Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3133312e3232302e302f32322d3234203d3e2036313437.roa
File:                     3230312e3133312e3232302e302f32322d3234203d3e2036313437.roa (raw, json)
Hash identifier:          sP+4sL1KICyhhvNKbvWvVNOZJayEGw98v+QM41kSAys=
Subject key identifier:   58:1D:62:3C:55:DE:76:28:D4:F6:1A:24:A1:B3:E3:96:09:AA:ED:22
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       74B1B9244F189A2EC69291FD68FD7D757AE7F730
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3133312e3232302e302f32322d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 18:20:57 +0000
ROA not before:           Tue 05 Mar 2024 18:15:57 +0000
ROA not after:            Tue 04 Mar 2025 18:20:57 +0000
asID:                     6147
IP address blocks:        201.131.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b1:b9:24:4f:18:9a:2e:c6:92:91:fd:68:fd:7d:75:7a:e7:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:57 2024 GMT
            Not After : Mar  4 18:20:57 2025 GMT
        Subject: CN=581D623C55DE7628D4F61A24A1B3E39609AAED22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:a1:3c:e7:65:31:32:1f:21:35:7f:c8:05:
                    b3:7c:0d:7b:40:79:65:c5:2f:2b:b1:ed:c4:3e:b0:
                    48:24:b7:99:57:ae:c5:5a:64:4e:bc:12:1b:35:65:
                    87:a9:6a:41:03:9c:23:fc:07:45:4d:db:91:2b:46:
                    69:9e:f0:16:1f:7e:b4:35:a5:4d:28:2d:ed:a0:b6:
                    05:ec:87:e7:b7:26:1c:31:62:58:eb:f5:fb:50:5c:
                    2b:d1:ad:e3:c1:26:04:8a:fc:a6:9c:14:4b:0d:d6:
                    34:13:aa:c2:bb:9f:63:45:83:30:51:e9:ad:0f:06:
                    0d:60:68:f5:ee:f0:a8:ca:8b:ab:fd:57:ce:90:53:
                    a4:53:ee:e6:4a:9f:f2:58:b6:47:5a:41:c8:f1:1e:
                    02:c2:19:c1:94:74:b6:39:50:68:d2:6f:53:c1:b5:
                    d4:11:1a:ca:68:c1:80:82:cf:08:a0:ba:8f:1c:1e:
                    72:71:91:7b:9a:c1:ab:c2:c4:75:72:82:fb:4f:45:
                    12:be:6e:23:9a:20:52:ef:32:12:d6:4b:65:22:a5:
                    04:f0:41:45:2c:82:8e:2f:42:1f:88:ed:49:5a:60:
                    06:30:1f:7b:97:9d:8e:54:82:4b:15:6e:1a:0c:19:
                    36:05:85:51:d4:16:54:bf:05:61:7e:b6:c9:1c:8b:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1D:62:3C:55:DE:76:28:D4:F6:1A:24:A1:B3:E3:96:09:AA:ED:22
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3133312e3232302e302f32322d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:c4:b3:1d:31:0e:55:92:2b:7e:02:65:63:54:71:d8:d0:ea:
         64:9d:f0:e5:ad:d9:44:71:ae:2c:e8:b3:fa:48:1a:7e:fc:fe:
         7c:76:62:d7:4c:f3:ab:2b:ac:48:14:f7:33:ac:07:e5:26:f0:
         ce:09:93:ee:86:8a:9c:f0:26:8d:fb:43:3c:f2:ab:0d:12:09:
         00:88:01:ca:61:2b:29:ea:df:be:f4:05:1f:18:53:2e:04:a5:
         53:92:9d:17:bd:41:da:ee:6c:97:49:62:94:2e:7d:1b:46:39:
         f4:cc:ea:1e:57:86:9a:25:5a:ba:b9:0c:59:52:2d:78:0e:08:
         2e:2a:2d:21:13:f4:5c:a7:06:74:9d:3f:35:36:75:2a:b2:41:
         5d:a4:16:1c:b3:24:1c:23:91:52:e6:b1:40:d8:77:45:c1:2c:
         f5:8e:1a:d7:7f:f0:e0:ea:df:46:e8:fc:1c:26:5e:45:aa:d2:
         5e:74:55:e4:aa:e2:63:9f:3d:0c:45:9f:d6:23:82:f5:22:a7:
         3b:9b:2b:36:c0:ae:a8:41:b0:1f:d1:2b:de:c4:71:6a:d3:6a:
         8b:99:cb:53:81:ec:a7:ab:95:00:69:c9:64:4f:2e:1f:52:bc:
         b6:d4:b6:a6:b2:d1:a6:82:30:08:bf:45:2b:77:b2:c4:03:84:
         9f:c9:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org