Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/3230312e3133312e36352e302f32342d3234203d3e20323731373933.roa
File:                     3230312e3133312e36352e302f32342d3234203d3e20323731373933.roa (raw, json)
Hash identifier:          DUQh4C7nVwPz5sXKuSzJ0SYBs4Pw3Vc5EIRAUWALVMM=
Subject key identifier:   6E:6F:21:B3:66:CB:7D:D2:50:E9:20:5D:17:7F:E8:46:CA:B1:13:7A
Certificate issuer:       /CN=18601CBB52F5F9509C4BCB7D779AB3763316347A
Certificate serial:       667E1FC3A18A6B6ECB49BA47068D34BCA39C0F1F
Authority key identifier: 18:60:1C:BB:52:F5:F9:50:9C:4B:CB:7D:77:9A:B3:76:33:16:34:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/3230312e3133312e36352e302f32342d3234203d3e20323731373933.roa
Signing time:             Tue 05 Mar 2024 18:03:22 +0000
ROA not before:           Tue 05 Mar 2024 17:58:22 +0000
ROA not after:            Tue 04 Mar 2025 18:03:22 +0000
asID:                     271793
IP address blocks:        201.131.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7e:1f:c3:a1:8a:6b:6e:cb:49:ba:47:06:8d:34:bc:a3:9c:0f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18601CBB52F5F9509C4BCB7D779AB3763316347A
        Validity
            Not Before: Mar  5 17:58:22 2024 GMT
            Not After : Mar  4 18:03:22 2025 GMT
        Subject: CN=6E6F21B366CB7DD250E9205D177FE846CAB1137A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:f7:5b:db:73:73:47:f1:7f:7e:54:30:24:
                    9d:41:1f:01:bd:84:1a:4c:34:36:f2:a7:f1:8f:98:
                    2c:27:20:fc:04:5e:bb:6a:e4:34:61:67:6d:18:a5:
                    2a:34:7d:f7:b9:38:aa:0f:ed:c2:e0:e8:7d:d9:e2:
                    b3:5b:95:8d:20:49:ef:9b:0d:a1:e2:05:f7:58:6f:
                    96:db:8b:02:15:7b:ca:a3:3f:d0:ac:83:78:06:ae:
                    0a:5a:86:7c:af:9c:de:e4:51:20:df:32:48:37:54:
                    dc:8d:91:b7:1d:68:76:65:4d:6c:09:aa:80:f1:0b:
                    39:04:af:a2:13:a8:fc:23:ea:73:e2:25:db:8c:94:
                    14:38:2c:0c:ac:ce:10:2d:fa:38:7a:00:03:82:85:
                    98:c9:c7:a1:df:dc:21:a6:e9:80:61:4e:ab:6e:36:
                    cd:8b:af:97:f1:35:78:51:40:0c:d9:54:1d:2e:97:
                    93:a7:ed:ec:ab:88:aa:6f:03:92:88:8e:9d:2e:e4:
                    8d:21:b0:ee:ac:d9:40:5c:b3:43:a7:58:41:4a:24:
                    87:e2:0e:24:b1:bb:4e:14:d0:ed:4c:80:c7:7e:4a:
                    2d:a8:0f:58:64:87:4b:7c:e7:bc:bc:05:24:9b:bf:
                    5e:03:49:93:29:c3:9a:c0:d0:89:e4:48:96:40:3c:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6F:21:B3:66:CB:7D:D2:50:E9:20:5D:17:7F:E8:46:CA:B1:13:7A
            X509v3 Authority Key Identifier:
                keyid:18:60:1C:BB:52:F5:F9:50:9C:4B:CB:7D:77:9A:B3:76:33:16:34:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18601CBB52F5F9509C4BCB7D779AB3763316347A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/364513DC7CDF7A6F2086AA33139EE2237132D092CAB066E94806D274F8D03008/0/3230312e3133312e36352e302f32342d3234203d3e20323731373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:34:20:89:0c:5f:fa:56:15:e3:f1:8c:07:f6:0e:7c:48:
         51:8f:5d:42:0d:a6:ef:ce:ae:29:7d:75:75:ff:5e:44:bf:8f:
         0d:e1:d0:aa:1e:95:1a:45:c1:2c:91:2f:4f:28:07:8f:e2:c7:
         36:f3:ec:26:72:e7:5f:ab:63:86:22:3d:ab:8f:d0:5e:4d:d6:
         30:00:2d:db:af:94:d8:36:e9:5f:78:8b:e4:d0:6c:86:9b:0c:
         29:17:39:ab:87:af:8d:cd:e1:d4:73:f4:6e:9a:0b:a0:86:b1:
         db:4a:9a:67:65:83:05:c8:ae:7c:56:0e:9b:9c:14:ae:4b:78:
         8c:05:f6:81:f3:84:33:d0:ad:60:c7:c9:16:f9:5d:e4:dc:80:
         b6:0f:2e:73:f9:ce:a1:a0:99:54:4c:69:5a:b1:c9:14:14:3c:
         60:b3:bf:5b:f7:bb:d4:74:b4:de:67:9e:e4:1b:83:dc:c3:bc:
         cd:33:03:ef:71:d1:75:61:2a:19:32:de:38:1f:49:4f:f5:0e:
         16:7c:83:b8:cc:07:74:28:10:1a:7c:56:20:05:89:e3:1e:cf:
         df:fd:6d:00:61:8d:9a:6b:e8:6b:d0:0b:c8:2d:da:b1:29:fd:
         14:05:ae:43:45:f5:e8:49:18:36:d5:cf:7b:f0:2f:45:9c:af:
         27:7f:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org