Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3138342e302e302f31352d3136203d3e203133343839.roa
File:                     3230312e3138342e302e302f31352d3136203d3e203133343839.roa (raw, json)
Hash identifier:          UW4YXduJdbxuCBjXKo8A+I2GmcyLYfFubK1MMQGRetM=
Subject key identifier:   96:49:4D:D6:C5:05:92:95:B8:30:46:6A:B5:0B:5A:79:FF:8E:92:E3
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       49D87CE3849F3BCA202CA81B87E06E213E1773EB
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3138342e302e302f31352d3136203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:07:01 +0000
ROA not before:           Tue 05 Mar 2024 18:02:01 +0000
ROA not after:            Tue 04 Mar 2025 18:07:01 +0000
asID:                     13489
IP address blocks:        201.184.0.0/15 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 14 May 2024 15:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d8:7c:e3:84:9f:3b:ca:20:2c:a8:1b:87:e0:6e:21:3e:17:73:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:02:01 2024 GMT
            Not After : Mar  4 18:07:01 2025 GMT
        Subject: CN=96494DD6C5059295B830466AB50B5A79FF8E92E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:f4:8c:46:e8:dd:e6:30:a1:ed:34:4e:33:
                    c2:c1:21:12:c2:f0:70:55:d0:40:e7:5e:61:98:54:
                    1d:95:24:d2:20:69:f7:53:12:ce:17:8a:39:8f:a5:
                    29:65:65:c3:67:d5:e4:f5:48:11:a4:81:ef:e1:71:
                    cd:a4:a0:1f:ad:22:4d:60:c3:48:ed:4b:da:0d:b5:
                    92:96:3b:a2:01:92:8c:de:c1:3d:68:63:1c:17:b1:
                    8b:a9:18:47:11:a2:75:73:ae:fd:b8:93:db:f0:7d:
                    af:c1:2c:9d:95:59:db:9e:18:da:20:47:e9:59:f7:
                    f6:27:26:49:30:e2:75:25:e9:dc:3a:cf:c0:64:d5:
                    1f:5f:90:fb:16:5b:11:9f:24:f9:d4:7f:07:fa:9b:
                    1f:f7:f6:4f:91:97:e6:07:6a:84:92:59:14:a6:43:
                    f9:b8:dd:c4:0c:c6:da:5b:5a:fd:6f:e3:40:4b:d1:
                    54:ae:34:66:2b:21:09:82:58:16:03:e1:e2:97:35:
                    8f:05:34:76:f7:48:21:22:72:17:67:c3:c0:db:b5:
                    2e:fe:3e:78:e1:64:58:cd:a3:b0:cf:54:95:40:a9:
                    02:19:d0:4f:a3:52:22:d4:d4:34:81:ef:83:58:a0:
                    01:19:98:ad:c9:d6:3e:82:80:e1:c9:7e:86:26:bb:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:4D:D6:C5:05:92:95:B8:30:46:6A:B5:0B:5A:79:FF:8E:92:E3
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3138342e302e302f31352d3136203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.184.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         8b:16:5d:62:85:e0:d8:18:00:90:09:a2:14:5c:58:d2:3a:79:
         4e:a2:ee:d7:4c:4e:82:78:87:64:8b:93:1a:8c:2a:15:dd:32:
         68:cd:b5:82:c1:0c:b8:b3:09:c0:3c:86:90:7d:10:02:10:28:
         83:7a:f3:99:7e:1e:12:08:84:3a:a5:d7:53:6b:ce:d5:3d:7d:
         15:99:58:9e:c9:3f:5a:85:18:e1:bf:28:d7:c1:af:0d:27:c9:
         c1:ae:79:62:8b:99:81:c7:2a:9d:c8:3d:7e:44:c2:b6:34:ba:
         75:c9:a3:1d:7e:34:2e:87:82:a9:be:2b:64:21:3e:ed:03:9b:
         c8:11:cd:49:f1:dc:59:1e:69:47:3b:ba:8b:ad:26:81:c6:56:
         f1:fa:97:58:e2:24:b6:36:fe:80:ae:a1:8b:b7:49:89:da:bb:
         bc:d7:2e:6c:b1:99:c1:11:7b:62:13:d2:32:03:51:dc:ed:2e:
         44:28:c3:ab:4d:32:21:a9:e0:2e:02:ff:11:83:37:41:bc:9b:
         e0:33:ad:a6:f0:99:88:41:b1:54:5f:68:f3:53:07:4a:7d:db:
         f3:98:4b:5f:dc:35:a1:96:fc:1b:7c:86:49:bf:af:2e:a2:6d:
         c9:7e:d9:1a:f7:e7:af:3e:65:6f:43:1c:08:8a:37:ee:5c:ea:
         68:c6:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:07:35 2024 by rpki-client on console-fra.rpki-client.org