Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230312e3232302e36342e302f31392d3234203d3e2038313633.roa
File:                     3230312e3232302e36342e302f31392d3234203d3e2038313633.roa (raw, json)
Hash identifier:          lkPfKiyL/MyFt29Qxj31M39mcXxD5X6cRFUw2aUdfJo=
Subject key identifier:   C4:02:13:33:15:79:2C:07:6D:69:35:66:37:F0:8B:11:A5:56:82:76
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       38AAE953CBEB6A1082445B86E67DFAAAF069C81A
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230312e3232302e36342e302f31392d3234203d3e2038313633.roa
Signing time:             Tue 05 Mar 2024 17:43:03 +0000
ROA not before:           Tue 05 Mar 2024 17:38:03 +0000
ROA not after:            Tue 04 Mar 2025 17:43:03 +0000
asID:                     8163
IP address blocks:        201.220.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:aa:e9:53:cb:eb:6a:10:82:44:5b:86:e6:7d:fa:aa:f0:69:c8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Mar  5 17:38:03 2024 GMT
            Not After : Mar  4 17:43:03 2025 GMT
        Subject: CN=C402133315792C076D69356637F08B11A5568276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:8e:93:45:da:4f:fc:9f:b6:e9:df:89:e7:
                    65:c4:35:9a:63:0e:6b:7e:5b:01:50:a9:bd:e3:d0:
                    42:c2:ae:c1:a1:cb:4d:a8:58:13:f9:79:2c:21:44:
                    ad:d0:49:4d:be:5d:48:da:c3:30:e8:a2:e0:59:a8:
                    91:62:19:7f:cf:8e:86:87:3f:af:35:0f:5e:a3:3b:
                    b8:ee:8a:35:8f:8a:88:82:1a:e7:56:70:7a:37:66:
                    4a:47:44:95:b1:84:1a:66:f4:8d:1c:fa:d6:a9:ab:
                    00:1c:de:93:cb:10:07:75:7e:d1:e0:cd:68:06:d8:
                    06:2c:25:39:bb:0f:bc:4e:31:97:bb:68:a7:81:68:
                    af:80:2e:7e:ed:af:5f:dd:05:f3:41:8a:66:95:c8:
                    36:c5:fb:fb:37:8e:fb:04:a4:a0:61:53:ee:f4:cb:
                    8e:2f:cf:65:a0:af:f0:c1:b1:e9:25:20:91:24:6b:
                    e8:91:a2:f0:32:80:c3:62:b2:9f:1f:a9:c5:72:45:
                    ad:da:7d:b9:9f:7f:f0:3a:8f:88:b5:a3:5b:e8:df:
                    61:46:a0:41:09:b3:97:2e:b7:16:4e:89:e1:f5:6f:
                    18:c1:ac:69:83:72:c0:51:8f:13:91:a7:5e:80:5b:
                    64:71:46:0b:e2:65:1c:52:6d:84:a9:c3:bc:9c:07:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:13:33:15:79:2C:07:6D:69:35:66:37:F0:8B:11:A5:56:82:76
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230312e3232302e36342e302f31392d3234203d3e2038313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ba:42:26:9b:33:ab:ce:78:f1:60:d7:4d:28:df:99:d7:a6:7f:
         f2:f7:91:92:c4:d4:dd:0b:1f:1f:47:bb:62:d1:a5:4f:9b:34:
         c6:18:57:a0:47:bd:c4:ac:f1:a5:3b:84:7a:81:53:d0:c5:c9:
         29:96:f5:a2:1e:b0:30:3e:ba:f4:d8:f8:71:2b:ea:83:bd:f7:
         22:22:d0:05:72:7f:bc:39:76:c8:83:04:95:ae:44:f7:77:e7:
         e0:2a:7d:ad:a2:08:64:70:14:49:98:a4:c7:34:86:1f:14:8e:
         e9:b3:43:5c:eb:8e:35:d0:c3:6d:04:90:5b:37:1e:37:cf:85:
         37:3e:2b:fc:a5:58:4f:50:08:9a:4a:d0:b1:c9:35:a1:b7:c7:
         9e:c9:d4:de:48:9f:c3:74:43:49:d8:57:a6:65:b5:8c:62:1e:
         84:99:3a:fc:03:e3:c5:34:de:d4:bf:66:fe:d3:e8:7e:a1:8e:
         fa:3e:3a:bb:e0:db:57:80:78:e8:44:0c:49:d1:b6:42:b9:b6:
         f9:28:ec:90:d6:2f:39:45:7a:53:0d:2d:c6:df:6d:17:4f:14:
         72:bd:bb:a7:98:2e:4b:7e:16:3e:a9:06:21:04:a5:2c:79:2e:
         99:55:ea:d1:45:de:21:80:b0:1c:6b:5b:c5:0a:57:c5:4c:c5:
         98:e0:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:08:51 2024 by rpki-client on console-ams.rpki-client.org