Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3234392e302f32342d3234203d3e20323732303336.roa
File:                     3230302e31322e3234392e302f32342d3234203d3e20323732303336.roa (raw, json)
Hash identifier:          lRrZcQpOy6iX47V9bgIcqDESZlPionN0SfhhBPKRpzk=
Subject key identifier:   FE:91:4E:F0:92:02:36:13:44:16:EF:9E:63:0A:E6:7F:5B:1C:8B:37
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       4FAEEF29E8EF022482B931A139B5E5D8CB2B08F3
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3234392e302f32342d3234203d3e20323732303336.roa
Signing time:             Tue 05 Mar 2024 18:00:46 +0000
ROA not before:           Tue 05 Mar 2024 17:55:46 +0000
ROA not after:            Tue 04 Mar 2025 18:00:46 +0000
asID:                     272036
IP address blocks:        200.12.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ae:ef:29:e8:ef:02:24:82:b9:31:a1:39:b5:e5:d8:cb:2b:08:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar  5 17:55:46 2024 GMT
            Not After : Mar  4 18:00:46 2025 GMT
        Subject: CN=FE914EF0920236134416EF9E630AE67F5B1C8B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:1f:e5:4a:13:be:81:37:d2:49:bf:4a:e2:
                    96:b5:ea:8a:da:d7:ed:63:57:fc:ec:54:0d:ad:b5:
                    bf:9c:eb:6e:b6:f5:50:5b:cf:10:14:e3:72:44:b8:
                    70:3e:1d:34:f1:80:70:1e:a6:04:c4:f0:5e:f1:43:
                    d6:a7:fe:17:c5:35:36:b6:85:45:cb:d7:89:d5:f1:
                    e2:3a:48:c6:21:df:ca:42:15:8f:a3:4a:96:58:3a:
                    b6:3a:dc:7b:15:9f:97:c5:43:ef:4c:25:66:70:9a:
                    58:e7:13:b9:93:53:67:bf:dc:2e:52:34:07:a3:ea:
                    fb:ef:ab:9e:ea:f8:b4:37:d2:44:f6:94:cb:d6:b5:
                    36:dd:ec:b1:08:00:ce:b1:e7:2b:a8:dd:6f:35:6e:
                    ac:7c:92:30:c3:29:d3:7d:0f:8d:81:46:21:44:d0:
                    07:f7:01:6d:22:cf:96:13:99:7c:5c:34:92:8c:ee:
                    c0:1b:89:dd:4d:1e:6b:4b:d6:c6:2b:a2:88:e2:0a:
                    49:59:9c:43:49:17:7f:8b:9d:ec:50:98:f3:89:ff:
                    68:28:26:66:90:69:02:c6:fe:04:04:7d:e7:e1:7e:
                    04:34:c9:ab:db:1c:a2:50:e8:85:0c:61:e0:2d:bc:
                    6b:c7:75:f9:2b:7d:24:87:3d:28:3c:f9:c7:31:94:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:91:4E:F0:92:02:36:13:44:16:EF:9E:63:0A:E6:7F:5B:1C:8B:37
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3234392e302f32342d3234203d3e20323732303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b4:15:b3:05:fb:b2:ee:a4:7a:ab:c3:88:ef:d0:98:c4:f1:
         bb:9b:22:e3:6c:ec:a1:14:52:a2:a6:95:25:34:3b:7b:95:49:
         37:ed:8f:b4:a6:49:34:65:4c:c5:47:3c:46:73:ad:5c:d2:5d:
         d8:9e:82:46:25:16:75:d3:58:7e:bd:9b:c1:60:92:c4:e2:ae:
         3f:96:d0:2e:d9:22:de:44:99:ea:8f:6a:fa:6a:c7:35:71:b5:
         bd:78:2c:94:49:8c:18:ad:36:e0:cc:c3:3c:43:62:3b:a5:16:
         15:1b:c4:e5:14:cd:4c:04:78:a0:81:b8:7b:25:d0:0f:31:00:
         2d:b5:bb:de:a2:c7:a1:a8:e4:2c:b1:00:d1:7f:a6:d2:6a:71:
         41:b1:8a:85:fb:fd:38:8d:8e:24:4a:9d:48:75:52:f6:d2:5a:
         07:46:cf:b2:41:54:14:f9:aa:05:cd:a5:e0:2f:6b:39:71:4f:
         69:d8:ad:3d:a7:80:44:bf:df:94:fb:bb:0d:50:e3:80:68:a8:
         dc:a6:6f:a3:b3:1b:88:f8:05:75:e1:c0:05:2e:1b:40:d6:d2:
         60:b4:1f:11:2e:70:cb:89:ef:19:7f:07:31:7f:28:8f:4a:7e:
         a4:06:5f:49:aa:18:77:2a:e3:b3:bb:2c:7e:b5:64:c1:fc:a5:
         23:25:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 00:36:01 2024 by rpki-client on console-fra.rpki-client.org