Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e203131313732.roa
File:                     3230302e35322e3131322e302f32302d3234203d3e203131313732.roa (raw, json)
Hash identifier:          niO0SkJwkLzRkcxRqHQrkIhP9TqRHksfLEdcX0lHHIc=
Subject key identifier:   75:24:8F:C1:AA:2E:7A:18:F8:A1:B6:D3:1C:13:9E:AA:3E:A2:72:E1
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       68D7B167ACC953C68A791CA70146BBE46A717DA6
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:32 +0000
ROA not before:           Tue 05 Mar 2024 17:49:32 +0000
ROA not after:            Tue 04 Mar 2025 17:54:32 +0000
asID:                     11172
IP address blocks:        200.52.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d7:b1:67:ac:c9:53:c6:8a:79:1c:a7:01:46:bb:e4:6a:71:7d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:32 2024 GMT
            Not After : Mar  4 17:54:32 2025 GMT
        Subject: CN=75248FC1AA2E7A18F8A1B6D31C139EAA3EA272E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:22:30:37:f7:fa:26:e3:e2:ee:3d:87:2b:
                    89:60:6f:f6:e3:33:ff:86:89:fa:25:33:fb:29:42:
                    c2:60:41:b4:72:1b:66:0a:c5:2b:10:ea:20:68:e4:
                    75:90:ff:ec:58:22:10:24:fb:ad:5a:6e:a3:60:a0:
                    e5:4f:28:3b:bb:fe:20:94:29:b4:63:e0:fb:c0:6f:
                    30:63:cd:ce:5d:81:20:4c:36:03:53:84:ad:cd:55:
                    71:29:0e:f5:86:63:05:db:ca:b0:72:5d:c8:c1:75:
                    00:94:26:3e:7d:e6:2e:48:68:75:c0:01:44:16:d3:
                    1e:3b:fd:79:18:a7:71:56:df:7f:7e:10:70:57:05:
                    c7:56:2f:9e:b5:c7:0f:7d:8b:bd:b8:db:d2:de:6c:
                    0f:df:41:31:66:a1:8c:8a:00:71:74:bd:a7:57:64:
                    c0:7e:29:1e:39:71:1f:99:c9:8c:d6:82:da:d6:c0:
                    ff:9d:48:ca:26:0b:c3:f9:f0:e8:26:0f:c6:f1:f6:
                    d9:c6:a6:85:54:a4:82:b4:ca:5a:92:4a:6d:96:55:
                    9d:f3:b9:fd:21:92:d7:7e:43:52:f8:eb:4c:a0:89:
                    26:5a:cf:da:14:da:80:96:b1:43:a0:2a:24:8b:d5:
                    ae:68:ea:81:68:63:95:36:b6:0c:25:bb:a2:80:4d:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:24:8F:C1:AA:2E:7A:18:F8:A1:B6:D3:1C:13:9E:AA:3E:A2:72:E1
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:0e:9e:1a:cb:57:7f:27:4c:6e:f4:9a:1d:ca:b0:d8:e4:5d:
         d7:05:0e:8a:8d:5a:60:d1:72:dc:17:87:df:66:7b:da:93:e3:
         86:d3:f6:57:31:c6:d3:6c:73:00:95:4b:85:f9:6a:49:cb:e8:
         cd:4b:e6:b7:38:d3:31:23:38:4d:d1:52:de:01:9f:88:62:f7:
         2c:bb:33:f8:1e:05:c6:88:12:2a:eb:86:b3:e8:fc:93:bd:2c:
         4c:45:1e:b7:67:f3:f5:87:5a:55:cf:ae:67:91:a5:f8:e0:72:
         be:35:16:ce:83:38:32:92:d4:d1:cd:57:d7:d8:ff:f3:41:12:
         c0:0b:45:5c:10:37:2e:97:1b:79:55:6a:64:5d:fd:7c:99:51:
         5b:77:bf:3f:4f:31:ab:4b:8d:09:7f:68:46:9f:03:49:f6:bf:
         8f:8a:c3:48:91:eb:7e:e4:d6:97:48:8e:90:37:38:f3:13:85:
         be:86:d3:36:0a:bb:b6:0b:71:a2:3f:b1:59:53:c3:2f:56:26:
         79:7a:3b:36:0e:15:8f:dc:db:67:98:b4:42:ef:3d:d3:cb:55:
         16:4c:ab:eb:9e:0c:4c:00:56:af:fe:a3:fd:2d:70:0f:a5:47:
         75:f5:40:67:6c:bc:67:ba:79:de:f7:0d:20:75:19:3a:72:e5:
         cc:9b:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org