Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230312e3234382e302e302f31352d3234203d3e2038303438.roa
File:                     3230312e3234382e302e302f31352d3234203d3e2038303438.roa (raw, json)
Hash identifier:          fYtUlYg9JtXsg3EHu24hfGAbZuPaSYmIQUevoYUb6NU=
Subject key identifier:   C3:EC:66:60:68:48:64:28:D7:41:FE:A6:28:53:A5:08:AA:CE:A6:1A
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       593BA039011B96E303ABB0E71FFB699C8EA89994
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230312e3234382e302e302f31352d3234203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:15:03 +0000
ROA not before:           Tue 05 Mar 2024 18:10:03 +0000
ROA not after:            Tue 04 Mar 2025 18:15:03 +0000
asID:                     8048
IP address blocks:        201.248.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3b:a0:39:01:1b:96:e3:03:ab:b0:e7:1f:fb:69:9c:8e:a8:99:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Mar  5 18:10:03 2024 GMT
            Not After : Mar  4 18:15:03 2025 GMT
        Subject: CN=C3EC666068486428D741FEA62853A508AACEA61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:29:a0:03:c1:1a:c6:8e:6e:29:13:6f:47:
                    7a:0c:2d:9d:6c:42:c9:3c:30:ad:41:d4:ce:f8:fd:
                    4a:7e:a2:44:f4:37:84:f6:f0:1a:d9:dc:ec:3d:e2:
                    79:ff:20:97:da:24:2a:1f:18:cd:20:53:6f:e0:cd:
                    1c:39:ca:cf:1e:17:d9:df:0d:89:a6:5b:4f:2b:df:
                    40:56:ae:16:49:e1:4a:cb:6b:84:c2:33:ee:46:6b:
                    1b:34:d3:bc:6d:12:33:c7:e4:9f:6d:e3:13:62:c1:
                    96:60:95:8b:ee:94:c1:90:56:76:51:d1:a3:77:aa:
                    fb:c5:d1:ec:66:a6:cc:a1:aa:ea:e6:7e:93:93:28:
                    ba:07:17:cc:6a:9d:30:e5:b2:84:00:63:8a:0d:b2:
                    a4:18:b9:d2:28:de:f9:8a:0e:20:4c:fd:80:c7:25:
                    ac:a4:3f:c6:f2:7e:d9:16:55:c4:6b:5e:b7:ff:90:
                    10:5b:46:46:d0:a9:7a:ac:6f:45:f2:5f:e0:16:ee:
                    42:19:e4:a2:ac:eb:ff:4d:8d:94:21:e5:f9:7d:e2:
                    ce:38:ca:d5:a3:8a:29:15:78:c1:2e:31:53:85:64:
                    2d:b1:b3:46:63:c8:b4:7e:7e:e4:f1:19:f4:ff:79:
                    11:1f:14:87:0d:08:88:e0:d7:61:11:c6:0c:fe:49:
                    14:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EC:66:60:68:48:64:28:D7:41:FE:A6:28:53:A5:08:AA:CE:A6:1A
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230312e3234382e302e302f31352d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.248.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:d9:3a:90:64:dc:ae:08:55:e4:51:fc:d9:1e:00:db:3a:
         3b:26:23:9b:0b:2f:ac:a7:42:4f:b7:d0:6b:c9:fc:87:36:5a:
         36:a5:91:c9:04:a4:9f:0e:2f:0e:e1:37:47:f8:c3:8a:3d:3f:
         d9:f2:d3:e1:3c:6c:b0:96:7b:79:d6:8d:e3:6a:48:65:b5:d5:
         dd:3d:39:f5:78:6c:97:43:8f:b8:f8:8e:9c:2a:56:51:09:d5:
         21:90:c6:a3:df:64:bb:c7:35:08:ff:4b:31:c9:29:0f:33:15:
         b4:45:7e:f1:03:9c:11:c1:17:99:8a:35:91:32:97:34:e2:1c:
         8f:80:6b:0b:d0:49:25:1b:cc:97:f8:cf:6c:a3:5c:ae:8e:58:
         95:42:89:75:aa:5f:76:35:47:78:6a:8c:7b:af:37:c9:a8:9d:
         18:6f:b5:e0:71:60:37:07:cf:be:5f:dc:82:b9:0f:41:18:7d:
         38:48:4c:34:60:f4:05:2c:4c:ee:76:35:22:74:18:8e:2f:43:
         8b:34:ea:ab:22:45:e7:87:3c:a3:6a:07:a8:8f:0a:8e:9b:c9:
         ab:44:bf:a8:37:31:b3:a4:cd:c8:99:cf:93:db:b0:eb:83:28:
         dc:2b:66:b1:43:25:37:44:c9:9a:ae:85:44:17:6c:e9:86:40:
         6e:1e:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org