Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203134363138.roa
File:                     3230302e31322e3139372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          vLMbMKWw3pAzqZFo8SuZBrwqJdmWRw6M5koVnvWzprQ=
Subject key identifier:   79:5A:0C:E6:B5:45:32:03:62:01:E7:B0:3B:E3:A0:DA:D2:76:72:BD
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       54F3AAFF08E59FBD4ADAF43D537451924268243D
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 05 Mar 2024 17:39:48 +0000
ROA not before:           Tue 05 Mar 2024 17:34:48 +0000
ROA not after:            Tue 04 Mar 2025 17:39:48 +0000
asID:                     14618
IP address blocks:        200.12.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f3:aa:ff:08:e5:9f:bd:4a:da:f4:3d:53:74:51:92:42:68:24:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Mar  5 17:34:48 2024 GMT
            Not After : Mar  4 17:39:48 2025 GMT
        Subject: CN=795A0CE6B54532036201E7B03BE3A0DAD27672BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:b0:9f:16:93:8e:32:ca:1d:31:de:93:c6:
                    df:4f:cd:9e:4d:b4:ce:c7:18:b8:04:c6:d5:cc:e8:
                    55:77:b8:e1:88:78:73:6d:e3:b6:78:6f:3e:76:7d:
                    29:ce:1f:a7:a1:97:45:20:ed:50:75:1d:91:a7:31:
                    29:26:02:8b:2f:a9:fb:b6:2a:17:b8:42:d6:41:37:
                    d0:49:3c:bb:d6:bb:66:f4:98:8b:9c:41:08:28:4f:
                    ac:88:c3:a7:d0:b4:65:92:0c:19:50:b1:6a:7c:51:
                    85:27:34:35:f0:8c:ad:17:e8:fe:39:ac:31:88:60:
                    73:2d:11:10:07:b2:be:dc:fa:d3:fc:fe:5d:86:8e:
                    89:10:13:2f:35:96:56:8b:60:56:f5:f5:b5:33:af:
                    a0:90:57:03:6f:96:ee:ad:d7:c8:87:2e:b9:57:d4:
                    66:57:15:5c:c8:cd:30:a6:8b:dd:40:fb:e8:40:a7:
                    ee:3b:e6:37:d3:19:42:30:94:bb:75:a3:5a:da:3a:
                    00:77:de:94:b2:31:7d:f7:de:2a:69:ed:99:5b:81:
                    cb:b7:44:ba:bc:1b:5e:84:da:96:44:f7:4e:2a:d5:
                    9b:0f:a7:ec:aa:01:ec:99:7b:b5:cc:7f:a8:e6:40:
                    9a:bf:9d:0f:66:23:2a:b4:3c:f4:42:ec:c2:b2:fe:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5A:0C:E6:B5:45:32:03:62:01:E7:B0:3B:E3:A0:DA:D2:76:72:BD
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:d8:a1:d3:ba:ac:99:94:a9:bc:cd:a1:8c:6b:eb:af:94:
         fc:31:c4:91:7b:0c:5b:8e:64:94:40:dc:32:ce:ee:58:50:7b:
         d2:a8:75:a2:08:5b:de:59:a9:60:69:61:cf:db:cc:97:33:41:
         57:2b:38:6f:ad:d0:ce:f0:f9:62:57:b4:c8:15:d8:08:20:58:
         d2:9f:83:ae:8b:37:1b:b2:4f:b8:87:a5:4a:12:92:ef:6d:a0:
         7b:77:d2:e4:07:32:9b:0e:93:e9:18:28:fb:f7:73:ff:9f:d0:
         a7:35:14:df:fc:38:6a:63:db:a7:5c:d6:34:2f:cf:88:4b:fe:
         66:b2:54:a8:31:3f:99:b3:fe:88:81:26:63:53:81:68:5a:63:
         b4:f3:ff:21:13:4c:cb:52:8e:5f:ea:28:d3:b7:5e:79:21:a0:
         02:85:4e:90:b8:b3:b7:a0:a5:0b:60:05:97:af:fd:45:32:38:
         97:de:be:72:a5:3e:52:1c:32:08:1d:dc:41:98:3b:13:92:fc:
         bd:7d:32:a4:e8:3c:2e:99:f7:92:2a:ef:0d:2e:78:40:29:50:
         32:fb:4e:3b:f4:cd:4e:06:97:af:91:c9:fd:4e:89:43:7a:5c:
         e5:d0:51:be:ac:3f:6b:c4:b0:0b:a3:9c:79:7b:ee:c2:5f:c2:
         02:31:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org