Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3235312e302f32342d3234203d3e203237393533.roa
File:                     3230312e3233342e3235312e302f32342d3234203d3e203237393533.roa (raw, json)
Hash identifier:          6+kB6s2nJhweTl+3vdADF85TzqZzASp6+4itdZQH2QM=
Subject key identifier:   B4:CC:B3:B3:EB:C5:25:4C:63:07:23:CA:B3:94:C5:C7:CD:3E:66:07
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       563D3B5AE472F516B3FDF8DA621D85507ACB5719
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3235312e302f32342d3234203d3e203237393533.roa
Signing time:             Tue 05 Mar 2024 18:00:54 +0000
ROA not before:           Tue 05 Mar 2024 17:55:54 +0000
ROA not after:            Tue 04 Mar 2025 18:00:54 +0000
asID:                     27953
IP address blocks:        201.234.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 19:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3d:3b:5a:e4:72:f5:16:b3:fd:f8:da:62:1d:85:50:7a:cb:57:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:54 2024 GMT
            Not After : Mar  4 18:00:54 2025 GMT
        Subject: CN=B4CCB3B3EBC5254C630723CAB394C5C7CD3E6607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:55:1e:3f:1b:5e:fa:1f:61:ed:2d:fa:75:
                    6d:7e:14:10:b3:6c:f3:73:09:f2:29:05:15:a5:66:
                    37:e2:27:1a:30:e0:f6:82:f5:e0:78:18:f3:46:fd:
                    f7:27:58:22:26:58:1e:4d:10:bf:14:e0:15:18:7a:
                    84:1c:76:3e:c5:f4:e6:17:bc:df:c6:df:e1:b0:c9:
                    da:81:24:3c:4a:32:00:1b:ad:fd:51:78:ff:c5:f8:
                    65:c3:5a:af:a3:ad:77:25:c7:5b:be:b6:1b:3f:eb:
                    80:ca:20:cc:a2:ee:bf:a1:ee:71:99:c7:6a:64:4d:
                    11:12:1c:15:ae:0e:b0:a1:c6:c9:a3:fa:af:ed:3d:
                    b7:d6:d9:6e:51:94:5f:cf:84:5c:16:20:0d:57:f6:
                    a8:23:4d:81:ed:01:42:b0:c0:3b:cd:9d:03:10:c1:
                    bd:2a:66:6a:59:25:e8:56:39:07:6d:08:6e:1c:5b:
                    eb:93:b7:81:f1:01:d3:56:00:32:9b:38:a9:df:64:
                    82:38:97:99:39:64:e9:f2:b7:df:8a:95:c6:87:cd:
                    39:bd:f6:f6:2f:31:c5:14:ab:a9:83:b5:2e:41:26:
                    db:bb:d6:a4:c0:b5:76:3f:02:4b:d8:98:68:48:20:
                    f1:f6:50:6b:f6:94:a6:d5:b1:8c:9c:cb:2f:11:2d:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CC:B3:B3:EB:C5:25:4C:63:07:23:CA:B3:94:C5:C7:CD:3E:66:07
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3235312e302f32342d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f6:19:33:73:59:3d:1c:15:d1:9a:6e:fc:f2:5c:46:01:4a:
         6e:ea:cc:d0:28:f2:aa:9f:42:50:53:db:bf:8b:31:78:1d:cd:
         d3:95:7c:d7:cb:29:a5:c7:6d:38:4b:18:c3:8d:2a:cf:1b:85:
         4b:0d:a0:8c:03:0e:45:19:de:8e:1e:1c:c1:31:49:4c:29:7b:
         a3:30:7d:cc:d5:a6:49:41:33:b1:c9:cc:cf:61:0d:e8:74:ce:
         c4:96:6f:18:06:5a:5b:6b:24:60:06:0a:03:41:2f:ca:d4:d1:
         5d:de:f4:13:a6:70:66:8a:13:9b:f3:da:43:79:08:da:51:4f:
         3d:56:0e:e4:bf:5b:b5:17:4d:7d:7f:59:16:59:e2:e1:4c:da:
         b8:6e:ab:0d:b8:51:d6:13:94:a5:a1:30:d2:ec:b2:91:a6:80:
         40:02:0a:61:d7:19:f6:12:20:59:b6:60:e2:d9:32:35:dd:5f:
         b7:06:9f:25:15:ea:f8:5e:10:2d:d0:64:c7:25:71:13:3e:07:
         c7:3e:5d:ca:33:4b:fb:cc:21:3a:31:f5:19:d8:28:79:54:49:
         b5:49:ee:8d:20:c0:ec:3c:79:97:48:b0:40:5d:8f:32:fb:4a:
         dc:77:04:62:b9:53:48:9d:38:8c:fc:49:fb:5f:9c:2e:e7:12:
         8e:50:e3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 10:18:22 2024 by rpki-client on console-fra.rpki-client.org