Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133342e302f32342d3234203d3e203237393634.roa
File:                     3230312e34392e3133342e302f32342d3234203d3e203237393634.roa (raw, json)
Hash identifier:          YzKnZVkbsys4w1+Di1BVITqg1wXtthI5EXVoMGO8B7s=
Subject key identifier:   8C:E0:C9:E8:35:EC:78:BA:B9:54:8D:E2:4A:78:40:13:43:BD:3C:80
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       54772BD1B983F5B5069AD5A593CE243E04FC91BF
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133342e302f32342d3234203d3e203237393634.roa
Signing time:             Tue 05 Mar 2024 18:21:11 +0000
ROA not before:           Tue 05 Mar 2024 18:16:11 +0000
ROA not after:            Tue 04 Mar 2025 18:21:11 +0000
asID:                     27964
IP address blocks:        201.49.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:77:2b:d1:b9:83:f5:b5:06:9a:d5:a5:93:ce:24:3e:04:fc:91:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Mar  5 18:16:11 2024 GMT
            Not After : Mar  4 18:21:11 2025 GMT
        Subject: CN=8CE0C9E835EC78BAB9548DE24A78401343BD3C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:1a:45:49:cc:e4:2f:0a:60:ac:aa:ac:55:
                    5e:37:ee:d1:b3:bf:a4:a8:a1:5d:04:b7:29:cf:e2:
                    14:a4:cb:70:7a:09:35:5b:e7:95:7e:8c:e6:be:03:
                    56:a0:b5:40:41:f8:34:d6:f0:3e:0b:b1:3e:32:31:
                    19:5f:07:15:55:6b:b2:43:79:93:27:50:e4:58:0d:
                    28:02:98:0a:e3:c6:76:2f:d7:38:1d:76:e0:45:f5:
                    27:68:16:7d:29:59:5e:9b:d1:22:e8:45:56:a0:a6:
                    11:59:fd:f1:80:01:56:bd:59:ec:f5:f0:ab:e1:6d:
                    fe:e4:d2:8f:54:cd:b8:7c:c8:06:86:06:82:3a:d7:
                    cb:ba:3e:08:e0:c2:91:5e:0d:73:4c:8f:ad:1d:73:
                    a1:b4:bf:fe:3a:e9:55:70:d3:61:c5:cb:8a:fe:d1:
                    37:a1:8b:5c:10:e7:fb:68:57:d4:36:4a:3c:36:76:
                    bb:61:4b:34:05:e4:31:2d:6c:00:5f:45:4b:94:c6:
                    91:1c:0e:85:b3:13:17:51:d1:60:48:c3:e4:43:23:
                    05:8a:15:c4:85:2e:f9:a4:3b:fa:b0:fb:85:22:d3:
                    2b:46:aa:ea:41:70:78:c5:d3:7e:04:ea:93:fd:ee:
                    cc:e9:05:11:45:4a:68:b5:a2:8d:81:8b:41:e7:04:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E0:C9:E8:35:EC:78:BA:B9:54:8D:E2:4A:78:40:13:43:BD:3C:80
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133342e302f32342d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:76:e1:1f:5b:90:45:5a:7d:bf:9b:88:4b:2a:25:5b:91:98:
         10:f6:73:11:cd:c0:ee:6b:e7:a2:d0:33:77:24:94:3f:49:4a:
         6d:8e:67:c2:29:b6:43:62:3b:78:15:27:e3:a2:28:03:68:93:
         27:42:66:cb:d8:99:3a:5c:2b:13:16:e1:68:a8:4b:57:da:f1:
         fd:a3:3f:74:a8:6d:11:54:20:18:a1:be:a3:50:2e:8c:e9:a2:
         7e:da:2d:72:26:80:7a:35:68:bd:de:0e:9b:c2:3b:ad:f0:9f:
         b4:3c:1d:b0:a1:3a:8c:d6:7d:c6:23:6c:2c:46:ec:5d:f8:af:
         78:c3:5a:1e:a7:8c:fc:37:5a:44:7e:df:7f:8b:f6:50:45:c0:
         48:8d:a7:b0:83:20:04:6f:90:9c:13:48:ac:80:ae:59:20:89:
         57:22:ff:a3:db:08:10:37:8a:6b:6c:78:b8:60:98:66:5c:9d:
         4e:f6:17:d5:f1:cd:87:d5:3b:9e:a7:c1:de:66:32:c6:d4:00:
         c7:ba:fd:0e:8e:d4:25:ee:71:0c:8a:c1:43:45:49:fb:97:5a:
         74:4e:cb:15:c1:10:10:09:41:f8:b7:79:ff:7b:d4:77:b4:36:
         83:a0:9d:1c:32:51:11:45:9b:2a:e3:43:c0:53:e9:be:69:30:
         62:0b:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:55:16 2024 by rpki-client on console-ams.rpki-client.org