Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa
File:                     3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa (raw, json)
Hash identifier:          8FCcZ7bZ8q64aytWa6zch6pERhf7PcK4d4VXrpkcPlw=
Subject key identifier:   0D:10:C0:E3:BF:B2:79:8A:C3:0B:99:64:08:A7:ED:E9:52:15:9D:49
Certificate issuer:       /CN=10E5944B62A6E9D7EDE86FCB17B8822C2404639F
Certificate serial:       2A4803229F98B94A497C5F58D03DAD7E947DF713
Authority key identifier: 10:E5:94:4B:62:A6:E9:D7:ED:E8:6F:CB:17:B8:82:2C:24:04:63:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa
Signing time:             Tue 05 Mar 2024 18:10:44 +0000
ROA not before:           Tue 05 Mar 2024 18:05:44 +0000
ROA not after:            Tue 04 Mar 2025 18:10:44 +0000
asID:                     263731
IP address blocks:        201.131.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:48:03:22:9f:98:b9:4a:49:7c:5f:58:d0:3d:ad:7e:94:7d:f7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10E5944B62A6E9D7EDE86FCB17B8822C2404639F
        Validity
            Not Before: Mar  5 18:05:44 2024 GMT
            Not After : Mar  4 18:10:44 2025 GMT
        Subject: CN=0D10C0E3BFB2798AC30B996408A7EDE952159D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:f4:2a:cc:38:2a:6e:ff:38:e1:29:77:c9:
                    68:0c:21:65:31:6d:de:30:67:07:03:e8:03:cd:2f:
                    7c:9a:6f:4b:ad:88:21:3d:08:a3:7c:48:b6:1f:f2:
                    ed:c7:16:3f:13:57:62:6b:f4:3e:5a:c4:dd:6d:3b:
                    46:a8:29:a2:4a:f1:36:7d:66:06:47:09:e0:47:72:
                    79:2d:45:57:e8:8f:b7:6b:79:81:42:bd:36:4a:91:
                    0a:9a:07:09:5d:c5:73:99:51:dd:34:9a:ab:e3:71:
                    fc:13:99:da:1a:39:82:14:6c:94:14:b1:10:5d:68:
                    35:06:f9:a6:bb:74:24:52:36:a4:65:4c:f3:3f:37:
                    73:59:7a:d3:3a:8a:b4:59:b4:3e:dc:cf:29:90:11:
                    c9:2a:a3:4e:c5:fe:fe:04:41:78:a5:2d:21:a3:0b:
                    a3:c7:e8:d0:a1:7f:d7:db:38:48:0b:36:d0:a3:48:
                    ca:eb:6e:98:3f:2b:56:2e:17:49:b8:e7:5d:85:84:
                    43:27:15:42:ec:42:2f:f7:56:40:ce:c8:c8:06:a4:
                    0c:c1:93:17:75:fd:6e:c6:c8:37:3f:64:7c:b7:f9:
                    c4:e7:da:4b:63:95:8f:7c:d3:75:56:b1:25:b6:e4:
                    56:b4:17:33:67:0c:d0:a7:76:f6:9a:fa:ae:ed:a1:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:C0:E3:BF:B2:79:8A:C3:0B:99:64:08:A7:ED:E9:52:15:9D:49
            X509v3 Authority Key Identifier:
                keyid:10:E5:94:4B:62:A6:E9:D7:ED:E8:6F:CB:17:B8:82:2C:24:04:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:4f:62:ab:3c:04:e1:45:76:cc:21:bf:76:46:92:fe:15:
         8e:c7:a9:55:44:a3:99:ce:68:8e:90:30:a2:99:85:47:ff:f7:
         e0:cc:bd:8f:3a:14:d0:d0:5c:e0:8a:4a:aa:e5:33:b8:a5:16:
         c6:9f:8e:81:07:15:a1:0e:c9:fe:67:e3:8b:59:cf:7f:01:12:
         30:90:6a:f5:ad:e5:7f:df:08:9f:22:68:13:27:d3:57:e4:69:
         de:41:55:56:34:01:cd:c0:e9:00:00:0a:1b:68:89:bb:0b:52:
         cf:fb:56:7a:c9:cc:26:68:9d:d7:e5:fd:87:d0:86:02:91:af:
         e9:a8:f0:ef:d6:ae:c3:0c:95:a1:2c:80:6f:b8:49:6c:cb:e5:
         26:15:59:4c:6f:27:62:56:e6:14:a1:5c:c7:e3:a6:cd:c9:98:
         c7:c8:b3:b8:10:a8:70:00:4d:9c:1e:1f:f3:cc:d4:4d:54:1d:
         ab:2f:bd:6c:b1:f0:da:fe:b1:20:07:3b:26:d8:da:db:6f:cc:
         99:8e:0a:b6:8f:ed:e9:61:56:be:e3:53:62:a6:5a:f8:1f:c0:
         bb:70:d5:90:2e:56:d2:4e:80:77:fb:f9:08:14:59:13:f0:a7:
         3c:b5:ad:36:55:c6:e3:3a:5a:12:7b:27:e4:53:99:e4:4c:2e:
         19:ce:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 07:04:27 2024 by rpki-client on console-fra.rpki-client.org