Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/3130332e3131312e34302e302f32322d3232203d3e20323733383731.roa
File:                     3130332e3131312e34302e302f32322d3232203d3e20323733383731.roa (raw, json)
Hash identifier:          ijOvazVM32Q7ozt4ZymKwzjpaqEk5onHXDFX/G83xaE=
Subject key identifier:   F2:A1:11:D8:68:BF:50:34:88:B4:2D:44:6D:BF:54:15:64:B7:04:42
Certificate issuer:       /CN=9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97
Certificate serial:       777145C4B68A0B548475878FBDD897C996937DB7
Authority key identifier: 9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/3130332e3131312e34302e302f32322d3232203d3e20323733383731.roa
Signing time:             Mon 07 Oct 2024 15:35:01 +0000
ROA not before:           Mon 07 Oct 2024 15:30:01 +0000
ROA not after:            Mon 06 Oct 2025 15:35:01 +0000
asID:                     273871
IP address blocks:        103.111.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:71:45:c4:b6:8a:0b:54:84:75:87:8f:bd:d8:97:c9:96:93:7d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97
        Validity
            Not Before: Oct  7 15:30:01 2024 GMT
            Not After : Oct  6 15:35:01 2025 GMT
        Subject: CN=F2A111D868BF503488B42D446DBF541564B70442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:62:0d:9e:7e:4b:1c:9a:41:b2:93:96:cb:
                    58:9b:7e:e8:43:a8:cc:bf:58:c7:b6:d7:37:d3:48:
                    e2:9e:25:0d:84:1c:7a:3f:34:28:ae:63:4b:07:b0:
                    2e:fd:fc:f9:b6:30:e7:c6:c4:75:6e:7a:57:16:96:
                    31:78:e3:7a:5f:1b:7b:c9:31:03:72:cc:0c:cc:9e:
                    89:e3:f1:a5:dd:be:cc:24:bc:46:33:1e:74:52:ec:
                    56:e5:51:07:ac:a4:d6:7a:f3:27:76:3a:92:06:f6:
                    10:94:32:a7:db:ec:66:60:6e:a2:4c:eb:7e:49:8e:
                    09:32:38:92:6a:eb:fb:72:21:d1:ea:37:ca:2f:77:
                    ef:9e:86:6a:c4:07:d6:b8:c3:af:b8:58:fd:f5:21:
                    c1:5b:6a:54:c3:2c:ce:3a:6b:e2:04:4e:0f:cc:6e:
                    14:af:75:9d:31:01:be:a9:da:28:35:8f:df:d1:eb:
                    2d:05:26:b9:a5:6e:89:1b:02:9f:19:58:a7:a8:76:
                    6b:f7:49:05:f2:92:f3:75:4f:e5:4c:5a:c6:0d:65:
                    1d:98:2e:33:5a:95:f0:35:22:48:b3:ce:b9:c4:40:
                    3b:9d:86:35:ef:9f:63:ad:c4:13:58:da:40:ce:68:
                    ac:3a:73:34:a9:ec:11:02:23:27:b5:6a:2c:85:4e:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:11:D8:68:BF:50:34:88:B4:2D:44:6D:BF:54:15:64:B7:04:42
            X509v3 Authority Key Identifier:
                keyid:9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/3130332e3131312e34302e302f32322d3232203d3e20323733383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:3a:09:ab:8a:80:9e:46:61:ae:ad:40:28:28:10:ea:de:
         09:a3:15:2d:76:fe:9c:77:fd:9e:80:73:74:33:0f:df:41:3b:
         59:41:fe:97:a9:68:6b:c7:5c:ee:70:54:bd:b2:e0:7f:81:2e:
         31:b2:ce:b3:00:6d:e9:4a:07:39:73:92:98:62:9f:d0:fd:29:
         a0:13:2f:ee:e2:01:31:1d:b4:62:13:2c:ff:d0:68:13:30:38:
         8f:77:69:45:01:2f:f3:9e:11:25:6a:54:d4:03:f9:38:41:de:
         f4:9f:32:2b:f6:f4:42:ff:7c:c9:41:c9:9f:9a:25:f7:e7:84:
         08:5c:6b:43:36:35:7d:cc:02:d9:91:16:e5:cc:9a:49:84:b6:
         69:97:2c:6e:5b:b0:ac:f6:fe:32:ca:20:3c:0c:2f:4b:37:01:
         e2:e4:d5:94:4f:ac:b6:3a:14:42:27:75:5f:59:6d:c7:1d:a9:
         47:58:ee:84:2d:cc:30:99:25:e3:02:e7:61:72:e9:15:5d:be:
         2e:02:9f:3e:2b:f4:f9:c6:b9:5d:3a:db:5b:3d:06:8e:5d:83:
         4b:de:17:e1:06:5b:3b:41:97:87:90:39:c6:34:56:34:d4:dd:
         d9:9e:f5:fe:a6:6e:ac:58:af:59:44:88:f1:db:ce:1b:af:ae:
         3b:bf:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 09:56:02 2024 by rpki-client on console-ams.rpki-client.org