Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa
File:                     3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (raw, json)
Hash identifier:          9inUUQvjihtBlIAqfKqqlAECJJ4QfmSCoCav56LrdrM=
Subject key identifier:   B8:6F:59:54:9B:14:A1:10:0B:C4:6B:67:5D:A6:EC:F6:F8:84:A1:2F
Certificate issuer:       /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial:       410EAA8C90873EA2B29102CD4A996CAC974D06F5
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa
Signing time:             Tue 05 Mar 2024 17:40:55 +0000
ROA not before:           Tue 05 Mar 2024 17:35:55 +0000
ROA not after:            Tue 04 Mar 2025 17:40:55 +0000
asID:                     273006
IP address blocks:        201.131.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0e:aa:8c:90:87:3e:a2:b2:91:02:cd:4a:99:6c:ac:97:4d:06:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
        Validity
            Not Before: Mar  5 17:35:55 2024 GMT
            Not After : Mar  4 17:40:55 2025 GMT
        Subject: CN=B86F59549B14A1100BC46B675DA6ECF6F884A12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:ce:7e:c1:b5:1d:8d:36:94:70:bb:07:c4:
                    ae:c1:bb:4a:39:76:c1:fa:9e:d7:08:d1:40:dc:a5:
                    56:b0:71:4d:10:3b:c1:28:e2:ae:21:df:41:9a:99:
                    8c:96:b6:a0:96:5a:b7:ac:97:8b:ae:3f:83:61:3a:
                    e8:8f:c1:0b:24:34:d8:a2:d3:18:b2:30:32:9e:9f:
                    e6:5a:9e:f0:a6:05:69:a2:47:47:fe:52:46:4c:17:
                    c4:7b:44:cb:38:37:a5:ec:61:54:22:c8:53:84:a0:
                    e2:06:a5:8e:a7:c4:6b:0c:c4:1a:69:60:5c:9e:2d:
                    56:07:5d:55:d1:e9:be:6d:2e:4c:a4:4c:69:2d:61:
                    bc:ac:ef:b7:81:7c:4f:7d:70:26:f9:9d:38:c2:2a:
                    21:32:6c:4a:86:44:44:5c:dd:83:75:a2:ce:b0:b0:
                    98:ca:9a:45:95:e9:54:bb:f4:74:d1:4d:2b:dd:a2:
                    e6:20:c4:13:96:5d:0f:15:1b:99:a9:91:8d:21:a9:
                    c8:b4:a2:c8:29:be:c7:8f:09:37:f3:31:8e:dd:c0:
                    99:44:e4:bf:04:78:3d:e5:58:28:b9:d0:fc:b3:d1:
                    1c:20:e3:be:66:c0:97:f2:11:12:3e:03:cc:92:8d:
                    34:ee:1d:5f:3b:48:4a:f2:d9:16:8a:f9:39:2e:fb:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6F:59:54:9B:14:A1:10:0B:C4:6B:67:5D:A6:EC:F6:F8:84:A1:2F
            X509v3 Authority Key Identifier:
                keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:9f:5a:b2:f2:ce:46:a1:f4:20:6d:90:cf:73:e2:e2:cd:f4:
         4e:b5:ac:18:e7:4d:5b:6f:46:4f:da:c6:8a:3b:33:32:5e:18:
         31:12:9d:62:9a:01:38:e4:6a:0c:b9:37:7a:c5:26:c4:a2:25:
         4d:73:36:79:53:f1:55:26:fa:03:34:9e:fc:dd:c8:8b:fb:1d:
         33:a8:d7:aa:70:b7:7a:e0:5e:90:c3:ed:56:ac:0d:17:e8:e3:
         83:0d:be:f5:18:71:bd:c6:e0:98:b2:b0:aa:a9:95:5e:59:0a:
         23:c5:92:69:b6:96:3a:ea:d5:84:7a:1f:46:02:5b:88:31:1f:
         dc:61:93:a2:66:0d:45:78:d1:28:62:49:62:0c:88:bc:52:0b:
         89:a2:1f:3e:16:56:e6:6d:f7:f9:ab:7d:13:8b:b0:75:f4:12:
         bf:01:72:1c:57:a2:19:c9:0f:44:47:2e:80:fc:d8:86:1e:5a:
         d7:4d:68:de:d5:10:39:9a:e1:ce:7b:3d:0b:35:5a:36:93:af:
         32:f1:1f:6c:18:49:21:bb:6b:67:36:aa:a6:c9:ec:0e:bd:62:
         01:e1:f4:0b:4a:23:88:91:f3:89:49:7f:1d:3c:9f:1e:88:ff:
         ff:12:fc:2e:01:d1:d4:04:5c:4d:2e:42:8c:f9:47:a8:16:0b:
         18:ae:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:28:18 2024 by rpki-client on console-ams.rpki-client.org