Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32322d3232203d3e203238343332.roa
File:                     3230312e3133312e3233362e302f32322d3232203d3e203238343332.roa (raw, json)
Hash identifier:          s0Yvi4eXg9onq+wD1thRKux5+uYZG+vK3SeVJkASJR0=
Subject key identifier:   84:34:BA:F3:B3:0E:9A:1F:53:07:F3:D0:EA:55:A2:33:2C:9E:18:19
Certificate issuer:       /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial:       19452E77049A7BD88C380BF1D7F1F9CD0F4A1C1D
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32322d3232203d3e203238343332.roa
Signing time:             Tue 05 Mar 2024 17:42:19 +0000
ROA not before:           Tue 05 Mar 2024 17:37:19 +0000
ROA not after:            Tue 04 Mar 2025 17:42:19 +0000
asID:                     28432
IP address blocks:        201.131.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:45:2e:77:04:9a:7b:d8:8c:38:0b:f1:d7:f1:f9:cd:0f:4a:1c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
        Validity
            Not Before: Mar  5 17:37:19 2024 GMT
            Not After : Mar  4 17:42:19 2025 GMT
        Subject: CN=8434BAF3B30E9A1F5307F3D0EA55A2332C9E1819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f6:18:d5:6e:c8:c3:14:f1:03:5b:2d:43:91:
                    af:d5:e9:09:fb:2d:cc:01:7e:f2:f9:a2:93:75:40:
                    53:d6:fe:71:4b:22:a6:5f:06:da:92:17:26:94:c4:
                    15:ba:73:a9:41:0d:a0:a2:12:b9:8d:92:20:53:98:
                    a6:c0:bc:c1:9b:a2:a8:f7:9b:eb:26:a0:e2:df:62:
                    3c:24:1d:c3:15:3f:5a:59:4d:52:80:72:61:8c:58:
                    48:bd:74:5e:fe:b8:77:4e:86:18:a7:0b:6f:5a:1d:
                    33:2f:4e:23:8e:70:11:36:e8:70:0e:d6:6c:2c:5d:
                    d5:ee:a9:9b:cf:e9:99:b8:5f:e6:4f:61:9d:cb:b2:
                    d9:53:63:2a:d3:a0:be:0d:e1:2d:2f:9b:f8:81:2f:
                    aa:33:62:1a:32:10:73:49:4e:ee:0a:84:d3:04:bb:
                    ba:07:ae:49:9c:1f:fe:b6:f3:73:af:58:a3:93:1e:
                    1b:6c:5e:6c:eb:fd:a7:f1:8f:e4:2d:12:67:16:37:
                    32:cd:e0:4c:b7:8e:db:76:3b:ac:c2:6a:c6:aa:fc:
                    cc:e7:9a:33:da:f6:e8:bd:9f:8c:fb:0c:92:82:9e:
                    45:92:c7:2f:15:89:40:21:bc:8b:dc:47:0a:81:64:
                    e2:c7:63:f7:85:4c:e0:4c:58:62:bb:d8:4b:52:1a:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:34:BA:F3:B3:0E:9A:1F:53:07:F3:D0:EA:55:A2:33:2C:9E:18:19
            X509v3 Authority Key Identifier:
                keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233362e302f32322d3232203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:55:9c:98:1f:7a:09:6d:98:83:7e:c5:4f:3e:bc:64:e2:f3:
         a0:1e:ce:9f:c6:cc:40:38:b1:6e:02:27:85:c0:5a:10:2a:ba:
         4d:06:9d:49:31:4c:b6:46:20:99:9b:c9:13:61:b4:ad:44:4e:
         49:c5:33:93:ef:0c:e9:ec:b8:10:91:34:6a:5f:a3:94:02:2b:
         1d:0f:70:d9:8e:57:b5:18:82:38:b9:5e:9e:37:76:a6:a0:e2:
         1c:ae:a2:2c:78:3f:98:14:44:0a:35:45:87:46:a9:3e:25:b3:
         7b:df:91:cb:f1:11:85:d5:34:ac:83:aa:2e:e9:39:b5:42:4e:
         b9:d0:f3:37:e1:e6:03:25:b0:78:9f:38:d8:e9:85:ef:c5:5f:
         fb:a1:19:00:f1:f7:4a:d2:4e:62:95:4b:bb:4f:9a:fb:bf:3b:
         8c:a2:1d:1a:4e:ba:5f:56:ce:32:79:d8:32:fa:9f:a0:95:7a:
         4e:ab:72:2a:99:79:b9:89:40:6b:7a:0c:e0:b5:1b:92:62:9c:
         2d:69:1f:3e:53:60:3d:0b:28:19:54:61:a8:12:a4:66:b2:1c:
         3f:5f:50:2e:5d:b6:55:b1:9d:e1:1c:17:fb:ad:8c:ee:8e:56:
         ce:16:09:4f:ba:a4:98:9f:84:08:b0:44:04:02:9a:98:0f:c0:
         8c:a8:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:20 2024 by rpki-client on console-ams.rpki-client.org