c:7e:97:ec:31:fb:d6:d3:c6:82:60:1c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Mar  5 18:00:41 2024 GMT
            Not After : Mar  4 18:05:41 2025 GMT
        Subject: CN=113D49156EC9EA53B9BD3A45212AB69156E7CA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:2b:d2:96:82:eb:b7:53:f4:4d:7e:df:32:
                    ad:1d:43:43:e9:6f:98:08:c0:25:d0:ce:3a:e0:0b:
                    df:4d:01:2e:9c:c1:23:1c:5d:5c:76:50:b5:8e:34:
                    50:ed:7a:1c:33:8d:56:d4:47:9f:8c:00:46:e7:aa:
                    e3:a2:c5:a0:77:c4:de:dc:6d:9b:f8:10:16:97:dc:
                    bb:82:f3:85:91:86:c7:d4:df:a3:6a:25:52:46:b2:
                    13:a7:f3:6a:39:0d:41:4d:eb:25:02:00:32:bb:1b:
                    f3:15:9b:8f:cb:76:d2:7c:f7:3b:94:02:f4:a4:68:
                    05:82:1c:40:0a:a8:b0:2b:54:70:a7:a0:04:e0:54:
                    83:85:f1:27:42:d8:27:4d:f4:05:20:87:0b:26:3f:
                    02:ba:97:ac:3e:8c:fe:f5:d9:1a:f6:26:01:27:31:
                    93:06:1f:61:08:d9:06:dd:81:5c:09:d0:74:af:b8:
                    ab:f9:f0:89:7e:0d:51:e3:97:d7:87:8b:33:12:2d:
                    14:8b:19:39:27:7c:7e:ce:ed:1a:ba:f1:5d:f3:38:
                    a5:22:80:4b:e5:6f:64:06:ce:76:f1:ec:09:cd:62:
                    92:b3:39:a1:cb:94:63:9c:91:cc:2b:cd:0d:00:17:
                    a3:1f:66:7d:8e:60:9d:a4:b4:49:21:42:a2:ee:db:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3D:49:15:6E:C9:EA:53:B9:BD:3A:45:21:2A:B6:91:56:E7:CA:27
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35332e33322e302f31392d3234203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:3c:e2:c0:7e:13:e8:b4:a5:3f:7a:12:ff:ed:44:ea:77:eb:
         5c:98:72:1b:59:7d:18:03:be:83:26:ce:8a:b1:ff:20:a0:b8:
         3e:e6:f5:93:37:61:04:36:cf:38:28:bd:d5:28:9c:d0:6f:8c:
         1e:62:3a:04:1a:b5:10:21:a0:9b:bd:27:9b:f3:b0:fd:f5:b4:
         53:5c:5e:08:a9:85:0f:36:9c:45:1c:ef:d9:df:a5:1f:b1:d9:
         cb:0c:ad:ba:46:33:4a:8a:44:c7:4d:bc:27:04:48:2f:e5:c6:
         33:90:98:34:a2:c8:e5:0f:28:1e:ba:9a:ba:5f:cc:63:65:29:
         0c:76:aa:8f:f3:f9:79:86:f7:ea:40:e1:cd:4a:50:7b:2c:ee:
         f3:3c:cc:b9:87:cf:0d:04:59:f2:45:a1:7e:8c:10:1a:82:95:
         95:2f:b5:f1:94:34:3b:3d:d5:d4:d3:d7:91:a0:5f:71:14:92:
         e0:19:ea:f9:40:8d:92:8a:e3:f9:32:32:44:e3:89:66:12:2b:
         bc:67:14:5d:70:76:cd:c6:f3:f6:99:69:2f:e1:6e:ea:df:55:
         25:8c:c8:5a:d0:08:48:62:11:7e:4a:bb:8c:ea:c2:4b:53:d6:
         c8:26:ec:0d:69:d4:f0:0f:0b:fd:d9:73:93:2a:b3:0f:17:03:
         cc:a6:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org