Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e203237393839.roa
File:                     3230312e3232312e3132342e302f32332d3234203d3e203237393839.roa (raw, json)
Hash identifier:          3SMQaaRzy/3jlF+I78VK/prJhKMKqBpXuQVNCiYBSl4=
Subject key identifier:   C1:13:87:72:1F:0D:B2:F5:B6:8A:FE:07:F3:67:7E:5F:0C:77:CF:41
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       444BF8BDAC159C47118C84D94AA15EA7B9B17C33
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e203237393839.roa
Signing time:             Tue 05 Mar 2024 17:54:18 +0000
ROA not before:           Tue 05 Mar 2024 17:49:18 +0000
ROA not after:            Tue 04 Mar 2025 17:54:18 +0000
asID:                     27989
IP address blocks:        201.221.124.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4b:f8:bd:ac:15:9c:47:11:8c:84:d9:4a:a1:5e:a7:b9:b1:7c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Mar  5 17:49:18 2024 GMT
            Not After : Mar  4 17:54:18 2025 GMT
        Subject: CN=C11387721F0DB2F5B68AFE07F3677E5F0C77CF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:f6:c3:98:55:0d:66:3c:bc:0e:7c:87:4a:
                    40:70:b4:34:f2:a7:dc:8c:27:a8:30:af:2c:f8:b4:
                    58:5f:2e:e2:13:71:36:aa:22:db:07:37:d4:21:90:
                    fa:e7:74:7e:e2:d8:7b:04:4a:d4:e6:ef:2a:e7:26:
                    25:6d:87:53:a3:e3:01:ce:43:de:f0:39:8b:4c:05:
                    e5:d5:ce:b6:a7:d1:e6:76:65:9a:b0:5d:27:c9:22:
                    28:cc:38:33:c0:1e:4b:72:55:72:94:7c:b0:31:49:
                    e0:3a:7f:e6:ed:0f:99:06:32:e2:30:53:fa:13:41:
                    e9:db:bf:b5:6e:a3:f2:13:70:eb:19:f8:8c:bf:55:
                    df:cf:06:0b:a5:11:be:ad:76:96:4c:5b:5b:1d:d1:
                    43:2e:a0:ef:fb:28:91:d7:9a:06:b6:43:4d:9b:5d:
                    b6:7b:82:c5:d4:f5:d3:9e:2e:9e:6c:92:fa:15:fc:
                    d7:d1:6f:66:e1:39:7d:ad:32:63:92:c7:ae:3d:44:
                    d6:9d:44:ec:2e:9d:ae:64:48:89:18:7b:c4:84:7b:
                    7e:55:a6:f0:b8:6d:cc:27:54:4c:d7:d5:8e:46:96:
                    81:67:a4:1d:62:f8:98:b6:a4:4e:d4:26:d4:97:ec:
                    71:35:b2:f5:73:32:62:52:a0:c4:5a:8b:4f:fc:77:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:13:87:72:1F:0D:B2:F5:B6:8A:FE:07:F3:67:7E:5F:0C:77:CF:41
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e203237393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:00:49:02:22:f9:b8:ad:be:5f:c4:56:98:2b:c3:1a:14:4d:
         27:bc:17:03:b3:24:31:31:d1:f2:91:d3:d3:e1:9c:05:74:de:
         85:d9:b4:aa:93:02:d3:8e:92:fb:59:05:3c:4a:db:9c:8f:75:
         18:4e:d3:cf:63:e6:76:39:78:de:26:b5:34:2e:64:42:38:49:
         86:c9:11:39:5b:23:d3:60:9a:7b:8d:86:08:8a:c5:89:30:a7:
         cc:46:98:67:64:b8:21:87:65:c0:a5:25:8d:f0:6e:ee:ab:a4:
         06:48:ed:07:ad:47:aa:ce:08:48:18:1f:16:90:bb:12:0f:9a:
         ca:43:16:a5:ec:f5:1e:75:a4:6d:30:05:94:22:94:94:d9:a8:
         73:81:a2:12:2b:85:4f:2a:c3:fe:fc:5b:de:1f:b4:02:5d:ca:
         2c:69:4f:e6:8f:5e:5a:1c:4b:90:46:2c:2b:f4:40:66:53:e8:
         8b:d0:58:c6:db:9e:ab:a2:4e:a4:b9:10:42:a8:69:45:ac:59:
         40:a1:cb:4a:79:f5:f0:4f:ae:79:c2:3b:71:4f:c3:8a:8f:1f:
         9c:e6:8d:bc:30:fa:ae:be:01:8e:26:8d:73:fe:e2:bc:f4:ec:
         f7:8c:d3:c9:b7:24:8d:46:e6:35:3a:a4:92:64:ff:c4:2a:99:
         23:4b:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org