Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3230312e3232302e3134342e302f32302d3234203d3e203532343230.roa
File:                     3230312e3232302e3134342e302f32302d3234203d3e203532343230.roa (raw, json)
Hash identifier:          AoU0bWgvuuPeWPLGycVw35Nim8VuhZDDHBGW7vMS88U=
Subject key identifier:   D6:B4:60:DE:0E:D2:2B:BF:62:CA:72:43:E7:9B:45:DF:93:51:8D:E8
Certificate issuer:       /CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
Certificate serial:       378E8427F9E180D94A79940BB4082E710A296A2F
Authority key identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3230312e3232302e3134342e302f32302d3234203d3e203532343230.roa
Signing time:             Tue 05 Mar 2024 17:57:44 +0000
ROA not before:           Tue 05 Mar 2024 17:52:44 +0000
ROA not after:            Tue 04 Mar 2025 17:57:44 +0000
asID:                     52420
IP address blocks:        201.220.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8e:84:27:f9:e1:80:d9:4a:79:94:0b:b4:08:2e:71:0a:29:6a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
        Validity
            Not Before: Mar  5 17:52:44 2024 GMT
            Not After : Mar  4 17:57:44 2025 GMT
        Subject: CN=D6B460DE0ED22BBF62CA7243E79B45DF93518DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:ff:40:77:ef:65:9c:de:45:02:bf:c8:19:
                    aa:c9:52:8e:ed:20:31:54:80:7c:5d:20:0d:ba:76:
                    51:1a:7d:f5:9f:a8:6e:fe:27:f4:5b:6d:92:92:c0:
                    f5:9c:12:4d:83:54:b0:22:3b:77:1b:04:3e:ae:7f:
                    f7:cb:46:cc:4e:21:1c:2c:0a:47:a0:3d:24:ae:d0:
                    8f:82:24:32:1c:70:fa:c6:1b:ba:19:db:79:9a:79:
                    84:49:41:93:f5:98:83:40:ae:fb:54:e8:48:87:d5:
                    ea:df:6c:3c:79:97:6a:53:6b:0b:12:32:96:40:2c:
                    5e:12:e4:19:67:6a:89:54:05:fd:bd:a4:32:8d:a9:
                    e1:47:72:c8:f2:70:12:fd:ed:4f:86:f2:d5:d1:23:
                    20:43:d4:8d:6f:de:b4:22:f8:62:7b:1b:53:52:a4:
                    d6:00:3b:31:d7:ac:55:3e:8b:7b:e1:a5:57:cb:e1:
                    33:a8:58:c1:18:ce:af:e7:49:85:f9:58:8c:1c:26:
                    65:47:32:08:91:89:66:65:41:2c:7f:22:a5:ae:66:
                    f3:5c:f0:ec:22:26:6f:de:4f:84:39:2d:20:b2:82:
                    7c:fc:aa:7c:49:7d:aa:98:95:26:f5:2b:1b:5e:e7:
                    b8:7a:1c:e8:88:df:1f:c3:c8:d1:8b:c9:65:75:45:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B4:60:DE:0E:D2:2B:BF:62:CA:72:43:E7:9B:45:DF:93:51:8D:E8
            X509v3 Authority Key Identifier:
                keyid:5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3230312e3232302e3134342e302f32302d3234203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:13:7b:96:54:b1:e5:e6:a1:b6:44:81:7a:40:f7:a7:03:ee:
         39:da:6d:96:f3:39:bc:2a:d7:c8:ef:7b:44:7e:19:cb:16:7e:
         27:33:3b:fb:b2:53:8f:e4:3b:20:ac:56:e3:63:d6:fd:47:b6:
         33:6e:db:e7:59:b5:3c:96:e2:f2:0f:64:f1:02:c6:d9:86:a4:
         a5:17:2d:73:33:53:d7:3a:63:c5:62:f6:aa:52:22:2f:e8:4c:
         57:53:7e:e6:e3:3f:9b:19:73:3e:22:94:98:f1:87:2e:a0:5f:
         5f:fa:7b:43:0f:c0:55:4b:ee:d9:31:22:a8:f3:72:25:ec:c3:
         23:42:f8:fa:91:bb:15:ae:b3:a8:46:60:f3:04:ca:61:f0:89:
         77:be:15:52:c2:2e:a5:d8:de:3e:4b:6e:96:6f:39:a6:14:37:
         50:15:05:f9:a2:56:92:25:8e:14:41:0b:8c:06:b7:66:c7:7a:
         2c:bc:42:2f:5a:56:17:40:d4:0b:84:02:cd:7d:c6:a6:81:c0:
         fd:c0:d8:61:61:ee:10:01:cd:99:64:22:f3:59:1a:04:26:87:
         47:76:a5:3a:a3:4f:fc:7c:f9:de:d3:6b:05:41:70:f9:7c:3e:
         de:bd:2f:c4:66:c0:40:45:81:0e:6c:8b:e6:26:ec:81:b3:ff:
         0b:fe:40:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org