Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e352e302f32342d3234203d3e203131313933.roa
File:                     3230302e36312e352e302f32342d3234203d3e203131313933.roa (raw, json)
Hash identifier:          omCJc+1iXszBcgxgHyEXKN+tzw71Bzu/f1iAy8N12po=
Subject key identifier:   30:C0:01:4E:A6:14:6D:FC:F1:17:04:AB:46:01:14:90:1B:D4:56:8D
Certificate issuer:       /CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
Certificate serial:       4D5CD2F1D35ECDA0B2D180DE02581D84A20B4601
Authority key identifier: 22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e352e302f32342d3234203d3e203131313933.roa
Signing time:             Tue 05 Mar 2024 17:57:41 +0000
ROA not before:           Tue 05 Mar 2024 17:52:41 +0000
ROA not after:            Tue 04 Mar 2025 17:57:41 +0000
asID:                     11193
IP address blocks:        200.61.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5c:d2:f1:d3:5e:cd:a0:b2:d1:80:de:02:58:1d:84:a2:0b:46:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
        Validity
            Not Before: Mar  5 17:52:41 2024 GMT
            Not After : Mar  4 17:57:41 2025 GMT
        Subject: CN=30C0014EA6146DFCF11704AB460114901BD4568D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:95:7b:44:81:cb:7b:37:7b:fe:47:6d:b6:
                    de:c3:2b:53:5a:4e:5d:b3:18:25:b3:1f:9c:71:15:
                    ce:75:8d:22:f3:29:98:d9:d9:f3:92:e8:a8:6d:69:
                    0e:23:90:34:a1:cd:28:f0:77:a1:83:9a:f4:ca:8f:
                    a6:56:40:64:b2:c1:04:47:81:9c:72:bc:8e:cd:dc:
                    fa:d6:eb:fc:e0:4e:34:1b:72:24:cb:a3:74:34:bb:
                    28:34:13:88:f2:07:f5:70:b2:00:3d:41:92:51:03:
                    d8:3f:f9:62:b4:1e:d9:f8:86:c6:37:c7:43:89:e1:
                    5d:8b:94:ad:a5:b8:95:4b:07:00:c6:9b:0f:f6:42:
                    4c:7f:2e:fa:00:1e:ad:1a:fc:2d:68:9f:dd:03:42:
                    99:88:96:da:0f:9c:93:1c:1d:e7:9a:8e:d9:eb:04:
                    5b:84:4a:94:8d:07:8b:22:b4:30:32:04:de:44:b8:
                    f2:21:19:6d:31:f9:ce:7f:58:86:6f:21:c6:f9:d0:
                    7d:7b:1b:30:14:a8:d0:9f:8c:f5:1b:35:01:6e:35:
                    5f:51:5b:a5:67:07:58:88:87:23:74:16:1b:17:3b:
                    4a:ea:75:51:7d:47:63:f1:9a:ee:cf:ea:fc:aa:2b:
                    12:7b:d2:51:57:60:cb:69:fb:76:fd:c3:e4:68:c1:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C0:01:4E:A6:14:6D:FC:F1:17:04:AB:46:01:14:90:1B:D4:56:8D
            X509v3 Authority Key Identifier:
                keyid:22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e352e302f32342d3234203d3e203131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:1d:d1:2a:1f:da:7f:b9:41:f2:bb:17:2f:cb:fb:93:87:22:
         9f:7b:0b:95:38:49:57:b0:03:1e:e4:74:25:f8:fd:8c:e4:bb:
         65:11:c4:57:89:71:17:db:68:a6:33:c0:59:58:84:fe:06:f6:
         ba:51:9d:43:d2:86:28:6c:eb:bc:af:e9:0a:e9:a1:32:1d:4a:
         15:f0:57:a6:c0:00:1c:47:0c:5c:1c:8b:44:53:dc:56:b7:55:
         e3:61:c6:42:5b:c5:20:9e:ec:22:d2:22:4e:f0:72:ae:7a:09:
         9c:c8:e1:f7:7b:db:a5:9a:08:6d:e3:1e:3a:91:cf:94:9b:57:
         4a:47:e6:13:3e:18:4d:84:93:82:f8:8e:2a:2c:83:58:c5:cb:
         52:64:0f:00:52:42:d8:08:44:73:5a:ac:2d:1b:c5:f2:d5:8a:
         10:3a:cd:c4:c5:04:97:52:a0:2e:5a:16:5f:fd:8f:22:49:68:
         8b:41:38:e9:6c:3f:c7:a4:09:f3:e6:d0:bc:40:e6:67:ab:a0:
         aa:42:19:c9:49:53:0e:f3:df:5f:20:9b:72:c1:1e:c9:58:db:
         5e:a1:9a:3d:6b:66:9b:c9:9e:86:bb:c1:8e:9e:d7:c3:1e:66:
         4a:ac:8a:a4:bd:5d:2d:43:ef:a5:fe:98:82:46:1a:59:5b:f5:
         96:05:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org