Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/3230302e3130372e3230342e302f32342d3234203d3e20323733383333.roa
File:                     3230302e3130372e3230342e302f32342d3234203d3e20323733383333.roa (raw, json)
Hash identifier:          wHh1+V1M9t3wruf3FmWNcyH4rvPdqpycl4rVrZ0Usj0=
Subject key identifier:   86:21:46:D4:83:DD:07:F4:42:3F:86:D1:D6:C4:3E:D5:AB:A2:27:EB
Certificate issuer:       /CN=52B4D645DC0765F1C95C57B2456FE263540E5A6C
Certificate serial:       2F9B1BECD21E6CFCF742D60482BBCE51A6C907B3
Authority key identifier: 52:B4:D6:45:DC:07:65:F1:C9:5C:57:B2:45:6F:E2:63:54:0E:5A:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/3230302e3130372e3230342e302f32342d3234203d3e20323733383333.roa
Signing time:             Mon 24 Jun 2024 12:50:00 +0000
ROA not before:           Mon 24 Jun 2024 12:45:00 +0000
ROA not after:            Mon 23 Jun 2025 12:50:00 +0000
asID:                     273833
IP address blocks:        200.107.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:1b:ec:d2:1e:6c:fc:f7:42:d6:04:82:bb:ce:51:a6:c9:07:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B4D645DC0765F1C95C57B2456FE263540E5A6C
        Validity
            Not Before: Jun 24 12:45:00 2024 GMT
            Not After : Jun 23 12:50:00 2025 GMT
        Subject: CN=862146D483DD07F4423F86D1D6C43ED5ABA227EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:3e:98:bd:af:2c:1a:39:fc:71:1d:cb:92:
                    51:dc:f5:0e:7f:31:96:6b:52:7a:dd:9b:8b:d2:53:
                    91:8c:6c:87:2e:2a:81:0f:6c:33:bf:7e:41:ee:c9:
                    1b:95:df:5f:30:37:f1:7d:3e:b2:ea:2a:a3:53:e5:
                    b1:03:1d:c0:b8:c5:9f:d1:1e:33:c2:09:b4:4f:5a:
                    9b:37:b6:7b:45:de:09:80:3f:ba:a2:12:e0:b2:b7:
                    37:f4:8d:8d:76:4b:26:b1:2c:80:f3:9b:19:38:58:
                    dc:81:4d:2b:86:f0:03:43:d4:db:f7:47:18:b8:a9:
                    5a:61:31:b4:80:45:24:d3:81:68:a6:b5:a4:85:fd:
                    14:98:96:b8:91:cd:d5:4d:5a:e5:ce:ac:6b:5b:1f:
                    af:b5:67:f2:7e:f8:45:45:71:74:58:d3:9d:fd:a4:
                    df:5a:75:fa:f3:61:51:65:e0:a3:eb:52:68:e5:63:
                    4c:74:6a:f2:d4:a8:53:be:53:86:3e:c3:6d:73:b5:
                    aa:2d:90:77:a3:5c:40:54:36:44:bf:5f:d2:df:e3:
                    13:cb:db:52:94:f1:c3:5d:cd:9b:93:5e:b0:b0:77:
                    70:46:23:d8:ad:47:da:30:43:7d:ee:84:2f:2c:97:
                    9f:c7:7a:f6:f9:a7:29:49:c8:b3:88:d7:dd:2d:95:
                    19:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:21:46:D4:83:DD:07:F4:42:3F:86:D1:D6:C4:3E:D5:AB:A2:27:EB
            X509v3 Authority Key Identifier:
                keyid:52:B4:D6:45:DC:07:65:F1:C9:5C:57:B2:45:6F:E2:63:54:0E:5A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/3230302e3130372e3230342e302f32342d3234203d3e20323733383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:13:96:4a:35:aa:42:74:78:32:67:7d:6c:b1:21:33:fe:c3:
         cc:38:96:14:0d:42:41:0a:98:6e:90:66:49:95:b5:4f:15:1a:
         d6:73:4a:9c:f4:81:02:c0:3d:be:01:a2:01:25:ef:c1:1c:63:
         39:ad:e6:d7:12:6b:92:a5:08:d7:90:29:d9:b0:d2:0f:23:47:
         56:2c:56:87:fe:3a:64:4e:76:23:39:8f:98:2e:87:5d:36:d7:
         89:82:56:37:ce:fa:aa:6e:1f:43:44:b1:eb:40:08:e9:fc:77:
         70:40:c1:b6:1f:c3:66:73:9a:3e:a8:f7:3d:2b:46:e3:f9:de:
         56:1e:43:41:bf:a0:1f:66:76:73:0a:7b:a0:04:df:39:4d:c9:
         7c:fd:41:de:67:99:a5:ed:30:42:fd:55:17:6b:af:4c:1e:f2:
         1d:e4:b4:b5:e7:a7:f8:12:56:b9:81:d2:51:ac:d8:ad:32:57:
         40:8c:5c:30:11:89:17:32:42:6b:41:f7:87:bd:f5:fe:39:52:
         76:b6:72:ea:41:e8:22:41:ee:3f:5d:42:3b:6a:95:31:69:af:
         2e:7b:76:40:2b:74:34:ea:5f:97:6a:30:bc:cf:d9:aa:38:59:
         0e:9d:59:51:d0:ce:eb:c3:bd:84:d5:50:27:41:3b:f9:c2:08:
         c9:d3:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org