Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/3230312e3138322e3138382e302f32322d3234203d3e20323635383035.roa
File:                     3230312e3138322e3138382e302f32322d3234203d3e20323635383035.roa (raw, json)
Hash identifier:          b0+3xTKEtPHTApp/RUpKxRT0kuh19Y4ZhBC3WdMUg+w=
Subject key identifier:   7C:01:82:6F:EC:B1:10:BA:89:B9:14:43:DB:BD:87:DD:99:28:66:6A
Certificate issuer:       /CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
Certificate serial:       157E88AC81BD945C2986694AB67F37A3D74BDCF9
Authority key identifier: 39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/3230312e3138322e3138382e302f32322d3234203d3e20323635383035.roa
Signing time:             Tue 05 Mar 2024 17:59:54 +0000
ROA not before:           Tue 05 Mar 2024 17:54:54 +0000
ROA not after:            Tue 04 Mar 2025 17:59:54 +0000
asID:                     265805
IP address blocks:        201.182.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7e:88:ac:81:bd:94:5c:29:86:69:4a:b6:7f:37:a3:d7:4b:dc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
        Validity
            Not Before: Mar  5 17:54:54 2024 GMT
            Not After : Mar  4 17:59:54 2025 GMT
        Subject: CN=7C01826FECB110BA89B91443DBBD87DD9928666A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:d7:ea:18:80:75:be:89:07:a1:e6:d2:89:
                    ab:a7:b6:36:cf:23:c5:d2:be:98:04:58:01:b8:a5:
                    7e:0b:c7:61:05:69:9c:32:11:64:df:80:0d:b9:15:
                    2d:91:a0:14:c9:2b:9a:9f:8a:4b:ef:ea:90:58:80:
                    c6:1e:52:90:ad:8a:63:e6:87:0b:db:26:11:bc:a5:
                    23:d1:ad:15:07:47:b6:b7:f6:d6:20:ad:0b:ac:ca:
                    7f:ea:80:e9:ea:b0:96:b1:6c:c8:2e:48:11:aa:23:
                    14:3a:8a:ae:ab:56:f8:e3:4d:65:3a:1a:d1:49:5a:
                    f9:35:c8:ff:2f:6c:71:d3:a8:50:f3:cf:6c:c1:6e:
                    1a:69:06:f7:27:05:6e:fa:18:51:f2:02:6b:84:31:
                    ab:46:a5:e6:4c:69:65:9c:e0:26:cf:7c:10:40:dd:
                    f1:c0:ac:ef:da:ec:26:90:44:9e:9e:2b:9f:99:da:
                    28:b6:5b:d7:11:6c:fd:42:0e:a9:71:7a:5c:b1:ef:
                    00:f1:4c:c2:49:67:14:3b:5f:4f:33:3b:df:66:4e:
                    bc:e1:a6:67:58:14:99:0f:f0:27:b7:37:9e:54:4c:
                    80:61:35:ba:f2:ba:d6:2a:7f:96:6e:53:b1:93:ea:
                    34:5e:7f:7b:5d:15:ba:bc:ad:46:6f:0a:17:41:5b:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:01:82:6F:EC:B1:10:BA:89:B9:14:43:DB:BD:87:DD:99:28:66:6A
            X509v3 Authority Key Identifier:
                keyid:39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/3230312e3138322e3138382e302f32322d3234203d3e20323635383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:40:21:d5:92:a2:b4:9e:38:08:64:29:b0:9c:dc:e5:6a:30:
         e2:8e:e8:0c:fc:2f:4c:ce:df:a8:4f:58:04:03:eb:89:81:ee:
         44:cd:b4:7a:91:d5:af:5f:89:ad:a3:99:1f:3c:80:7f:3e:86:
         f4:bd:42:0f:63:ad:f5:bb:23:c5:94:db:f1:f9:92:f8:fa:c8:
         b3:0c:46:d7:58:34:28:1e:80:86:de:e8:3b:8c:6c:e0:66:48:
         ee:0d:9e:21:d3:20:31:d2:4b:1a:4b:5d:d4:43:74:67:89:6a:
         c3:17:28:1a:26:18:16:80:7c:ca:dc:9b:78:24:b7:d8:af:cd:
         9d:b6:04:e9:d2:b5:1f:eb:68:e8:15:87:16:6b:48:60:6c:1a:
         73:ac:ea:54:db:46:83:1c:89:bb:16:31:3e:16:b4:62:90:a2:
         cf:79:87:ba:ff:ee:01:4b:e0:ae:9c:61:cb:24:c9:c5:04:d8:
         da:61:71:de:85:11:39:28:8b:5c:c1:11:9a:f1:fa:e6:c6:46:
         43:e6:24:91:59:95:f9:53:57:be:65:b7:4e:01:1e:98:7a:dd:
         ae:84:3d:50:1c:6d:9f:2e:69:89:1c:0a:73:4b:31:e9:ad:3c:
         76:ac:dc:a6:59:59:a2:6c:68:8a:0e:dc:28:00:5f:67:ca:10:
         cb:84:3d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:14 2024 by rpki-client on console-ams.rpki-client.org