Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e203430363736.roa
File:                     3230312e3135392e3136382e302f32312d3234203d3e203430363736.roa (raw, json)
Hash identifier:          NopSYDJ4ALFrBihTmIU4z5cPKiQdMeCpdG1pimozRis=
Subject key identifier:   CD:60:06:A2:2B:08:FC:98:3F:76:19:EA:60:89:F8:52:FD:AB:2E:8B
Certificate issuer:       /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial:       11012AB72F85D1429B5E80D92BC904A8F2DFFC66
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e203430363736.roa
Signing time:             Tue 05 Mar 2024 17:46:34 +0000
ROA not before:           Tue 05 Mar 2024 17:41:34 +0000
ROA not after:            Tue 04 Mar 2025 17:46:34 +0000
asID:                     40676
IP address blocks:        201.159.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:01:2a:b7:2f:85:d1:42:9b:5e:80:d9:2b:c9:04:a8:f2:df:fc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
        Validity
            Not Before: Mar  5 17:41:34 2024 GMT
            Not After : Mar  4 17:46:34 2025 GMT
        Subject: CN=CD6006A22B08FC983F7619EA6089F852FDAB2E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:8f:9c:cb:78:f1:f9:80:f3:29:50:13:5a:
                    71:9d:69:ea:85:b8:ee:2a:6d:43:11:08:57:6d:57:
                    c3:2f:3a:eb:9d:9f:00:51:71:b0:69:23:d8:df:82:
                    83:3f:b0:87:37:17:62:58:0b:10:cb:72:f0:8b:d3:
                    f3:ee:57:55:d3:cc:ee:82:59:ee:6f:03:08:9d:b8:
                    f1:46:2b:20:e3:2b:67:60:c5:7b:c7:06:4c:46:84:
                    79:a2:86:03:79:51:d2:51:68:aa:b1:2d:5e:3f:33:
                    c3:63:a3:bd:13:7a:fa:4d:4a:83:92:46:04:1b:5b:
                    a7:94:72:4b:bf:1a:95:44:d2:44:0a:c5:fd:f7:aa:
                    d9:77:27:4c:2d:f0:2f:bc:d3:48:b2:44:e0:9d:fb:
                    00:59:56:88:34:7f:16:6a:b2:07:65:95:d0:26:e8:
                    22:d2:8c:62:5c:e4:19:e0:78:32:25:31:42:f7:54:
                    ae:66:eb:ca:74:c1:42:10:01:8a:b4:c7:e6:7d:10:
                    1c:9e:dd:a2:87:4f:53:9f:d4:dc:4f:c8:5b:d8:f9:
                    f0:81:5c:a3:f4:4c:e0:6e:0e:80:4d:37:bf:6e:bb:
                    27:17:53:bd:dc:ba:6f:92:0c:8f:b1:dd:f2:a2:20:
                    d5:57:f0:0d:9b:19:90:45:fc:eb:28:ee:5b:49:83:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:60:06:A2:2B:08:FC:98:3F:76:19:EA:60:89:F8:52:FD:AB:2E:8B
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3230312e3135392e3136382e302f32312d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:5f:f9:9d:d0:3d:79:50:b4:72:46:48:d8:08:78:27:55:e4:
         02:bc:7c:62:a9:c1:87:54:f6:76:d5:65:8a:37:b9:c3:c1:47:
         59:55:0f:66:9d:d4:76:dd:5c:ef:50:dc:97:f6:11:65:5e:85:
         82:64:77:93:3f:58:c9:d3:eb:8c:1c:e5:33:2e:d2:d5:47:59:
         f2:ed:1a:96:fe:87:76:2a:9c:3e:9a:de:c7:95:ea:cc:89:70:
         36:d8:f5:58:f0:23:50:a2:f0:1c:7b:30:33:68:0d:6a:56:70:
         23:f1:74:8a:99:ad:b4:b0:ff:5c:7c:4d:8d:79:8f:22:33:06:
         c8:15:da:22:ca:5f:ad:14:3f:f4:96:d0:f2:00:0b:22:4b:84:
         5c:84:c0:64:e8:3d:40:cc:fb:97:4f:19:5a:1a:9c:76:c4:aa:
         b4:c0:dd:17:b8:73:32:76:2f:6d:2d:0c:9f:24:a8:1b:e1:71:
         67:37:ce:ba:81:d8:9d:11:63:a6:56:3a:38:ef:85:88:c6:7d:
         27:a0:90:63:9b:be:a8:82:83:f4:23:1e:44:fc:08:b5:cc:d5:
         30:43:2a:9a:d5:17:ae:da:59:f0:49:a7:ef:59:b1:2b:a3:86:
         b4:12:e3:e3:00:ac:86:4a:f7:99:c3:c8:83:71:56:9b:59:4c:
         64:60:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:33:16 2024 by rpki-client on console-fra.rpki-client.org