Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/3230302e33332e32362e302f32332d3234203d3e203238353031.roa
File:                     3230302e33332e32362e302f32332d3234203d3e203238353031.roa (raw, json)
Hash identifier:          Jr+deNi2h4Gmy8HqCoFh+f3T/C3Uf2VBGVd1RhLCFy4=
Subject key identifier:   B0:DC:6B:CC:A4:59:34:6D:19:94:CA:96:40:90:F6:61:B5:25:44:D6
Certificate issuer:       /CN=7E458BAEF9BA9DCE3AA516F258A994358878C467
Certificate serial:       01308E6212CB6DBACE7B0C91163020AF290C8339
Authority key identifier: 7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/3230302e33332e32362e302f32332d3234203d3e203238353031.roa
Signing time:             Tue 05 Mar 2024 18:11:08 +0000
ROA not before:           Tue 05 Mar 2024 18:06:08 +0000
ROA not after:            Tue 04 Mar 2025 18:11:08 +0000
asID:                     28501
IP address blocks:        200.33.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:30:8e:62:12:cb:6d:ba:ce:7b:0c:91:16:30:20:af:29:0c:83:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E458BAEF9BA9DCE3AA516F258A994358878C467
        Validity
            Not Before: Mar  5 18:06:08 2024 GMT
            Not After : Mar  4 18:11:08 2025 GMT
        Subject: CN=B0DC6BCCA459346D1994CA964090F661B52544D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:91:90:0f:d1:4e:5e:fb:b1:94:fb:71:82:41:
                    01:65:22:0c:19:a1:a7:e0:76:85:b7:7b:0a:99:fe:
                    81:bd:4f:e1:db:21:db:7a:29:2a:5e:80:cb:c6:31:
                    aa:c9:bb:1e:de:87:32:76:11:75:02:55:53:10:7e:
                    d5:73:07:ce:9b:25:61:e3:6a:a5:ae:55:38:46:ad:
                    c0:1f:f6:a2:92:04:bf:e5:f4:e4:86:8a:6b:9f:9c:
                    10:f4:a9:74:da:a8:e4:51:54:3b:04:bd:60:1c:d8:
                    38:a2:07:8e:23:b6:ac:85:b7:0e:96:61:b6:a2:7f:
                    17:fb:85:97:07:d6:2b:8c:c6:2e:72:a7:5c:2d:ac:
                    18:21:cd:a6:4b:9d:64:69:21:69:c7:38:f7:f6:d7:
                    07:f6:9c:cf:72:8f:3b:4b:ab:01:07:b1:25:70:16:
                    03:6b:d7:49:54:0f:9d:1d:ce:00:72:52:b0:91:81:
                    b3:b9:9e:42:2b:6c:cb:e6:4e:8a:f7:1f:56:b5:2e:
                    93:16:e8:5f:11:b9:68:68:8e:a8:ac:0f:67:40:33:
                    2f:c8:8d:f4:83:48:2f:1b:7d:0c:c6:52:98:fa:b7:
                    2d:0f:07:e4:81:d9:25:30:d4:ba:e2:35:20:9e:e0:
                    3a:31:18:6b:a0:57:b5:cc:09:ec:61:20:8f:6f:fd:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:6B:CC:A4:59:34:6D:19:94:CA:96:40:90:F6:61:B5:25:44:D6
            X509v3 Authority Key Identifier:
                keyid:7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/3230302e33332e32362e302f32332d3234203d3e203238353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:ba:0e:cc:37:ca:3a:3c:a2:84:16:1e:bf:7c:06:6b:94:d7:
         87:70:30:1b:20:d5:6e:86:64:72:18:c2:ee:05:8f:f7:90:fd:
         9b:d6:38:4c:cb:b5:a0:ae:c6:0d:ea:ee:ad:b4:3f:d5:c6:2d:
         58:73:37:62:c6:dc:0b:20:77:ea:4f:f3:46:9a:95:2f:42:52:
         1f:35:39:10:a8:22:18:10:df:7c:8c:44:23:1a:a7:c1:a7:63:
         36:53:d0:9a:60:e1:14:10:99:86:9f:ba:d1:10:fa:b6:98:9e:
         70:83:1e:06:67:3d:5d:e8:d1:7a:11:a3:82:23:52:62:18:54:
         bb:4c:d8:1d:95:0b:20:5a:8e:fe:d1:0c:0f:0d:45:26:f7:a0:
         13:42:a9:c7:ac:ea:10:13:4d:50:23:5b:1f:b7:db:15:c1:b8:
         53:b8:b3:65:82:2e:bb:8c:28:4a:ea:59:88:cd:69:10:85:fd:
         ad:67:33:34:2b:a4:70:cf:49:7f:c5:57:4f:b6:b1:6b:87:d9:
         6d:41:2b:fc:72:5f:ed:80:17:66:bc:ff:8d:23:5d:20:0e:a5:
         b5:9f:2f:22:7d:71:d7:a5:d0:3f:6b:84:c9:9c:0f:e6:68:e8:
         8f:8e:bb:54:15:e7:51:96:49:06:87:63:c8:cd:0a:cc:41:3c:
         da:7b:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:44 2024 by rpki-client on console-fra.rpki-client.org