Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35362e3131322e302f32302d3234203d3e2036353033.roa
File:                     3230302e35362e3131322e302f32302d3234203d3e2036353033.roa (raw, json)
Hash identifier:          WZ+vYCehKzaMrcjIrBqIMvURUz8ayH7pn9Wz//4DDk0=
Subject key identifier:   1F:6A:08:7F:14:57:87:E1:8F:22:C5:97:23:2A:F4:F9:4B:3F:5E:36
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       30CBDEEB5AC854C00754A56D24467BF83BEE8382
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35362e3131322e302f32302d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:37 +0000
ROA not before:           Tue 05 Mar 2024 17:49:37 +0000
ROA not after:            Tue 04 Mar 2025 17:54:37 +0000
asID:                     6503
IP address blocks:        200.56.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cb:de:eb:5a:c8:54:c0:07:54:a5:6d:24:46:7b:f8:3b:ee:83:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:37 2024 GMT
            Not After : Mar  4 17:54:37 2025 GMT
        Subject: CN=1F6A087F145787E18F22C597232AF4F94B3F5E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:80:1f:0d:e5:ce:70:08:bb:18:33:6c:e9:
                    1c:e5:1a:4b:79:3d:bf:1d:2e:58:d2:f3:fd:48:6b:
                    5d:f1:bb:87:d0:44:c9:ba:c8:76:11:b6:52:93:43:
                    1d:41:c2:bb:78:01:32:5d:4f:7a:92:9e:be:55:be:
                    b9:0b:bb:5f:5a:3a:b4:eb:58:8e:a1:de:1b:3d:ea:
                    8e:fa:ce:e4:8b:d8:f7:f5:de:d9:48:6e:6a:41:5d:
                    c2:ad:00:79:ec:f5:90:85:a1:e7:54:78:39:55:d1:
                    86:8b:fd:ef:e9:a3:96:12:6c:aa:35:00:77:ea:74:
                    45:a0:b7:3c:3b:27:44:5c:61:4b:83:b5:7a:9d:09:
                    13:bf:86:76:11:83:12:01:d2:cc:b4:1d:01:24:19:
                    ac:22:3b:12:d8:d8:aa:ed:c7:52:f8:95:76:d9:fc:
                    27:54:fc:4d:52:dc:4d:62:24:ed:c3:6f:02:78:38:
                    a9:aa:b7:38:18:94:1d:dd:eb:88:04:16:56:87:11:
                    93:8d:d7:ae:28:a2:0a:8c:2b:9d:c8:63:41:2a:67:
                    2e:ad:de:d9:da:43:59:36:18:ae:9b:2e:50:c7:a5:
                    e9:20:1a:90:45:1d:30:25:0b:81:39:84:33:8b:33:
                    69:6b:83:10:b5:25:f2:2d:90:7d:ef:c8:a6:08:a6:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:08:7F:14:57:87:E1:8F:22:C5:97:23:2A:F4:F9:4B:3F:5E:36
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35362e3131322e302f32302d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:51:21:8b:3c:74:03:13:1b:ce:c9:48:3d:98:f9:35:78:2a:
         bf:3a:37:fe:39:0b:c3:98:3e:82:56:5b:c8:f8:76:64:e3:11:
         29:18:c6:f8:55:73:36:47:ec:2b:ed:6a:b1:8d:ff:16:17:e7:
         17:39:37:b8:36:5f:ab:83:21:5c:83:86:20:e2:b1:fe:31:77:
         30:4b:ba:65:96:83:bd:cb:40:44:07:5f:b3:33:9e:62:36:b2:
         50:4b:9d:2d:d9:e2:a3:a7:3d:98:b5:18:b8:38:b5:e6:3a:e2:
         31:2c:5f:3e:37:78:ed:86:08:25:7f:b6:5c:34:3e:b1:5b:67:
         30:d3:ed:56:99:5e:20:5d:60:38:20:a3:40:73:e3:04:57:5e:
         98:f5:c3:16:2f:25:b0:66:b0:d0:bd:fc:1c:23:f5:8a:a7:4c:
         86:45:f1:ce:d9:44:6d:14:76:99:03:0b:5e:80:d0:07:43:f1:
         63:57:c1:3a:ae:3c:b6:07:fe:68:62:ec:c6:e9:f5:9c:68:87:
         e0:09:11:86:5e:ac:4a:53:12:52:ef:2d:c4:ec:f2:ea:64:75:
         89:b0:9c:5f:2d:98:cf:e0:50:53:88:97:44:e2:88:90:73:72:
         3f:29:24:f6:27:48:6c:95:2d:c9:54:d7:9f:a7:fc:00:e1:da:
         20:2e:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org