Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3230302e37312e3234302e302f32312d3234203d3e203237373137.roa
File:                     3230302e37312e3234302e302f32312d3234203d3e203237373137.roa (raw, json)
Hash identifier:          ozS1VahT67cgGhHktpI5QU18XT9k5kmSWsONYiY6blQ=
Subject key identifier:   5D:F6:85:C0:30:2A:A0:33:EE:82:FA:73:CE:CF:44:39:46:1E:AC:ED
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       4847EC6B4BBD694354859FE70F4034E2C6DC7C68
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3230302e37312e3234302e302f32312d3234203d3e203237373137.roa
Signing time:             Tue 05 Mar 2024 17:49:54 +0000
ROA not before:           Tue 05 Mar 2024 17:44:54 +0000
ROA not after:            Tue 04 Mar 2025 17:49:54 +0000
asID:                     27717
IP address blocks:        200.71.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:47:ec:6b:4b:bd:69:43:54:85:9f:e7:0f:40:34:e2:c6:dc:7c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Mar  5 17:44:54 2024 GMT
            Not After : Mar  4 17:49:54 2025 GMT
        Subject: CN=5DF685C0302AA033EE82FA73CECF4439461EACED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:3a:7f:3e:33:bb:95:7e:13:ff:7b:91:00:
                    46:7e:e1:08:51:27:9b:37:06:32:d1:fb:a8:b8:78:
                    cc:59:bf:75:c8:55:10:1c:0b:8d:70:b9:38:6c:f4:
                    ca:19:91:41:19:af:3c:01:a9:1a:e1:2b:66:54:9e:
                    4b:4f:17:c7:7c:1b:fa:88:fb:5d:14:95:2c:bd:5d:
                    48:95:31:b4:aa:24:53:e3:65:ff:a4:61:e7:8d:e6:
                    cb:76:34:15:3e:0b:89:a0:f7:22:8f:b8:62:53:7e:
                    de:57:e9:9d:83:c8:65:b4:86:ac:64:0a:a0:8a:12:
                    a4:42:e6:bb:d5:e9:b2:53:5e:1c:65:9d:fd:ab:3f:
                    56:9e:b4:bc:ae:10:99:b3:a6:a3:33:c3:1a:0e:a5:
                    4b:01:6a:cb:dd:99:95:2d:da:a8:56:2f:81:ab:0a:
                    bf:02:3d:ca:76:a8:1a:44:0b:a5:df:78:ab:6f:7c:
                    02:9d:2c:ba:cd:26:0a:be:f2:79:0f:f2:8e:97:72:
                    7b:01:1c:d4:c8:c9:fe:ef:0c:83:e4:a4:24:7a:37:
                    1f:e7:66:d8:17:23:70:26:21:0d:bd:7d:fa:80:32:
                    ab:96:44:2a:0c:04:0d:d6:b1:a3:28:b6:91:8a:6a:
                    1c:76:26:06:b5:ad:bb:a7:b7:f4:29:db:23:6e:40:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F6:85:C0:30:2A:A0:33:EE:82:FA:73:CE:CF:44:39:46:1E:AC:ED
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3230302e37312e3234302e302f32312d3234203d3e203237373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:1a:e4:dc:76:d4:a8:b7:3c:67:93:0c:94:11:d2:14:12:
         c8:b1:83:13:dc:6f:18:04:49:50:ae:c2:b3:16:4d:39:b8:21:
         25:32:8a:01:64:ab:b2:87:33:3a:ee:61:03:a8:7f:74:97:01:
         e3:65:2b:f1:9b:de:7d:4d:f7:dc:0f:dd:b0:a1:d1:e4:54:72:
         8e:7f:b9:fd:8c:d8:64:1a:a3:28:7c:24:1b:11:8d:d8:dd:47:
         a6:8f:68:5b:87:08:87:41:3f:6c:bd:6e:99:10:99:0a:f0:29:
         af:df:3a:b8:a8:c3:08:46:51:bd:9f:0e:c6:81:27:fe:f4:c8:
         fd:a0:8f:37:fa:4f:7d:21:1a:e3:68:19:51:7d:da:6c:88:8a:
         fa:df:62:2f:e8:4c:9a:10:48:1b:08:f8:53:fe:dd:a6:72:dc:
         80:40:f2:72:36:2c:e2:4b:9e:99:47:1e:8f:11:9c:c2:44:d4:
         2a:fb:22:aa:9b:93:e8:d2:de:b0:c0:84:75:33:38:e3:b3:f8:
         51:88:83:fa:55:97:48:93:36:54:11:8e:5a:19:ad:c4:72:f3:
         54:64:85:63:6e:3a:5d:93:7b:37:35:c3:6f:e5:e1:0f:12:7a:
         28:45:b3:ab:41:eb:54:72:ac:07:12:ee:24:b1:5d:aa:18:9a:
         d4:20:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org