Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/3230362e3232312e38302e302f32302d3234203d3e20323634373937.roa
File:                     3230362e3232312e38302e302f32302d3234203d3e20323634373937.roa (raw, json)
Hash identifier:          eizucG3UAe2iDNGan7Ib8Hco+ZbwiQzQi4BaYtGeqS4=
Subject key identifier:   F2:21:A7:0C:92:3B:0C:36:7D:2D:35:DB:AE:DB:AA:40:E7:B2:34:89
Certificate issuer:       /CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
Certificate serial:       2F1D3FEA7E0F91FB54C770B08703CF147031978A
Authority key identifier: CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/3230362e3232312e38302e302f32302d3234203d3e20323634373937.roa
Signing time:             Tue 05 Mar 2024 17:39:55 +0000
ROA not before:           Tue 05 Mar 2024 17:34:55 +0000
ROA not after:            Tue 04 Mar 2025 17:39:55 +0000
asID:                     264797
IP address blocks:        206.221.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1d:3f:ea:7e:0f:91:fb:54:c7:70:b0:87:03:cf:14:70:31:97:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3
        Validity
            Not Before: Mar  5 17:34:55 2024 GMT
            Not After : Mar  4 17:39:55 2025 GMT
        Subject: CN=F221A70C923B0C367D2D35DBAEDBAA40E7B23489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c2:84:27:6b:c0:01:7d:9f:56:e2:23:b7:9a:
                    e7:ca:5b:d0:b5:96:44:d4:45:34:bc:80:95:8d:c2:
                    a1:21:6a:50:cb:07:01:6e:03:64:a6:61:13:22:ee:
                    35:df:37:ca:f9:2a:75:de:81:c7:94:9e:ed:9a:d6:
                    24:dc:f1:fc:70:5e:17:b8:b1:40:3e:08:fb:96:a8:
                    30:85:f4:8c:66:80:9e:92:48:ec:03:f3:de:d3:f7:
                    4a:52:7e:58:3c:ba:35:19:0b:17:24:bd:b4:1a:92:
                    e7:16:8b:9c:6b:b8:61:62:28:17:f1:45:f9:17:f6:
                    3b:f0:76:4c:fd:4f:3d:61:53:87:d9:4b:6c:1b:c0:
                    20:dd:3d:bd:9e:dd:de:6d:82:12:47:14:7f:eb:29:
                    50:a8:64:5f:a8:d5:71:99:d5:bf:bb:eb:de:44:2f:
                    44:58:d0:50:70:41:b1:2e:7d:32:03:f2:b7:75:0b:
                    bf:72:25:4f:d3:0c:46:61:11:6b:b0:37:7c:cb:07:
                    98:83:d0:92:1f:79:d4:63:7e:89:35:56:99:29:dc:
                    3a:c2:21:bf:16:4b:1c:d8:db:9a:7e:28:be:99:5c:
                    b5:af:b8:13:c0:b8:fa:8b:cd:af:b5:3d:43:0f:49:
                    b8:c8:76:05:2d:f2:c8:c0:98:dd:35:32:b0:10:48:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:A7:0C:92:3B:0C:36:7D:2D:35:DB:AE:DB:AA:40:E7:B2:34:89
            X509v3 Authority Key Identifier:
                keyid:CD:B9:34:AA:7B:21:EE:82:62:A7:F7:45:BC:C9:4B:D4:C4:79:FA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDB934AA7B21EE8262A7F745BCC94BD4C479FAD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE61EDE0757F9F12935A5F3BE248079B7FE63272F85519D015CB07ED5234608/0/3230362e3232312e38302e302f32302d3234203d3e20323634373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.221.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:2c:2a:bc:92:f0:9c:50:61:27:7d:12:09:25:2a:d9:7a:
         19:8c:f0:fa:e4:b3:3b:5d:fe:0c:b6:9a:c8:e8:f8:07:73:a2:
         4f:81:0f:32:56:61:57:bc:4f:f7:ec:61:c9:99:56:80:63:69:
         10:d2:61:77:b8:72:a2:05:ef:08:1e:da:6d:b5:d6:7b:eb:7c:
         4f:d2:66:ad:0d:2b:0e:25:44:79:34:b7:67:90:a2:ba:aa:7a:
         d0:72:9e:0e:b0:f3:82:7f:1c:32:18:42:41:06:c8:6b:9b:17:
         dc:37:7c:34:c6:f7:1d:18:5f:db:2f:73:63:ae:4d:c7:14:9e:
         87:9b:1d:79:4e:05:f6:b1:2f:0f:68:5e:2a:0f:b0:56:e1:f1:
         9f:46:27:bd:9a:26:b9:b3:f0:58:5c:b8:6e:cf:03:b6:11:6d:
         d4:db:47:57:5d:d7:26:c7:59:b9:a4:85:b0:ef:6d:0a:5a:51:
         66:7f:9d:ab:ce:78:7c:79:d0:b2:ae:1d:0e:8d:13:9b:60:8b:
         ef:76:6b:ea:5f:2e:09:31:5f:45:9a:22:08:18:76:b1:6f:07:
         d0:68:3c:59:a9:42:df:52:5b:79:f8:b6:5c:f5:9f:1f:76:d2:
         51:27:be:7b:77:07:90:4a:5d:79:20:ae:e1:1d:c2:ac:79:c8:
         71:6c:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:04 2024 by rpki-client on console-fra.rpki-client.org