Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa
File:                     3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa (raw, json)
Hash identifier:          epQloKJkZnY3Izf+lmGPNdXweexDC5e2xKZO7GhYpFQ=
Subject key identifier:   39:28:05:88:00:82:26:40:8F:96:FA:F4:51:62:DE:B0:10:5F:65:32
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       5C5AFCF34F5A2A473E5462BFD814DA03AD119E90
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa
Signing time:             Tue 05 Mar 2024 18:11:22 +0000
ROA not before:           Tue 05 Mar 2024 18:06:22 +0000
ROA not after:            Tue 04 Mar 2025 18:11:22 +0000
asID:                     273111
IP address blocks:        200.50.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5a:fc:f3:4f:5a:2a:47:3e:54:62:bf:d8:14:da:03:ad:11:9e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Mar  5 18:06:22 2024 GMT
            Not After : Mar  4 18:11:22 2025 GMT
        Subject: CN=39280588008226408F96FAF45162DEB0105F6532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:d6:2e:67:f5:40:29:1f:1a:7e:3e:2c:a6:
                    30:e1:2f:ea:e7:1f:01:9d:e2:42:2d:87:10:03:de:
                    6b:1d:1d:f7:09:0d:fd:01:9b:54:84:d2:a0:52:33:
                    e2:6e:10:79:46:e0:26:5b:3d:04:cb:3b:6f:d8:de:
                    e2:e7:62:f8:e1:8a:93:f8:58:86:ba:ae:c4:1e:0a:
                    d8:11:ba:68:21:ed:3a:70:ef:e4:0f:6a:b8:09:de:
                    1a:1e:28:be:63:ee:0c:41:39:5f:67:47:2f:bd:69:
                    a4:29:41:8f:4c:77:4e:03:8e:0a:f3:8e:03:37:d5:
                    a3:c8:b6:26:7b:c6:37:64:3e:2b:92:6f:18:7f:99:
                    cf:4d:92:33:8c:4e:08:cc:5c:12:93:69:68:42:3d:
                    90:c3:1a:34:1f:fb:e2:75:f4:26:33:52:51:d9:09:
                    08:19:7d:f7:01:b5:30:e0:45:bd:c9:da:68:a6:25:
                    fb:d1:54:51:be:53:30:71:4e:15:ce:50:05:96:db:
                    bc:a9:e2:82:85:ed:f6:59:99:42:ef:d4:d8:3e:c9:
                    37:05:16:6e:2b:ae:ea:c5:3e:f2:82:fe:a7:60:60:
                    29:b6:35:d1:f8:af:9f:19:18:28:31:ea:64:88:62:
                    07:cc:46:f3:1f:be:af:69:a9:1e:c6:9f:9c:bb:92:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:28:05:88:00:82:26:40:8F:96:FA:F4:51:62:DE:B0:10:5F:65:32
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:98:04:d7:7d:90:64:c9:06:c0:85:7a:fd:78:29:c6:67:
         49:27:99:46:05:96:23:99:3f:3b:8a:eb:51:d3:05:1a:a1:f3:
         07:03:bd:5e:30:b5:8e:10:89:dd:2a:55:3a:5e:49:a3:4d:0d:
         96:e3:2b:a6:47:bc:3a:dd:47:f6:6c:32:2e:49:9e:53:25:13:
         ff:a2:aa:97:ed:0f:8e:b2:99:3b:e4:b1:c5:98:f2:55:3e:b5:
         7a:c5:a9:3e:9f:4f:9a:2a:fc:2f:15:a0:36:07:b4:50:fd:c7:
         9b:98:4e:c2:cd:6e:fe:cb:1b:71:8e:d1:16:a8:3e:a1:28:67:
         8d:dc:70:88:ec:9e:9e:d7:b7:d0:ed:85:75:0f:66:42:3f:38:
         f2:52:3d:b8:79:b5:71:bc:85:14:bb:80:ac:f1:3d:66:8f:86:
         07:47:60:14:92:9a:b7:26:fe:5b:f3:76:82:7f:be:35:d9:68:
         b1:f2:76:c6:36:82:1b:26:1e:4c:68:b0:d0:6d:05:91:60:86:
         59:60:56:6b:0c:7e:22:62:61:2a:3f:dc:a5:95:45:f7:cf:06:
         74:8a:c5:53:a7:b2:59:e8:fc:b9:f2:ac:06:af:b5:da:62:37:
         13:40:0e:91:f9:e8:f7:f5:87:b6:3a:ac:0a:56:68:d4:93:a4:
         93:08:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org