Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232342e302f32342d3234203d3e2037303034.roa
File:                     3230302e31302e3232342e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          yHfl1I90fWo7n27KFIC+6dXMFMDcnZH567ajfL9Q/vg=
Subject key identifier:   51:3E:B0:0E:02:F3:80:62:27:BB:38:FE:BB:24:59:B6:4A:17:7F:F3
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       08D67037EBB1D895EC2CD89C32F327FB63A872FE
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232342e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:52:14 +0000
ROA not before:           Tue 05 Mar 2024 17:47:14 +0000
ROA not after:            Tue 04 Mar 2025 17:52:14 +0000
asID:                     7004
IP address blocks:        200.10.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d6:70:37:eb:b1:d8:95:ec:2c:d8:9c:32:f3:27:fb:63:a8:72:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:14 2024 GMT
            Not After : Mar  4 17:52:14 2025 GMT
        Subject: CN=513EB00E02F3806227BB38FEBB2459B64A177FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:ad:de:65:74:e6:5d:66:02:46:c4:1e:ac:
                    92:07:49:3a:7c:4e:f3:af:d5:4a:11:93:8c:6b:2d:
                    86:b0:18:b7:b4:d9:09:19:7b:f7:0e:2b:77:59:3b:
                    4b:95:c4:a2:a4:b3:86:97:df:2d:5b:d5:04:70:7f:
                    26:19:1a:00:5a:a8:3f:0b:a9:c3:bc:6b:31:ba:d4:
                    4d:28:08:1d:4b:02:c2:d4:2e:0a:49:30:0d:95:9e:
                    a2:7e:73:4d:9a:7b:1e:1f:e5:96:70:0c:50:8c:0e:
                    24:a6:21:14:eb:79:ef:b7:23:f7:57:55:79:e1:d2:
                    5a:9c:33:c8:19:7b:b7:6d:cf:a1:03:d4:f9:57:d1:
                    6b:28:43:77:5f:65:e5:cd:25:34:79:6a:5e:33:17:
                    14:0c:04:c1:5c:ef:ab:48:9c:e2:4d:82:a1:95:59:
                    a3:2c:b5:8d:ad:ee:46:7b:e8:06:4c:f6:fa:1d:53:
                    b9:27:1f:d9:0a:3d:c9:4c:2e:89:05:00:75:6b:8d:
                    b2:6c:71:b5:19:c9:4f:b9:e4:51:81:b7:e4:90:7f:
                    13:a7:2e:90:19:d8:6b:b5:e8:1a:24:b3:de:b7:a3:
                    e0:3b:c0:e9:c1:c7:e0:75:db:58:48:0d:ae:4c:86:
                    47:07:55:d1:c6:0f:74:cb:78:d7:c9:71:59:36:7c:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3E:B0:0E:02:F3:80:62:27:BB:38:FE:BB:24:59:B6:4A:17:7F:F3
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232342e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:a6:80:28:18:81:4b:7d:ac:33:4b:9b:79:94:da:ed:1a:
         1b:a3:6a:e0:ac:ea:b9:73:98:04:71:8e:77:76:69:c4:ce:84:
         75:ef:91:83:3b:3f:19:33:27:f2:d0:2c:fa:db:8f:30:7e:26:
         28:f6:d3:49:e0:11:87:34:a5:33:06:24:ff:29:17:80:26:bc:
         62:3f:10:ae:9c:3c:97:c7:c2:26:8c:d9:43:92:83:39:49:06:
         40:aa:80:40:5d:5e:f1:d0:48:57:71:ff:c6:bd:c0:84:bd:d6:
         3b:43:d8:0a:bd:e2:6a:59:6e:40:08:84:fa:bb:f8:4c:1b:4f:
         07:ac:5b:a7:8b:03:ab:77:ea:54:00:c1:8b:c4:4d:98:2a:d8:
         7f:e1:60:65:74:de:39:4d:cc:43:19:61:77:9d:ec:0c:7e:63:
         2e:01:c8:f4:d2:74:7a:0c:25:0e:18:c9:2e:c5:a1:ee:09:f2:
         ce:4f:54:7c:fe:0e:9b:21:3c:d3:86:33:d0:78:12:4f:7d:9b:
         ca:4e:2b:9d:92:7b:f8:65:03:1a:a3:15:7b:a7:26:11:eb:56:
         4a:03:80:3f:16:22:4b:85:8a:65:97:fd:85:76:e1:bf:c7:65:
         06:40:27:bf:f5:7d:0c:f9:50:93:3b:be:ae:96:d9:28:34:45:
         d7:6a:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org