Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230312e3231362e3132382e302f31382d3234203d3e203134373534.roa
File:                     3230312e3231362e3132382e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          2hpYvUeg8ZO+2e09jXmeMiGIRd6wclUmSsejzWNI4u8=
Subject key identifier:   C7:D9:B6:24:0E:38:D7:55:11:95:7F:CD:2A:45:42:1C:94:EB:4B:E8
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       0591DAEE56D7CE9E6DDD0AC3A2F818C3EBBBA1BA
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230312e3231362e3132382e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:33 +0000
ROA not before:           Tue 05 Mar 2024 17:37:33 +0000
ROA not after:            Tue 04 Mar 2025 17:42:33 +0000
asID:                     14754
IP address blocks:        201.216.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:91:da:ee:56:d7:ce:9e:6d:dd:0a:c3:a2:f8:18:c3:eb:bb:a1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:33 2024 GMT
            Not After : Mar  4 17:42:33 2025 GMT
        Subject: CN=C7D9B6240E38D75511957FCD2A45421C94EB4BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:23:30:2c:6a:81:e5:1b:36:a2:9b:2d:bf:
                    01:35:27:ba:20:41:21:46:48:a0:cc:bd:e0:f1:02:
                    fa:fe:da:2f:72:4a:1a:38:e7:97:62:b6:20:dd:3c:
                    24:b0:07:11:93:7e:d6:3c:7c:d2:f6:57:1f:19:4e:
                    24:e4:8e:74:33:bf:47:a2:0c:de:2e:1e:32:03:49:
                    af:b0:27:66:a6:da:6c:70:f1:91:db:a7:47:c2:e0:
                    cd:24:ee:06:e7:ff:23:95:f4:cd:01:ba:e6:17:79:
                    d4:50:72:53:f0:c4:3f:bd:75:8a:e4:e0:01:7c:eb:
                    69:a0:20:75:d6:82:5e:aa:ee:fd:48:da:1e:b1:41:
                    36:60:d8:6a:1b:9e:d1:9a:53:fc:c7:47:c9:d3:b7:
                    a4:91:92:e1:83:18:09:b5:b5:0d:0a:de:c3:a3:06:
                    5c:7f:9c:4e:ef:53:71:79:0b:cd:83:27:3a:d4:cd:
                    31:b9:5b:d5:e9:29:a9:20:f4:8d:5e:92:af:32:b4:
                    8f:8e:b4:3c:08:ea:bb:bc:29:fb:96:d5:a3:ee:d1:
                    d4:1d:f3:ec:88:89:18:2f:09:95:19:b4:44:a8:45:
                    b8:95:fa:23:fb:eb:57:a0:5a:d9:96:18:ac:e8:85:
                    a5:b7:e2:e2:d2:6f:39:48:5b:bd:0b:c4:69:f0:d8:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D9:B6:24:0E:38:D7:55:11:95:7F:CD:2A:45:42:1C:94:EB:4B:E8
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230312e3231362e3132382e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         72:df:c9:5d:42:99:82:ec:e6:9c:b6:2c:d6:fe:76:98:38:ee:
         88:52:ec:32:26:20:54:cd:75:8c:e5:25:71:59:b3:be:23:cf:
         bb:01:58:ef:13:3c:7a:ad:08:58:19:4c:5a:98:81:ce:78:c0:
         be:f0:da:50:c4:68:cb:7d:00:17:10:97:23:b6:67:de:a0:e8:
         10:16:dc:28:8a:64:fb:17:ff:df:9d:5c:8e:07:9c:3f:7b:b1:
         97:55:66:9e:ca:fb:04:85:d8:d2:6e:3f:0d:39:64:b0:26:2e:
         cc:bf:07:49:2a:bf:0f:00:12:2b:66:d5:e2:54:dd:c2:ff:b0:
         cc:49:cd:ee:ce:1f:01:9c:b0:11:b0:1c:26:ae:e0:b4:16:f6:
         21:78:eb:ac:c4:e6:e1:dd:ed:ea:f3:1e:eb:3f:bc:6b:01:72:
         6f:e5:a0:e6:0e:03:4f:0a:8a:48:75:f1:01:22:4d:d6:d5:37:
         5a:22:4c:ad:c3:f6:0a:0d:c0:7b:9e:f6:7d:a1:21:66:59:f2:
         34:de:7f:d6:02:ce:18:5c:b5:4e:2f:87:bc:88:7c:ae:62:d4:
         97:5f:1b:1b:e0:9b:9d:0e:eb:1d:9e:fe:2d:ed:ff:ff:64:68:
         9f:2d:a3:e6:55:c8:8e:fb:49:82:b8:10:4a:d2:44:fa:6d:ac:
         90:08:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org