Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33342e302f32342d3234203d3e2037303034.roa
File:                     3230302e32392e33342e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          QTdxwKjprJyQlm1gj2egqyYpUuMp78V11Mxoof+dRPs=
Subject key identifier:   C2:5C:B6:99:D6:AA:2B:DA:DE:23:36:F7:99:F9:67:54:22:C3:F0:12
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       230F1E3851AA5AEE5C4A495811D32BFB50513795
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33342e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:52:18 +0000
ROA not before:           Tue 05 Mar 2024 17:47:18 +0000
ROA not after:            Tue 04 Mar 2025 17:52:18 +0000
asID:                     7004
IP address blocks:        200.29.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0f:1e:38:51:aa:5a:ee:5c:4a:49:58:11:d3:2b:fb:50:51:37:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:18 2024 GMT
            Not After : Mar  4 17:52:18 2025 GMT
        Subject: CN=C25CB699D6AA2BDADE2336F799F9675422C3F012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:a2:2c:11:04:84:f0:b0:fa:ec:d5:cd:ee:
                    b3:2d:a3:94:ea:fb:df:b5:ef:cd:49:e3:20:ce:47:
                    b9:20:2f:9c:6e:b0:2c:5c:56:7b:17:b2:45:7c:7b:
                    49:02:6c:90:ef:7f:8c:05:cc:02:bd:ba:fd:52:c5:
                    93:e9:4c:ad:d0:45:2d:93:41:33:4d:0d:bc:c2:76:
                    a5:22:55:83:bc:2b:40:37:2b:bb:f0:61:88:7a:ed:
                    14:94:0d:fa:82:40:c2:2e:74:cf:9b:40:c7:45:0d:
                    0b:fb:42:41:d7:29:91:5c:18:66:b7:40:93:b5:71:
                    f5:40:06:f5:43:71:01:e9:1b:88:f7:df:db:c4:d8:
                    4a:de:6c:95:68:2b:05:12:7a:1a:fe:94:fe:ca:db:
                    75:c8:b1:a4:f4:d3:2e:8d:42:c4:97:54:17:ea:c3:
                    b1:cf:72:08:e4:fa:ff:8a:5b:b9:4b:73:28:32:82:
                    a0:80:bf:b5:4f:e2:59:8e:42:22:b2:46:e3:b7:2a:
                    59:c3:ab:a8:25:65:7b:66:eb:4a:c2:9d:5c:27:61:
                    79:bb:af:7f:f3:20:75:aa:bc:6f:24:43:c0:56:99:
                    40:c1:8b:9a:18:51:0b:47:45:f9:5a:8b:8b:b5:78:
                    ef:78:06:71:78:ba:52:34:60:87:59:65:68:58:bc:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5C:B6:99:D6:AA:2B:DA:DE:23:36:F7:99:F9:67:54:22:C3:F0:12
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33342e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:fe:e1:1a:18:92:5f:97:1d:eb:38:72:9f:a6:12:0e:4b:58:
         fb:3e:7f:07:de:5a:73:45:68:8c:8b:50:77:16:88:b0:67:22:
         86:7e:55:b1:d6:2a:b3:e1:3a:7a:dc:82:28:3f:97:7c:72:f8:
         ee:2f:8e:11:a0:ef:02:34:6a:4b:c4:c1:ee:de:cf:f6:67:bc:
         1e:a2:d2:50:b5:a2:06:c4:36:83:c0:86:9d:ce:32:2f:c1:11:
         be:7e:09:8f:97:b8:1e:3a:f9:cb:4c:36:44:2a:23:e4:b8:6c:
         4f:fe:58:dd:1a:5d:ff:44:84:51:6f:62:90:54:dc:c7:1d:ff:
         3d:bf:38:c1:2e:9a:9d:db:0d:ef:22:1c:ce:40:e7:aa:41:69:
         33:a8:30:65:1a:9a:ce:d9:f5:0a:59:24:6b:b0:ec:77:59:bc:
         21:8b:1d:e6:18:c8:1f:80:1f:03:27:a2:f3:a0:ed:4c:5d:86:
         1e:93:1f:cc:96:be:4d:82:d6:99:4f:d2:20:e4:5d:58:03:63:
         88:12:d6:62:3b:d2:be:84:7e:0b:15:9a:28:10:49:ab:7a:37:
         5f:4a:b0:ff:62:8b:0e:0e:1c:0f:09:40:a4:44:1f:26:bf:b8:
         68:63:5c:a0:01:3a:ea:d6:5f:d4:c7:e0:7c:cd:ae:8c:95:3e:
         f8:53:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:11 2024 by rpki-client on console-fra.rpki-client.org