Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/3230302e3130372e3230372e302f32342d3234203d3e20323733303435.roa
File:                     3230302e3130372e3230372e302f32342d3234203d3e20323733303435.roa (raw, json)
Hash identifier:          M9VQuBmtwRvEE90Vo6fDBp7nW5OqDktSXnMixbHyUV0=
Subject key identifier:   42:90:70:41:3E:73:D3:0C:6E:15:31:74:CD:2D:81:05:21:22:23:8B
Certificate issuer:       /CN=52B4D645DC0765F1C95C57B2456FE263540E5A6C
Certificate serial:       5183086C898FEEE769D36D1F868678181FA9EC81
Authority key identifier: 52:B4:D6:45:DC:07:65:F1:C9:5C:57:B2:45:6F:E2:63:54:0E:5A:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/3230302e3130372e3230372e302f32342d3234203d3e20323733303435.roa
Signing time:             Tue 05 Mar 2024 18:15:44 +0000
ROA not before:           Tue 05 Mar 2024 18:10:44 +0000
ROA not after:            Tue 04 Mar 2025 18:15:44 +0000
asID:                     273045
IP address blocks:        200.107.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:83:08:6c:89:8f:ee:e7:69:d3:6d:1f:86:86:78:18:1f:a9:ec:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B4D645DC0765F1C95C57B2456FE263540E5A6C
        Validity
            Not Before: Mar  5 18:10:44 2024 GMT
            Not After : Mar  4 18:15:44 2025 GMT
        Subject: CN=429070413E73D30C6E153174CD2D81052122238B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:91:4b:d1:84:bd:27:a8:d6:92:48:fe:ba:
                    24:25:e6:10:5f:ae:ff:e5:67:d6:6b:fa:32:3f:4a:
                    c6:e3:75:95:f4:40:04:db:bf:38:24:78:e2:d3:31:
                    90:1c:4d:7f:87:44:01:bc:c0:c6:a6:10:e8:d7:89:
                    cb:be:88:58:e8:ea:44:a4:73:4c:b5:6b:e7:1d:42:
                    07:9a:25:a0:e8:3a:02:54:79:ec:e7:e0:be:a8:54:
                    f0:f4:fb:80:e4:96:4a:ca:80:aa:76:e5:53:a2:4c:
                    ba:fb:fa:ee:e5:67:a0:c7:9e:e2:fb:60:11:da:74:
                    cb:bc:69:51:b3:6f:70:8e:51:e0:2b:51:a3:64:71:
                    22:f1:9a:01:f7:a2:7d:b8:13:93:ef:b2:e1:f9:6a:
                    82:47:83:42:09:f8:47:de:59:87:1b:83:71:77:2e:
                    d3:8e:21:98:f5:47:41:04:53:eb:50:a6:e0:87:13:
                    4e:f4:3c:2a:0f:2a:f9:8c:46:99:17:59:a7:d8:96:
                    64:f6:57:56:77:8d:f7:5d:b0:bc:8f:da:8e:7d:8e:
                    36:48:ea:f2:0f:78:bc:45:79:87:14:7b:2d:a5:6e:
                    c9:4d:47:d3:82:00:4e:b1:33:d6:52:1a:a8:41:9b:
                    48:9c:79:94:dd:cc:c6:dc:d2:7e:b5:97:58:51:2d:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:90:70:41:3E:73:D3:0C:6E:15:31:74:CD:2D:81:05:21:22:23:8B
            X509v3 Authority Key Identifier:
                keyid:52:B4:D6:45:DC:07:65:F1:C9:5C:57:B2:45:6F:E2:63:54:0E:5A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/3230302e3130372e3230372e302f32342d3234203d3e20323733303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0e:a9:92:ff:aa:44:31:0a:b6:70:67:8a:7a:5f:37:71:d0:
         c6:38:fa:a2:aa:e2:22:73:6c:56:58:a2:a0:42:d7:a3:df:af:
         16:bf:a7:d8:92:6b:73:6d:18:68:32:86:4e:5b:59:a0:3c:1f:
         fe:68:cb:70:84:90:62:01:53:af:b4:12:0d:05:db:a6:2f:64:
         2f:8d:51:45:71:da:7d:15:28:6d:aa:d5:16:e6:d4:f9:21:eb:
         a7:a7:f5:bb:bb:28:cb:3f:14:3b:a9:b3:e6:22:18:98:1e:c5:
         c0:c3:a3:f5:74:76:0d:c6:f0:ce:a3:a6:b6:b3:44:52:04:36:
         17:52:9c:86:f8:c2:31:c1:cf:dc:f4:30:40:5b:4a:ce:86:2e:
         10:7f:50:c0:22:89:31:63:66:23:10:31:c5:27:52:5d:31:31:
         39:8d:97:be:3f:5c:03:f5:e4:aa:d6:a0:84:bd:c4:e4:41:bf:
         c7:76:89:77:34:91:b3:31:c7:d4:e7:70:c9:a5:6e:19:3a:d3:
         18:ca:69:b7:33:9d:19:83:38:02:b3:89:ea:d3:de:36:15:c0:
         66:39:27:0d:06:60:e6:bd:d2:2d:37:e0:2e:b6:c8:84:6d:95:
         4b:cb:30:28:50:75:e5:82:d2:c8:4b:45:ea:41:ff:25:ad:d9:
         3e:00:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:16 2024 by rpki-client on console-ams.rpki-client.org