Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e20323033.roa
File:                     3230312e3233372e302e302f31362d3234203d3e20323033.roa (raw, json)
Hash identifier:          4go0lqF1FKEp0ToILfpNO4uSGVjqvdwIuQLKlR0eteA=
Subject key identifier:   25:E0:3E:B1:57:D1:C0:B4:ED:12:0E:F9:B4:7A:EA:85:62:E0:72:E9
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       037BBE377ED83A82298893AAC690A23FCA2E1538
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e20323033.roa
Signing time:             Tue 05 Mar 2024 18:02:45 +0000
ROA not before:           Tue 05 Mar 2024 17:57:45 +0000
ROA not after:            Tue 04 Mar 2025 18:02:45 +0000
asID:                     203
IP address blocks:        201.237.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 23:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7b:be:37:7e:d8:3a:82:29:88:93:aa:c6:90:a2:3f:ca:2e:15:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:45 2024 GMT
            Not After : Mar  4 18:02:45 2025 GMT
        Subject: CN=25E03EB157D1C0B4ED120EF9B47AEA8562E072E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:8f:18:8a:72:c7:97:d9:20:b9:20:2d:ed:
                    5f:97:0d:3a:ad:99:ae:15:99:2e:8c:05:1d:dd:91:
                    c4:3f:bc:4f:55:e4:27:b0:32:36:33:c7:e3:1a:8f:
                    39:39:f6:75:40:c5:45:54:91:76:08:53:27:54:15:
                    a0:66:6e:e3:b5:67:a5:78:24:66:15:a0:f2:ed:ef:
                    91:69:88:df:ec:69:9e:2a:f1:8c:f0:df:f4:e2:65:
                    b1:63:88:18:46:c0:67:f1:49:1f:10:40:d6:64:0a:
                    d6:2b:48:40:55:bc:5d:d9:7c:3c:27:e3:8a:00:22:
                    9e:32:1e:cf:c3:3a:c3:c3:f7:f6:fc:20:04:59:dc:
                    86:a9:6d:3e:35:c5:34:db:79:94:61:8e:02:b6:4c:
                    87:f1:5f:b5:c6:94:dc:a6:e8:c2:97:df:ba:35:da:
                    1e:a5:26:90:0c:dc:47:7a:1c:83:b1:13:a5:65:b7:
                    63:22:22:8b:fc:71:56:1b:57:f7:20:37:95:4f:06:
                    a9:8c:0f:dc:bf:7e:f1:7f:2a:a1:26:52:10:d2:4b:
                    7c:02:7b:cf:44:8b:a3:a4:7b:9a:a5:18:62:32:63:
                    c2:f5:07:76:68:d5:66:db:06:5b:6e:27:20:14:19:
                    75:c5:63:73:c6:ab:da:37:e6:82:a8:54:84:af:ff:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:3E:B1:57:D1:C0:B4:ED:12:0E:F9:B4:7A:EA:85:62:E0:72:E9
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.237.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:3d:51:11:50:63:1d:0a:e7:5f:3d:9f:b3:ae:ca:5b:fe:3a:
         ed:59:d7:5c:46:6e:c0:06:ce:70:f6:55:7b:76:5d:df:e5:2d:
         4a:56:b4:46:1c:81:8a:b3:48:e6:e5:67:f4:99:c2:d7:92:f5:
         43:5f:16:ae:d3:0a:e0:b9:4a:fa:f9:2b:2e:17:26:7d:e7:05:
         6c:25:7b:b6:1b:81:87:55:56:17:7f:81:ca:d6:38:b6:7d:e6:
         30:21:08:fe:f8:80:bd:09:6a:37:ca:08:25:d7:8f:d9:6c:bd:
         e2:ee:5b:56:d9:54:43:7a:74:ca:22:ad:83:c7:74:e8:1d:b8:
         b4:59:83:67:29:ee:19:ed:96:38:f4:89:ab:bc:ef:ec:09:d4:
         94:88:67:58:92:e4:51:f2:1b:f4:6a:bc:70:45:31:92:0e:d9:
         0e:da:86:cd:df:47:87:5c:bd:2e:2d:4d:10:64:7d:bd:03:bb:
         d0:9e:00:eb:74:b7:4e:3a:94:fc:9c:a6:a7:af:26:97:cc:80:
         00:f8:a1:1c:61:1f:7e:a9:2a:59:26:ff:81:34:68:7f:a8:83:
         1b:a9:b2:f5:44:20:64:8e:c7:dd:61:a4:9b:af:39:ec:4e:de:
         fb:36:ed:11:19:52:e1:fb:cb:48:bb:28:6f:6c:8f:35:bf:0b:
         62:6c:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:02 2024 by rpki-client on console-ams.rpki-client.org