Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa
File:                     3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa (raw, json)
Hash identifier:          +EBX9F3u4WYEDZbuX+5sFsiqCHXeDY5Dt5FmXHyYjGQ=
Subject key identifier:   92:6D:36:CC:40:61:20:AD:E8:77:C6:2B:41:F9:89:7C:56:D5:8A:3F
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       2CEC445961131A011D097C8D95761924462363B6
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa
Signing time:             Tue 05 Mar 2024 18:11:23 +0000
ROA not before:           Tue 05 Mar 2024 18:06:23 +0000
ROA not after:            Tue 04 Mar 2025 18:11:23 +0000
asID:                     273111
IP address blocks:        200.50.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ec:44:59:61:13:1a:01:1d:09:7c:8d:95:76:19:24:46:23:63:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Mar  5 18:06:23 2024 GMT
            Not After : Mar  4 18:11:23 2025 GMT
        Subject: CN=926D36CC406120ADE877C62B41F9897C56D58A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:cf:12:1f:da:5d:63:ce:ea:72:5b:8e:15:
                    5b:e6:f6:ed:c7:d2:50:78:42:1f:e9:1e:bf:17:0c:
                    17:89:86:11:b8:04:40:a0:e8:4e:4c:94:e3:ca:12:
                    ec:fb:d8:97:86:26:c2:ff:f5:46:c2:62:0f:fd:5d:
                    fc:83:2a:95:e4:fd:e4:16:70:20:72:50:e3:07:2b:
                    90:16:1c:81:64:c0:e1:4d:86:a5:3e:e7:7e:e7:f6:
                    0a:32:05:04:31:9c:bf:f2:64:1b:2e:21:f3:31:1e:
                    05:25:fd:3b:ca:4b:35:0e:ac:75:9d:46:c1:46:7d:
                    e4:85:2f:d1:2d:19:38:14:42:08:a0:d5:ff:7a:be:
                    fb:d2:85:bc:19:6c:cd:bc:6c:14:8f:6a:74:fc:a7:
                    75:3b:56:22:a4:56:4e:ff:e5:d2:8a:d1:d4:61:5c:
                    4b:29:17:93:b0:d7:05:63:56:92:cf:d7:97:73:5f:
                    3f:e4:e1:00:72:bc:94:27:40:03:e0:cb:b9:68:de:
                    5c:7f:74:51:7a:d9:d6:0e:af:1f:b5:de:6f:52:de:
                    dd:c6:bc:55:04:34:16:43:7e:9e:7d:3c:11:d9:91:
                    8b:e3:21:64:c7:e0:44:d5:cf:e9:72:4d:f2:0f:40:
                    1a:de:d8:ec:9e:ba:78:e7:c1:38:c8:95:7e:b4:f3:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:36:CC:40:61:20:AD:E8:77:C6:2B:41:F9:89:7C:56:D5:8A:3F
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:4d:f9:e9:b0:17:b6:42:ab:7f:1a:a1:09:e4:d0:cf:41:ea:
         ea:18:95:61:50:44:10:eb:9e:e1:50:11:3c:dd:dc:19:6a:08:
         ad:da:90:58:45:2d:ba:ba:39:25:f3:d4:92:de:63:ab:f2:29:
         3c:92:8d:8c:c3:9c:d2:b4:5b:ed:62:58:3c:96:32:b9:9e:02:
         2f:cf:c9:f7:71:96:86:9b:99:ca:16:04:31:9a:bd:6d:a4:33:
         3c:ed:fd:47:a4:84:40:92:86:ed:2d:49:36:21:a1:16:00:1a:
         11:e2:37:b2:8a:a7:87:ba:73:5c:c1:a6:f2:a0:0a:3f:15:61:
         ba:42:73:86:c3:d7:b3:1c:ab:92:c8:97:d8:e5:f9:14:dd:27:
         af:51:e0:42:0e:68:4b:fc:e6:bd:a9:8e:79:e0:69:e1:5b:72:
         1e:fd:f1:f4:9d:d5:0a:bf:c3:64:97:38:3f:ea:24:cd:1a:a5:
         6f:a4:96:1b:9d:76:8f:39:6b:47:71:4b:23:1a:29:04:4a:de:
         69:37:ac:5f:ee:ae:f1:99:ee:9f:e9:ac:84:76:dc:60:4e:26:
         97:d0:86:48:66:a7:59:e2:56:b9:04:b2:08:83:f9:a0:59:29:
         58:7b:31:ca:05:e2:3f:75:14:e3:f5:12:f9:d3:32:63:e5:9e:
         3b:61:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org