Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135312e302f32342d3332203d3e203134373534.roa
File:                     3230302e3131392e3135312e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          vDwVrKUBQF2WakUEJXNoJzZhB/yj3CRfdzX3DFGF2fM=
Subject key identifier:   F9:B2:3E:7B:B7:C7:4B:A3:51:3E:CB:EE:E5:FD:6D:15:DE:FF:89:68
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       39F9ABAE3CEA476F4432A3E9743995279DBFC15C
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135312e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:08:25 +0000
ROA not before:           Tue 05 Mar 2024 18:03:25 +0000
ROA not after:            Tue 04 Mar 2025 18:08:25 +0000
asID:                     14754
IP address blocks:        200.119.151.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f9:ab:ae:3c:ea:47:6f:44:32:a3:e9:74:39:95:27:9d:bf:c1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Mar  5 18:03:25 2024 GMT
            Not After : Mar  4 18:08:25 2025 GMT
        Subject: CN=F9B23E7BB7C74BA3513ECBEEE5FD6D15DEFF8968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:7a:2f:f8:a5:f9:6e:c4:5e:02:61:24:2c:
                    6b:a7:fd:b2:ee:8a:30:e0:2a:14:8f:95:48:7a:31:
                    c7:7a:c6:c6:2f:2b:78:fc:f1:e4:c9:b2:7f:44:7f:
                    a3:d5:54:99:22:11:32:71:66:c8:d3:25:cf:33:28:
                    08:d0:7e:6d:d3:c8:a2:e7:4e:28:7f:1e:b8:eb:c1:
                    c8:02:46:67:40:03:fd:1b:d2:c7:7a:01:1a:89:f7:
                    8e:f2:c8:5e:ca:33:70:8d:4e:95:15:91:8b:39:50:
                    f4:4f:dc:06:f8:23:c2:e7:d7:1c:6c:4c:fd:e2:62:
                    20:69:5f:8e:82:42:5d:80:0e:eb:33:a1:cc:1f:af:
                    6a:dc:60:fb:81:cc:61:6e:ab:67:df:78:65:73:74:
                    59:ba:b3:62:62:5f:3e:28:d8:fe:cd:8e:f2:c3:39:
                    8e:99:59:6c:89:c7:01:0f:29:2e:40:49:d3:39:36:
                    c7:35:99:b8:1f:73:8a:17:78:fc:99:7b:a4:60:ce:
                    06:ec:fa:d4:a4:0e:9a:90:84:00:cb:80:05:a0:54:
                    96:49:d7:ce:5d:eb:0d:2c:f3:ee:e2:47:6d:49:e3:
                    5c:72:74:78:21:28:58:98:a2:69:0e:79:26:f7:e5:
                    d9:0c:58:06:74:2e:18:1a:14:79:f2:b4:f9:8a:9f:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:3E:7B:B7:C7:4B:A3:51:3E:CB:EE:E5:FD:6D:15:DE:FF:89:68
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135312e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:5f:9f:b6:41:4d:77:60:25:74:3a:7b:b1:29:d3:45:40:9f:
         9a:1d:1f:66:4e:70:c3:dd:e7:32:91:d7:a8:37:bf:50:ef:fa:
         56:a0:80:b9:96:e4:82:ac:eb:ef:f1:04:ea:6f:7c:3e:bc:13:
         80:e3:bb:69:c3:99:7e:fa:57:a7:b2:e0:97:0f:42:29:9b:08:
         fb:45:17:72:94:e9:b4:30:75:14:f6:21:58:b2:c4:f9:a7:13:
         27:e8:9e:22:59:33:eb:c3:b3:c8:01:86:94:d2:c4:f3:73:a8:
         71:6b:99:e0:92:06:dd:5b:ef:54:48:8c:e2:cb:5d:a0:0e:8b:
         22:23:60:aa:44:9c:b2:b3:a4:d4:aa:78:4c:38:88:c0:d6:6a:
         9f:8b:67:b5:23:4b:21:b2:c9:34:c0:59:1d:b0:20:fb:69:be:
         3c:85:0c:ac:d4:b1:8d:0e:0a:0d:1e:13:c5:d1:5c:f6:7c:9f:
         83:7e:d2:16:bd:74:bc:d7:f3:2d:20:96:e0:8f:2a:ed:b6:02:
         2f:df:1d:2c:5c:47:46:d1:86:24:fd:64:ae:ae:b0:c6:44:ca:
         6b:23:56:ca:88:33:f8:48:9b:a7:68:e3:2c:70:67:08:c1:c4:
         bb:00:cd:43:41:e8:53:91:13:22:89:53:1d:bd:20:01:7d:22:
         61:5b:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org