Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3134352e302f32342d3234203d3e203532323730.roa
File:                     3230302e36312e3134352e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          l0bpGyG/4XYxgOeQe03QCMiIai+JvXAkW4XrnqPnJpA=
Subject key identifier:   45:0A:47:D6:C1:23:92:05:29:3D:E4:0E:17:F2:2B:4E:65:90:22:3D
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       062141C5C2DB276D433062C03B71F4B920E7321E
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3134352e302f32342d3234203d3e203532323730.roa
Signing time:             Tue 05 Mar 2024 17:58:58 +0000
ROA not before:           Tue 05 Mar 2024 17:53:58 +0000
ROA not after:            Tue 04 Mar 2025 17:58:58 +0000
asID:                     52270
IP address blocks:        200.61.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:21:41:c5:c2:db:27:6d:43:30:62:c0:3b:71:f4:b9:20:e7:32:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:53:58 2024 GMT
            Not After : Mar  4 17:58:58 2025 GMT
        Subject: CN=450A47D6C1239205293DE40E17F22B4E6590223D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:c1:30:cf:24:d2:bc:3f:d8:0c:be:13:09:
                    56:31:cb:e1:e3:b7:7e:ce:23:df:bc:5f:03:da:e0:
                    e0:6f:ff:b7:e7:35:c7:c4:e3:fa:ff:a9:18:ce:62:
                    e3:3b:ea:3b:b2:57:e3:cb:05:4f:29:60:ce:c4:95:
                    24:17:d5:3d:4a:a1:f3:2c:7b:18:a8:de:5b:ad:b8:
                    ad:0a:f9:00:af:ce:d2:52:3d:2d:e9:db:dd:a4:41:
                    8e:be:b6:1d:4f:6d:30:f4:60:1f:05:14:4a:a2:59:
                    f9:c8:43:e0:7d:19:e3:d2:30:55:e0:cb:1d:eb:8e:
                    52:1a:4d:e2:d4:b1:3e:f2:c4:fe:5c:d8:47:e7:ca:
                    d7:1c:c9:70:b7:cf:b7:8e:51:b7:08:b6:02:d0:3f:
                    4f:75:87:d5:6f:a6:35:ef:04:c3:35:7e:ba:9b:51:
                    d5:4b:5e:75:73:3e:c6:b9:e5:16:72:c8:3c:24:07:
                    dc:a5:9d:66:64:2a:a1:74:78:b7:4a:08:26:b0:9c:
                    d8:29:92:7d:39:e3:0b:78:02:29:c9:4d:4a:cb:11:
                    86:c1:94:aa:5b:c2:9c:c2:66:bf:07:3e:da:7a:7f:
                    0c:2d:b8:5e:19:8b:94:e6:99:b8:3a:e1:2e:36:bb:
                    9c:9b:0c:9d:15:90:56:21:cd:5d:6a:38:ae:26:db:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0A:47:D6:C1:23:92:05:29:3D:E4:0E:17:F2:2B:4E:65:90:22:3D
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3134352e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a1:3f:ec:cf:0c:2a:d6:1d:ca:f1:e4:27:6d:68:e2:fa:94:
         86:93:39:74:ef:ec:a8:5b:07:66:01:87:68:cc:2d:18:d8:72:
         5f:6c:16:fb:8b:21:47:f4:ce:9c:dd:1a:2f:2d:59:70:f0:42:
         8b:9e:71:53:22:8a:37:21:1c:67:c1:d2:a8:68:b0:88:d7:1f:
         7b:4a:2d:51:36:9a:d0:cf:c0:71:8a:c4:a7:9b:01:11:3b:4c:
         9e:7b:2d:ef:9d:ff:7c:df:fc:dd:b5:3e:0e:bc:ae:96:bc:17:
         45:3c:5a:ff:c0:ea:40:6b:b0:20:cf:3d:ff:e7:8a:69:a8:20:
         7e:d8:cf:4f:18:eb:91:ab:64:7e:7b:0f:fb:ba:34:d5:a8:4f:
         17:4d:dc:b2:44:f0:57:b6:b6:86:2f:84:d3:19:25:47:db:dd:
         4d:79:73:24:e4:92:9c:fb:89:01:ad:ae:1d:38:cf:25:08:c6:
         94:3b:55:30:a6:31:03:5d:77:c3:2c:f8:5d:13:e0:37:da:b0:
         2e:69:99:04:ee:70:31:88:a3:77:6c:0b:a2:e4:06:fb:f9:cb:
         12:e2:aa:2b:bc:62:70:9e:4f:bb:e8:d1:20:2b:15:43:c5:47:
         56:73:ac:2f:1d:8f:15:dc:46:7d:b5:f1:50:44:e3:48:9e:00:
         25:95:50:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 02:23:16 2024 by rpki-client on console-fra.rpki-client.org