Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/3230312e3133312e39302e302f32332d3233203d3e203237383137.roa
File:                     3230312e3133312e39302e302f32332d3233203d3e203237383137.roa (raw, json)
Hash identifier:          tujfRW/IJuk6hFekwS+DjiMxKXLIx6yLgQ/NmCtpOTs=
Subject key identifier:   A8:6A:E6:D5:71:08:8C:B1:4A:D0:0E:C9:4D:4E:CF:DA:D0:E5:09:65
Certificate issuer:       /CN=08A26042015ED7345A25228336BD6FF1618453BC
Certificate serial:       22AC62C1806888DB19C10050CB028C95CCBD4AED
Authority key identifier: 08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/3230312e3133312e39302e302f32332d3233203d3e203237383137.roa
Signing time:             Tue 05 Mar 2024 18:11:01 +0000
ROA not before:           Tue 05 Mar 2024 18:06:01 +0000
ROA not after:            Tue 04 Mar 2025 18:11:01 +0000
asID:                     27817
IP address blocks:        201.131.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ac:62:c1:80:68:88:db:19:c1:00:50:cb:02:8c:95:cc:bd:4a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A26042015ED7345A25228336BD6FF1618453BC
        Validity
            Not Before: Mar  5 18:06:01 2024 GMT
            Not After : Mar  4 18:11:01 2025 GMT
        Subject: CN=A86AE6D571088CB14AD00EC94D4ECFDAD0E50965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:ff:13:09:e7:f6:91:80:d9:3d:d0:fd:35:
                    a4:12:9b:75:6a:32:52:0e:e0:b3:ef:a5:58:d9:49:
                    e1:98:c3:14:00:94:dd:27:19:5a:1e:97:a0:83:fa:
                    46:0a:ce:13:b7:c5:e7:52:8a:38:d2:0a:0f:10:84:
                    5e:86:de:f3:93:9f:42:5c:48:35:45:e2:ca:08:af:
                    b1:1d:47:50:2e:bd:68:23:6b:83:bd:90:54:d1:f2:
                    29:a8:27:df:1d:ef:23:42:54:98:90:43:e3:58:bd:
                    ed:5e:f2:14:92:20:6d:82:41:74:c1:e1:97:31:a4:
                    a2:1f:eb:5e:1c:b9:53:da:1b:47:6e:ac:03:2c:30:
                    74:8d:b8:ba:24:2a:c8:d1:cc:f5:2c:78:38:75:05:
                    83:04:00:08:7a:63:55:a6:a7:e1:4f:2e:8c:4f:33:
                    b9:b9:29:bb:73:ad:a6:e7:6e:b0:60:0a:48:16:5f:
                    46:a5:d9:b8:27:4e:b2:35:94:12:6d:fb:4c:f8:96:
                    6e:fb:4b:51:af:e7:1e:81:62:9c:4f:32:c2:38:41:
                    61:cc:73:62:d3:62:39:62:8b:42:80:a1:d5:37:2d:
                    f8:96:e5:57:b1:53:b7:2a:05:4c:57:7b:7e:30:0b:
                    a7:bc:45:28:5a:81:68:71:b6:ea:f4:58:2b:1d:e7:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6A:E6:D5:71:08:8C:B1:4A:D0:0E:C9:4D:4E:CF:DA:D0:E5:09:65
            X509v3 Authority Key Identifier:
                keyid:08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/3230312e3133312e39302e302f32332d3233203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:f9:c3:cf:75:6f:13:df:13:60:a1:f5:dc:3e:95:8a:db:
         dd:5d:c5:0a:2b:27:f1:d9:6c:4e:d6:b5:77:9e:62:5c:c1:53:
         5d:53:52:57:4e:3d:26:b1:09:5d:d0:a3:f8:ee:94:d3:d1:1d:
         b1:9d:73:19:a2:9b:71:d5:3f:8d:c3:a7:da:58:80:92:18:52:
         d7:b8:25:61:6b:10:7c:0d:58:7b:b0:8b:8e:bc:0c:c8:fd:a4:
         62:c8:f2:66:b5:fb:70:af:e1:09:48:65:84:e2:69:a3:b4:cf:
         0c:ac:08:90:f0:95:45:38:cb:3f:ec:0e:0c:49:07:0c:68:17:
         93:9f:f6:d2:4c:1c:49:3f:ff:2d:cb:c1:b6:92:e0:f1:7f:f5:
         78:03:53:42:ef:ce:a7:17:36:4d:ff:bc:24:c2:15:8d:29:6a:
         c8:ae:d3:a1:ce:fc:1c:02:16:ab:f9:62:27:1d:1b:d2:71:c2:
         f2:cd:70:72:a6:29:ae:53:ad:a6:d4:91:00:95:f0:48:39:51:
         3f:12:47:b2:90:f3:4d:75:d8:86:8b:78:af:c3:51:0a:16:4b:
         88:58:83:14:ca:11:44:54:a0:ed:a9:60:14:fc:d9:e9:4c:71:
         44:5a:3a:85:ab:17:c8:2b:08:37:7c:00:a6:8d:c2:ca:d7:e9:
         74:17:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:35 2024 by rpki-client on console-ams.rpki-client.org