Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235322e302f32342d3234203d3e20323633323432.roa
File:                     3230302e31322e3235322e302f32342d3234203d3e20323633323432.roa (raw, json)
Hash identifier:          EwN+u/yGycwLdY3RhKCROLAjgcsh+olI5ooHRt74Izw=
Subject key identifier:   90:47:7F:9F:D4:4B:51:47:78:EF:33:7D:0E:C6:4F:B0:10:54:9F:C4
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       1BD472E8DC0D9C59C798A15BFDA755B1B75B2605
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235322e302f32342d3234203d3e20323633323432.roa
Signing time:             Tue 05 Mar 2024 18:00:47 +0000
ROA not before:           Tue 05 Mar 2024 17:55:47 +0000
ROA not after:            Tue 04 Mar 2025 18:00:47 +0000
asID:                     263242
IP address blocks:        200.12.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d4:72:e8:dc:0d:9c:59:c7:98:a1:5b:fd:a7:55:b1:b7:5b:26:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar  5 17:55:47 2024 GMT
            Not After : Mar  4 18:00:47 2025 GMT
        Subject: CN=90477F9FD44B514778EF337D0EC64FB010549FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:9a:b4:a6:bb:8c:93:3e:9a:9f:b3:47:be:
                    a1:6b:17:fb:a1:61:e7:f1:ff:0d:1d:ff:87:9d:7f:
                    69:8d:2c:e0:70:f4:eb:32:30:bc:66:42:6b:b9:84:
                    05:ef:f1:07:37:75:f9:fe:e9:2a:70:48:06:d8:0f:
                    b6:8c:8e:65:0c:29:ab:87:4f:77:1b:d4:9d:ac:1a:
                    86:1e:11:08:9f:4a:53:76:03:08:91:2f:e3:a6:e9:
                    79:23:dd:30:bf:e5:d5:12:d4:da:ee:ee:09:50:f1:
                    a4:0c:fb:3d:f1:65:90:0d:fd:ce:71:c1:30:d8:00:
                    f7:4e:8d:a2:aa:4e:40:b3:5a:9e:16:3f:ef:44:8a:
                    20:21:1a:d0:69:a0:94:60:39:7a:c5:c5:5c:30:04:
                    bc:51:dd:1d:f9:14:99:9e:47:0d:f6:4f:c7:9a:2e:
                    fc:32:68:28:24:be:43:59:fa:1f:a2:f9:75:c7:94:
                    77:a6:0f:92:16:f6:9d:d8:39:f1:dd:6c:3b:06:b7:
                    2a:63:3d:e5:e1:1e:04:e9:f1:2f:b5:a2:84:34:e9:
                    e0:43:62:36:f2:19:a0:80:d0:23:5f:ce:e8:50:06:
                    bf:5b:d1:1f:4b:d0:84:12:d8:79:67:34:eb:1e:fc:
                    24:1b:a3:33:f2:b8:55:b8:29:fd:04:4a:3a:84:72:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:47:7F:9F:D4:4B:51:47:78:EF:33:7D:0E:C6:4F:B0:10:54:9F:C4
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235322e302f32342d3234203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9e:19:31:d1:f1:e6:0a:09:e3:b0:af:c0:31:07:af:bf:2c:
         cb:ed:29:61:0d:c9:20:72:30:a8:b7:11:af:56:4a:5a:85:68:
         df:8c:be:ef:45:4f:87:b3:d9:3b:ba:fa:52:a3:0e:f7:fa:ae:
         0d:4c:d2:b2:00:c3:b8:5c:5c:6b:b3:2f:8a:fd:a7:bc:2c:75:
         46:9a:0a:19:d9:bc:35:d4:a5:ed:86:f4:40:20:15:87:92:7a:
         7c:83:1b:9b:c7:f8:ee:9b:cc:c7:38:2e:11:c1:8e:d5:c2:89:
         46:32:1c:c3:d3:75:70:6d:92:88:14:af:8d:71:eb:0a:4b:24:
         24:33:1d:fa:98:ca:38:c0:ef:d7:4a:cb:79:19:42:80:81:3c:
         ac:f7:2d:b2:9c:07:0b:28:7a:b7:70:e6:6b:2f:1f:79:b5:2f:
         e1:b0:56:84:53:74:5e:10:ee:b3:b3:eb:c6:25:ca:4a:86:a3:
         62:cb:02:22:12:71:85:b7:2e:3b:45:d2:42:b7:ea:af:d3:b8:
         bc:29:cd:a6:84:11:7c:06:7e:aa:aa:11:6f:e1:17:b1:c1:a2:
         b2:79:2b:36:50:7b:05:99:0e:41:4d:14:ad:ca:be:7a:d7:0d:
         d5:3d:8a:23:01:89:43:5f:8a:96:6c:c9:36:79:9f:7c:cd:be:
         cf:91:9e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 00:36:01 2024 by rpki-client on console-fra.rpki-client.org