Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e33322e302f31392d3234203d3e2037343138.roa
File:                     3230302e3131322e33322e302f31392d3234203d3e2037343138.roa (raw, json)
Hash identifier:          /1C2YkGM/W07iIQu7uRdUBQctW8wDtaDLeMhAsKvoPk=
Subject key identifier:   CC:D9:D6:19:E3:40:CF:FC:D4:6C:20:9A:81:B1:F1:0A:7B:D3:FA:C6
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       481F658E49C9A6295FAF69CA785C3092C9F7EA16
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e33322e302f31392d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:09 +0000
ROA not before:           Tue 05 Mar 2024 17:47:09 +0000
ROA not after:            Tue 04 Mar 2025 17:52:09 +0000
asID:                     7418
IP address blocks:        200.112.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1f:65:8e:49:c9:a6:29:5f:af:69:ca:78:5c:30:92:c9:f7:ea:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:09 2024 GMT
            Not After : Mar  4 17:52:09 2025 GMT
        Subject: CN=CCD9D619E340CFFCD46C209A81B1F10A7BD3FAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:c2:5d:2b:62:38:9c:43:c4:7c:b5:4c:6c:
                    33:ea:a3:ab:df:22:60:ac:a5:8e:94:d3:3e:7f:7f:
                    ca:0b:4e:09:4d:00:87:51:b4:ea:7b:0d:ff:e4:85:
                    e1:61:50:4d:d0:c6:aa:1d:b9:a7:45:05:f6:d1:c9:
                    43:71:a0:b7:49:85:ad:c0:01:a6:4d:85:b4:e2:96:
                    b4:c4:63:72:fb:07:94:df:e0:c7:bc:19:eb:51:84:
                    47:73:97:93:2a:a3:18:55:d7:a4:27:8e:e2:ba:c9:
                    a6:b7:7d:96:43:a3:24:b4:a1:48:e5:d7:cb:26:b4:
                    53:e2:ca:fe:0d:2f:3e:3d:34:1a:27:39:f0:58:e4:
                    4e:cc:c3:7b:44:cc:72:bf:c9:20:d0:9d:1a:31:74:
                    e1:8b:d2:82:67:b1:8d:0d:a8:20:03:8a:32:e0:e6:
                    e2:4b:aa:ab:ff:04:a5:34:50:25:7d:eb:74:1d:62:
                    23:15:cb:43:f8:f1:9b:e3:c7:5f:7d:1c:14:af:c6:
                    a5:bd:ac:30:f2:29:70:bb:63:19:47:89:f5:a7:a7:
                    11:54:c0:6b:85:8b:3e:e9:bd:f8:47:31:68:f7:c0:
                    95:b0:32:4e:5d:bb:ba:5e:a4:a8:9b:4b:10:5e:a4:
                    16:b5:1a:fa:4a:f5:69:ea:db:4e:ad:cc:ad:c2:f5:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D9:D6:19:E3:40:CF:FC:D4:6C:20:9A:81:B1:F1:0A:7B:D3:FA:C6
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e33322e302f31392d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a0:d7:22:2e:65:82:7b:77:55:8c:80:2f:69:52:85:82:4b:7b:
         59:50:8d:a7:ea:79:45:d5:47:ae:c6:87:65:50:8d:6d:74:c5:
         d3:2d:14:a1:6c:c7:2b:af:8d:d9:9b:48:d5:83:6a:78:ed:94:
         e4:25:25:8d:0f:e1:36:e2:62:99:00:81:ef:d0:44:64:f3:8b:
         a2:f2:df:80:15:f8:f5:bf:4e:d5:b4:4b:fe:81:20:c8:4a:c9:
         4c:f9:50:ce:1e:99:82:c7:94:e1:73:29:88:60:c8:be:38:8f:
         ef:9e:6f:b4:bb:62:31:5e:4f:cf:15:f5:ab:4a:26:ef:9a:a4:
         39:75:53:d4:74:6f:11:69:df:3d:4b:60:e2:ea:d0:80:4a:cf:
         01:03:54:2b:c0:7f:ea:d6:a5:55:e7:ca:3f:48:bf:38:e6:78:
         26:6e:d8:eb:9b:06:86:3f:93:17:75:08:83:4b:c8:02:1f:56:
         40:09:33:c0:77:47:e2:fe:a5:b7:19:e2:2c:63:fd:7e:88:9f:
         83:85:28:e9:a0:11:41:ff:47:cd:53:f7:62:ad:ba:d8:9a:7b:
         c1:f0:06:90:b7:c4:55:8e:1c:98:0c:da:ae:1d:1d:e5:8f:5e:
         91:be:72:6c:75:7d:b2:24:98:17:e1:61:de:e0:af:2f:42:c6:
         e5:48:dd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:13:58 2024 by rpki-client on console-ams.rpki-client.org