Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233372e302f32342d3234203d3e203238343332.roa
File:                     3230312e3133312e3233372e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          t1u2bVandI/M9l+XMH8zQi4DXQys6f3S/4cfzXOSDm0=
Subject key identifier:   77:95:79:5F:57:C6:50:F9:6C:B8:0C:C3:B4:95:F1:70:D2:CE:D5:48
Certificate issuer:       /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial:       60C0CF5C86A553A6F6CF9CB93E27B93DE10B90C9
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233372e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 05 Mar 2024 17:42:18 +0000
ROA not before:           Tue 05 Mar 2024 17:37:18 +0000
ROA not after:            Tue 04 Mar 2025 17:42:18 +0000
asID:                     28432
IP address blocks:        201.131.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c0:cf:5c:86:a5:53:a6:f6:cf:9c:b9:3e:27:b9:3d:e1:0b:90:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
        Validity
            Not Before: Mar  5 17:37:18 2024 GMT
            Not After : Mar  4 17:42:18 2025 GMT
        Subject: CN=7795795F57C650F96CB80CC3B495F170D2CED548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:60:0f:3d:84:73:8e:2a:e1:8c:fb:6c:65:
                    09:74:23:97:e9:e7:24:6c:06:7d:e1:08:1f:8b:a0:
                    fd:45:72:39:36:9b:0e:19:63:18:10:f1:28:58:9d:
                    c5:3b:a2:5b:f3:a3:8e:77:d7:3e:62:b9:d6:fe:09:
                    b3:eb:f5:b0:d7:d1:b1:52:0d:39:cc:ea:51:e8:1e:
                    a1:77:8c:a9:61:18:80:5c:d0:19:39:48:84:40:57:
                    00:2b:e7:7d:9e:05:aa:eb:5a:99:47:ae:2a:cd:0c:
                    98:28:c9:ba:1a:c9:cf:48:ea:62:db:ce:fa:13:1b:
                    c5:44:f0:1c:4e:83:5e:8b:32:4a:ee:a0:ec:26:3f:
                    3c:17:b8:c3:f4:56:49:86:52:8c:65:24:19:22:41:
                    16:a4:52:4e:1c:1f:27:76:23:b2:9a:39:af:ff:3f:
                    7d:9d:35:5e:9a:48:d5:dc:b4:33:05:ca:ef:f1:01:
                    8b:dc:ce:ca:55:81:81:72:50:b3:fd:63:04:44:93:
                    ce:a5:cf:56:8f:72:0c:58:ca:ab:73:b2:82:8d:0a:
                    d6:b3:1b:52:b1:76:5e:54:e7:66:2d:eb:91:70:57:
                    ce:23:8e:cc:04:4c:bb:35:a8:94:e8:46:17:b8:72:
                    d9:93:c9:dc:3c:cf:01:35:25:83:e3:68:b4:da:5e:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:95:79:5F:57:C6:50:F9:6C:B8:0C:C3:B4:95:F1:70:D2:CE:D5:48
            X509v3 Authority Key Identifier:
                keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233372e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:a9:57:41:96:57:0e:7f:04:42:b3:37:6f:6a:30:10:f0:cf:
         40:57:02:f5:d8:44:c9:fa:7b:f6:d5:a3:7c:fd:30:32:d0:f1:
         d9:60:3e:b0:a5:52:a5:0d:3c:2a:ab:58:94:32:6e:51:66:23:
         f3:da:1f:86:a3:2c:25:61:08:d6:7f:11:d3:26:e1:aa:7e:1f:
         19:0e:72:54:63:ef:00:e9:63:ac:ef:e0:1f:38:a3:c8:5b:c3:
         8c:05:f4:ee:ed:6e:c5:e5:37:4d:3b:77:b8:59:81:f7:c6:ec:
         9e:4e:21:ae:ae:35:56:fa:dd:fd:51:34:65:4f:5b:5d:7f:63:
         04:f3:18:b2:4c:2d:8b:2f:a7:9e:53:3b:73:9d:b1:e1:2b:88:
         42:38:d2:0a:1a:99:ff:76:77:7b:bb:2c:2c:c6:b6:4f:cb:cf:
         2a:0c:e5:74:31:4a:d4:6a:90:5c:fd:1f:50:2a:50:8d:00:aa:
         23:29:70:09:62:9c:ef:66:ad:3a:11:b4:bc:d5:4a:89:c1:98:
         41:cf:6b:bf:5a:a9:90:26:d0:32:e3:1a:7c:e8:9a:06:d0:46:
         9c:f9:81:9b:70:31:d7:a0:b8:db:a1:ee:79:99:7c:06:31:59:
         f7:44:29:db:fe:f7:70:14:fa:5b:fa:18:65:ba:87:5d:83:78:
         62:22:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:15 2024 by rpki-client on console-fra.rpki-client.org