Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/3230312e3138322e38302e302f32322d3234203d3e203532333237.roa
File:                     3230312e3138322e38302e302f32322d3234203d3e203532333237.roa (raw, json)
Hash identifier:          gGlF3OQLmgZ9sQuqVxWxPhIJn75nTwoMusJPgQCiaYU=
Subject key identifier:   9E:30:7C:DA:83:6E:38:45:A7:C7:C8:82:7A:60:C8:8B:DE:EE:66:6F
Certificate issuer:       /CN=49D8CCEA8049862215045F45EF0D87C4CB0A6F15
Certificate serial:       36A95B6683B43294FC1A88C3E0091330A1E9995E
Authority key identifier: 49:D8:CC:EA:80:49:86:22:15:04:5F:45:EF:0D:87:C4:CB:0A:6F:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/3230312e3138322e38302e302f32322d3234203d3e203532333237.roa
Signing time:             Wed 06 Mar 2024 18:45:00 +0000
ROA not before:           Wed 06 Mar 2024 18:40:00 +0000
ROA not after:            Wed 05 Mar 2025 18:45:00 +0000
asID:                     52327
IP address blocks:        201.182.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Jul 2024 04:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a9:5b:66:83:b4:32:94:fc:1a:88:c3:e0:09:13:30:a1:e9:99:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49D8CCEA8049862215045F45EF0D87C4CB0A6F15
        Validity
            Not Before: Mar  6 18:40:00 2024 GMT
            Not After : Mar  5 18:45:00 2025 GMT
        Subject: CN=9E307CDA836E3845A7C7C8827A60C88BDEEE666F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:a4:17:51:63:6a:87:2d:16:8e:08:4c:fd:
                    64:e2:cf:aa:b2:57:c7:4e:59:04:5f:b8:8c:07:ad:
                    a8:fe:41:63:f3:c4:98:f7:b2:3b:62:3e:bd:d4:95:
                    d1:cd:d8:17:d9:50:d5:0c:4b:6c:5f:f5:60:f2:ce:
                    f3:4e:23:19:17:2a:1e:ef:39:74:9a:26:96:8d:b4:
                    9d:74:d6:e2:94:60:56:ff:8c:30:ad:0c:9a:9b:98:
                    58:b6:c2:04:9d:ba:f0:97:7f:f8:3f:2e:6c:b5:dd:
                    ab:29:15:47:20:7d:f1:90:18:32:a3:fe:5f:a6:6b:
                    ce:c4:17:aa:62:b9:4f:16:8d:9b:1a:cc:9c:32:d4:
                    9e:fb:36:f9:3e:29:9c:ce:7f:ce:7f:87:21:23:ac:
                    38:f8:bc:73:3d:b2:1b:c8:9e:2b:9c:8d:33:bf:09:
                    66:f7:0b:2b:e7:34:e5:38:2b:ef:09:5e:f9:94:fa:
                    2f:d5:77:e5:8a:b1:13:5c:8c:bf:53:a7:c6:a5:b3:
                    57:ce:6f:fc:f1:05:c9:f5:c8:20:db:37:42:df:21:
                    ca:fb:44:28:b1:ba:05:15:d7:96:0f:66:28:ea:14:
                    26:e4:ae:a5:b5:c7:63:8e:8f:a6:83:c1:88:ee:29:
                    ab:f3:97:7f:37:43:d6:d6:2b:ec:ca:f6:0c:e5:dd:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:30:7C:DA:83:6E:38:45:A7:C7:C8:82:7A:60:C8:8B:DE:EE:66:6F
            X509v3 Authority Key Identifier:
                keyid:49:D8:CC:EA:80:49:86:22:15:04:5F:45:EF:0D:87:C4:CB:0A:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/3230312e3138322e38302e302f32322d3234203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:38:37:94:1f:b8:f1:12:a1:56:19:52:4c:3e:4c:8d:f5:47:
         ba:b1:15:9f:3a:fa:8a:5c:4b:4e:d7:b3:1f:36:bc:b0:0a:3c:
         eb:51:fb:2b:f8:23:ae:d8:37:db:f4:5a:e6:82:2c:1b:af:d5:
         f1:ab:ca:d9:25:f2:92:41:c9:53:8f:a4:ff:28:6a:af:a3:98:
         2e:db:76:a0:d2:cc:11:14:4d:04:9a:bc:ab:5a:c5:65:bd:a8:
         e6:57:97:b7:8f:2f:20:c4:4e:6c:e0:60:14:b1:da:7b:21:35:
         3b:98:96:6e:df:08:4f:79:08:c7:fb:95:b6:a8:0e:90:33:cf:
         37:b5:66:72:f7:2a:b3:ee:84:92:c4:27:25:da:28:70:9f:65:
         04:b6:b2:31:a4:1e:2a:30:97:67:0c:06:7c:24:f9:f8:08:27:
         0f:73:88:7c:e3:3c:47:c6:3c:d4:af:55:da:be:f7:59:87:4e:
         db:3a:e3:94:0f:e3:30:22:87:a7:38:51:67:aa:1a:b8:8c:3a:
         d6:10:55:d8:d5:a5:95:a9:4b:a6:7f:7f:e3:25:b0:5c:2d:ca:
         61:07:52:f1:79:84:8d:8e:a7:01:30:09:df:19:8a:93:59:bd:
         f2:5f:5c:bc:d2:91:d2:7d:8a:a5:c2:0b:c4:84:43:3e:db:8a:
         2f:a2:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 18:13:09 2024 by rpki-client on console-fra.rpki-client.org