Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e2033333536.roa
File:                     3230312e3139322e302e302f31322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          HJE1Us/kx1pQMH5SJzUNriJAquR2Y6KFzQL4/J4KpWY=
Subject key identifier:   99:1B:06:FB:C6:B0:8E:48:76:02:D8:95:7A:5B:1D:78:0D:30:0A:FF
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       30CF86A185678E5A38F502D5177DBB309355C287
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e2033333536.roa
Signing time:             Tue 05 Mar 2024 18:02:43 +0000
ROA not before:           Tue 05 Mar 2024 17:57:43 +0000
ROA not after:            Tue 04 Mar 2025 18:02:43 +0000
asID:                     3356
IP address blocks:        201.192.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cf:86:a1:85:67:8e:5a:38:f5:02:d5:17:7d:bb:30:93:55:c2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:43 2024 GMT
            Not After : Mar  4 18:02:43 2025 GMT
        Subject: CN=991B06FBC6B08E487602D8957A5B1D780D300AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:49:33:18:12:48:c0:5d:18:ba:02:fb:80:
                    31:c3:15:4c:57:42:e0:d2:ce:2d:64:f4:e7:cb:ea:
                    e9:6e:0b:c3:9a:2f:13:ad:dd:94:cb:b0:24:26:19:
                    96:23:4b:d1:d6:2f:0b:54:a5:da:a7:a0:44:3b:fd:
                    c6:8a:6d:30:d3:e5:b0:b0:75:d9:14:e6:69:e5:7f:
                    75:e0:ab:3f:61:19:d7:0d:bc:9c:c5:d0:e8:47:0b:
                    5d:46:ac:0b:1e:66:ec:76:a1:71:c0:e0:5f:76:1e:
                    6c:72:e0:76:94:94:45:9b:39:0f:ff:f4:1e:11:7c:
                    95:bf:92:3b:8f:24:07:b7:1b:ff:1d:97:c6:6d:36:
                    96:12:38:ae:76:08:df:df:7e:a9:a3:2d:95:f9:9b:
                    b2:35:b1:ef:9c:7e:02:e9:44:5d:5b:93:00:d8:8e:
                    03:81:57:4d:00:bd:1d:5d:99:2f:cc:ee:d9:91:58:
                    d9:94:13:49:98:0b:5c:8c:7d:f7:b0:7a:28:a0:e6:
                    31:1d:76:6e:44:c7:d8:e6:50:c5:a6:ba:f0:83:9a:
                    26:f2:35:42:ad:78:0a:ca:4e:4a:50:43:f0:22:fd:
                    6e:61:91:46:ff:81:20:94:bc:67:b3:ac:a7:95:0c:
                    63:0c:6a:55:f7:33:2c:f0:01:6c:ee:a6:db:73:f1:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1B:06:FB:C6:B0:8E:48:76:02:D8:95:7A:5B:1D:78:0D:30:0A:FF
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.192.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         1f:e0:36:2b:39:c7:3f:af:d3:63:88:2f:e5:3b:44:6d:8d:a1:
         fb:bb:76:ce:0c:1e:d6:09:12:0b:2b:ca:af:17:b9:ff:3e:6f:
         f5:1b:9f:1a:ff:21:c9:0e:82:87:73:75:49:5c:ab:b1:cc:47:
         85:f5:ea:17:25:c3:ca:f0:be:69:9b:1a:82:c4:ee:22:8a:b3:
         dd:17:61:d1:33:88:98:fe:5b:a8:e2:6c:22:22:d3:71:67:00:
         09:06:83:46:c7:49:bf:9f:88:ab:c9:1a:af:f9:9a:1c:f5:f1:
         b3:94:36:f8:49:f9:11:bd:e2:84:38:88:55:59:e9:9b:17:c5:
         32:4f:06:9e:b9:a4:78:e2:43:32:ea:de:fb:e2:00:f6:e8:22:
         24:53:92:86:44:66:d9:39:90:fe:d6:a8:b8:9e:a1:aa:04:48:
         db:d7:67:a0:b5:d2:c2:36:b6:6b:02:15:4d:b6:f1:50:2b:e1:
         d7:79:c0:83:7a:99:0e:0c:02:cf:dc:f6:7b:d3:f0:f8:8b:4a:
         b1:1d:47:52:e4:48:56:49:2a:ec:e9:00:48:0e:4a:e7:fc:69:
         49:f4:5f:41:3a:8b:52:05:79:c4:a5:80:ef:c8:56:c0:31:2a:
         68:74:80:94:c4:b1:8b:04:34:d6:ef:1b:48:98:82:32:42:0f:
         00:38:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:31:47 2024 by rpki-client on console-fra.rpki-client.org