Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e2037343138.roa
File:                     3230302e31302e3232352e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          dLf+sITxjBg/cohepj88QiKp7DRCRqqpKUGmKAgCFzg=
Subject key identifier:   B1:F2:E7:07:6E:63:E6:0E:64:9B:4B:E6:86:C7:CD:35:2A:EB:31:F2
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       222411ADBD0F0CD17F63555F5CB8459AB261FE36
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:15 +0000
ROA not before:           Tue 05 Mar 2024 17:47:15 +0000
ROA not after:            Tue 04 Mar 2025 17:52:15 +0000
asID:                     7418
IP address blocks:        200.10.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:24:11:ad:bd:0f:0c:d1:7f:63:55:5f:5c:b8:45:9a:b2:61:fe:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:15 2024 GMT
            Not After : Mar  4 17:52:15 2025 GMT
        Subject: CN=B1F2E7076E63E60E649B4BE686C7CD352AEB31F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:9d:b4:b0:61:79:44:cd:aa:5e:d4:0d:34:
                    6a:4b:33:5f:30:db:df:1a:88:3c:5a:aa:bf:91:fb:
                    28:33:41:d0:90:7c:03:28:53:d8:61:ef:cd:ff:29:
                    60:55:45:1b:5c:df:b1:4b:1b:4d:d8:b4:1b:24:d7:
                    c2:83:36:3e:2e:29:e9:16:97:3e:e0:24:75:d8:f5:
                    13:5d:84:bd:b5:93:10:aa:1d:7c:ad:63:ee:20:b3:
                    87:7d:b2:ff:b1:a9:84:b7:b2:5a:88:f9:c6:bf:07:
                    72:99:d9:98:33:51:18:bb:8d:87:a7:06:9c:83:eb:
                    57:be:9c:7b:a3:e4:f9:e7:b5:8c:58:f1:97:c5:41:
                    b1:04:f2:27:60:03:2e:80:69:a3:c6:c3:61:67:fe:
                    ef:dc:53:35:a7:31:22:85:32:86:e5:89:31:7e:0e:
                    91:0b:e5:6e:b0:df:31:29:ce:aa:da:dd:3b:04:14:
                    3f:8c:65:6b:31:66:c0:51:a5:e1:72:b1:24:7a:cf:
                    46:47:a1:88:c9:b8:a6:61:b7:96:c5:29:19:7b:1a:
                    88:14:95:db:42:c5:47:06:49:66:49:63:e4:a7:54:
                    ec:ee:a0:b9:ed:98:bf:d6:22:a3:c5:28:db:2b:13:
                    0b:69:b0:bf:e1:b7:b2:63:0d:d4:13:11:5a:7b:91:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F2:E7:07:6E:63:E6:0E:64:9B:4B:E6:86:C7:CD:35:2A:EB:31:F2
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:20:5e:91:7e:21:8a:b8:57:53:37:a6:40:3c:b4:d3:85:5b:
         98:8c:06:c9:23:ae:05:e1:03:e1:c0:cc:1d:4f:a2:f4:99:c5:
         bc:0a:8e:88:ca:db:16:0f:19:bf:f8:75:3d:28:ec:7d:31:54:
         62:17:44:1a:b2:f5:53:41:e9:e5:df:68:50:08:65:a0:ab:d9:
         7c:a9:a4:39:65:eb:7c:c7:5b:7c:0b:99:94:0a:46:68:24:3d:
         2d:ff:d0:8a:cb:72:e6:fe:cc:3e:46:22:69:ce:cc:19:e6:50:
         2e:ee:da:f5:a3:8f:3c:55:97:20:b1:c0:07:6b:97:6a:94:ee:
         46:45:f7:68:81:eb:11:82:f1:73:84:cc:0a:49:b9:1e:31:29:
         8b:f8:e0:a4:cb:42:6f:7c:80:d2:2f:83:27:8c:02:14:bc:9a:
         9a:b7:04:a4:49:cb:81:98:38:ec:c2:d7:56:db:d9:bd:94:58:
         2a:10:f8:37:0f:16:75:24:54:80:e1:00:89:86:27:1a:39:19:
         2e:d5:83:45:81:7a:47:cf:8d:88:c1:6f:e8:84:06:18:1b:8f:
         71:16:f6:17:05:f4:f9:19:65:ee:ae:86:cb:a9:68:6e:7c:47:
         94:44:9c:fa:12:ba:5f:12:29:db:ba:a1:a9:3c:36:93:a6:6a:
         24:ee:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:11 2024 by rpki-client on console-fra.rpki-client.org