Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39332e302f32342d3235203d3e203130363937.roa
File:                     3230312e3233342e39332e302f32342d3235203d3e203130363937.roa (raw, json)
Hash identifier:          YWMBHBZdkwwM2vQZ+UnZcxBgElAJTUNi+f/vKGJ3HKU=
Subject key identifier:   B9:EB:CE:C8:A7:8B:55:03:80:2B:FB:4D:D7:C2:9E:5B:73:D1:1A:78
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       250542CD31D0D473788061FEE09982E92AE43B25
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39332e302f32342d3235203d3e203130363937.roa
Signing time:             Tue 05 Mar 2024 18:00:52 +0000
ROA not before:           Tue 05 Mar 2024 17:55:52 +0000
ROA not after:            Tue 04 Mar 2025 18:00:52 +0000
asID:                     10697
IP address blocks:        201.234.93.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:05:42:cd:31:d0:d4:73:78:80:61:fe:e0:99:82:e9:2a:e4:3b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:52 2024 GMT
            Not After : Mar  4 18:00:52 2025 GMT
        Subject: CN=B9EBCEC8A78B5503802BFB4DD7C29E5B73D11A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:f8:21:13:73:88:f3:d2:11:2d:eb:3d:f7:
                    54:ea:87:6f:3a:a8:81:64:21:17:51:d3:ad:a9:da:
                    06:50:89:18:ff:4e:84:5d:25:b7:7f:8c:e9:f5:9f:
                    2f:72:30:69:7b:c0:b1:44:d4:f4:43:b4:04:22:d3:
                    5f:97:4c:53:19:e9:d8:ea:88:b6:c9:32:5a:54:86:
                    90:da:c7:49:97:84:6c:a5:fc:29:95:af:a3:1c:cc:
                    9e:20:dc:59:6b:8a:17:88:be:5a:54:df:cc:ab:9f:
                    b9:d7:9d:d0:6c:22:f7:c7:1d:82:0f:08:f5:43:61:
                    54:e7:0e:ec:6a:af:8c:a1:c9:6b:07:a9:7d:41:87:
                    7b:96:56:4c:92:24:8d:f0:a7:78:99:27:65:ba:35:
                    07:94:d0:ad:b9:17:f4:d8:af:74:75:2d:d7:8d:b8:
                    3d:22:13:d5:f0:ca:ae:66:7a:26:ca:df:b2:20:11:
                    4d:ee:61:4c:e7:02:cd:7e:f2:8c:bf:ac:a8:48:c8:
                    0b:20:b4:90:3e:93:56:e2:cc:54:0a:ae:65:28:a0:
                    4c:b3:6e:bc:f9:2b:b2:16:ff:b9:8e:28:5d:82:af:
                    1e:4f:23:34:fe:63:c5:e1:f8:4d:42:f0:2a:0f:46:
                    e2:43:27:62:d5:99:d6:77:f9:fc:e6:bf:ca:a2:22:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EB:CE:C8:A7:8B:55:03:80:2B:FB:4D:D7:C2:9E:5B:73:D1:1A:78
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39332e302f32342d3235203d3e203130363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b7:fc:1b:b4:a4:97:9a:72:ce:77:71:72:1e:4d:79:50:d7:
         10:c7:63:5a:6a:f7:07:93:3a:70:fd:3a:db:16:1e:04:43:42:
         1e:73:7d:3b:b3:d8:8a:3b:53:20:d0:46:a5:12:92:b7:1a:79:
         f8:d3:29:1a:30:70:55:bf:be:7b:a0:94:51:fd:e2:06:8a:18:
         35:c2:96:6b:3b:05:81:b6:b9:69:33:51:ef:bf:30:76:2c:18:
         c6:c8:57:05:f2:f9:03:56:19:6f:0b:5e:99:58:10:39:ac:76:
         13:da:e8:45:ea:13:30:4f:3f:b6:eb:08:67:38:ea:ce:dc:ef:
         9e:54:18:0b:6b:9a:ca:47:93:de:3e:f7:42:b8:9a:56:0b:a4:
         7a:dd:08:9d:9a:ba:00:dd:1c:e0:a7:b7:d1:88:bc:19:99:34:
         a2:6f:d2:4f:41:c4:5e:a9:a2:68:36:2c:01:f6:9a:7e:08:ac:
         1b:44:21:9c:67:65:4c:36:4c:ec:98:13:09:0f:59:4d:bd:6e:
         4d:4f:67:37:58:69:8f:b4:52:f3:9a:48:9d:08:29:7b:0b:0e:
         d8:7d:91:65:a0:21:b6:a1:c8:13:84:a0:80:b2:48:6d:36:0d:
         4c:03:0b:d7:9e:59:ab:6e:de:c3:18:a1:80:d7:ad:f3:ce:d7:
         9e:80:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org