Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/3230302e39312e34342e302f32342d3234203d3e20323633373032.roa
File:                     3230302e39312e34342e302f32342d3234203d3e20323633373032.roa (raw, json)
Hash identifier:          9MIJAPwvPg7v/p8pog6sDYwxtT2KxkUI8PbSCbB9xVY=
Subject key identifier:   53:F0:99:7B:3B:2C:36:D8:CF:86:5A:25:0E:B4:47:00:9A:25:FA:3A
Certificate issuer:       /CN=4B09F2EDBF012C04EB09D93C9EFA891B3221846D
Certificate serial:       1D4C31EC3A170F5EE7EDF6377021E4D8BBBB66C7
Authority key identifier: 4B:09:F2:ED:BF:01:2C:04:EB:09:D9:3C:9E:FA:89:1B:32:21:84:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/3230302e39312e34342e302f32342d3234203d3e20323633373032.roa
Signing time:             Wed 04 Dec 2024 15:10:00 +0000
ROA not before:           Wed 04 Dec 2024 15:05:00 +0000
ROA not after:            Wed 03 Dec 2025 15:10:00 +0000
asID:                     263702
IP address blocks:        200.91.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Dec 2024 14:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4c:31:ec:3a:17:0f:5e:e7:ed:f6:37:70:21:e4:d8:bb:bb:66:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B09F2EDBF012C04EB09D93C9EFA891B3221846D
        Validity
            Not Before: Dec  4 15:05:00 2024 GMT
            Not After : Dec  3 15:10:00 2025 GMT
        Subject: CN=53F0997B3B2C36D8CF865A250EB447009A25FA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:8d:0b:06:74:2a:dd:42:91:d4:92:34:72:
                    aa:75:be:24:a0:d3:f9:0b:8e:4f:fc:4a:ff:3f:4e:
                    ff:10:1e:1a:17:1e:61:26:78:64:50:67:fb:48:37:
                    b7:41:81:0a:44:51:28:1d:c8:d1:b4:a5:4d:9b:04:
                    e6:7a:52:c1:ea:62:d6:b2:55:3f:c9:2c:aa:d5:e0:
                    29:99:cf:71:52:18:55:60:1d:9b:68:e0:c2:df:5c:
                    96:60:34:a0:b4:6b:a1:ed:02:ff:d5:b5:50:cd:f5:
                    12:e4:2a:39:d4:95:6c:f1:fe:f4:c9:78:5f:32:40:
                    1d:0e:fe:3f:b3:e3:02:1e:83:19:57:1d:3d:1b:6d:
                    0f:e1:08:96:a7:97:3c:62:e7:72:61:44:4c:68:94:
                    39:33:75:1f:e4:05:50:cf:06:db:08:b4:3f:5b:1e:
                    08:aa:cf:fc:3a:e2:0d:c3:ef:70:96:27:d4:ed:40:
                    45:90:89:dd:84:5c:53:bc:cf:56:b8:6b:70:79:a6:
                    41:90:73:4b:af:37:44:00:d8:a8:bc:69:a1:78:13:
                    59:af:0b:a7:bc:5b:20:2c:43:83:67:d3:c3:f7:7a:
                    ae:11:91:eb:5c:5f:4d:a7:86:47:92:88:66:31:71:
                    9d:ba:72:a0:60:8b:b9:54:c7:f6:7a:a8:aa:76:50:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F0:99:7B:3B:2C:36:D8:CF:86:5A:25:0E:B4:47:00:9A:25:FA:3A
            X509v3 Authority Key Identifier:
                keyid:4B:09:F2:ED:BF:01:2C:04:EB:09:D9:3C:9E:FA:89:1B:32:21:84:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/3230302e39312e34342e302f32342d3234203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:1a:01:08:71:6a:af:a2:f2:7b:d5:2f:41:c5:d3:77:1b:d8:
         f7:db:9e:39:4c:0b:e6:67:2e:88:5e:c9:47:a5:fd:03:38:3d:
         a8:9e:c5:05:61:da:d0:1a:65:0f:a9:47:33:61:1c:a1:3a:3a:
         e6:f5:9d:e3:45:98:b2:67:dd:78:3f:4f:47:aa:68:09:c1:c4:
         7f:4c:7a:a8:ee:e3:8c:9a:1f:18:bb:07:bd:09:28:10:ca:d5:
         fd:ab:63:58:17:fc:bb:8c:80:02:84:48:a5:4f:70:7f:a2:0b:
         8d:ee:a1:48:25:7f:11:6d:06:a8:5b:84:af:88:99:51:2f:69:
         36:87:5c:d4:45:b3:b1:93:5e:05:2a:33:76:4d:42:56:e0:39:
         f5:0c:85:a6:1c:3a:f5:95:51:00:d6:71:bb:2d:a7:46:5f:3a:
         4b:73:e8:36:a2:4c:c0:2c:d9:95:0c:4c:7a:8c:c9:fb:5c:98:
         d5:32:20:0e:be:d3:4e:f6:2c:aa:91:18:74:bb:28:94:be:1d:
         07:ca:09:1d:de:2c:c1:94:33:9c:3b:35:a1:a3:2b:92:f4:22:
         5a:db:fa:b9:c5:3b:58:da:27:d5:0f:d6:f1:da:73:6d:db:d1:
         bc:59:06:96:05:9f:00:da:55:dc:c9:ed:c1:e3:cd:50:6e:6c:
         57:cb:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 08:54:11 2024 by rpki-client on console-ams.rpki-client.org