Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3234302e302e302f31362d3234203d3e2036313437.roa
File:                     3230312e3234302e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          T6ZloDSkQ1Sbz+mKaBUeGcUnAJeksCPQhb5DfBe0sTA=
Subject key identifier:   15:94:66:EC:8A:6C:E8:C7:AB:02:FB:5A:BA:46:31:63:43:34:3F:C8
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       2F26CC07B14249FBBD62DCE1C3C973EA46118EB4
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3234302e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 18:20:56 +0000
ROA not before:           Tue 05 Mar 2024 18:15:56 +0000
ROA not after:            Tue 04 Mar 2025 18:20:56 +0000
asID:                     6147
IP address blocks:        201.240.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:26:cc:07:b1:42:49:fb:bd:62:dc:e1:c3:c9:73:ea:46:11:8e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:56 2024 GMT
            Not After : Mar  4 18:20:56 2025 GMT
        Subject: CN=159466EC8A6CE8C7AB02FB5ABA46316343343FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:20:3f:95:2a:51:ec:26:0d:8f:f6:c7:a5:
                    cf:12:e2:9e:44:06:ed:3e:25:8e:e9:65:d5:31:d7:
                    f3:b4:c3:bf:b0:77:ff:a9:e8:b3:ac:de:51:6c:77:
                    59:ae:23:ca:73:d1:d9:d4:d8:06:77:f1:48:1c:11:
                    c0:b7:31:0a:c4:0b:5a:17:7c:d8:09:0d:44:5e:a6:
                    67:90:e2:4a:a7:e0:bf:b9:3c:cf:ac:1c:de:65:d4:
                    90:87:fe:ba:b1:98:e1:fc:5e:b4:27:45:cf:80:5f:
                    42:65:21:67:88:b6:3d:48:9d:90:86:01:be:2b:3c:
                    43:47:52:56:d2:a0:a4:c9:fa:d6:7c:9f:94:84:fb:
                    50:32:c9:d7:51:a9:56:8b:d0:9b:af:ba:f5:07:d9:
                    59:d8:3a:68:61:8c:ce:fe:0b:68:4e:05:df:1d:4e:
                    58:20:71:8f:92:df:b2:54:bb:cf:09:14:71:01:0b:
                    5e:77:da:78:d2:a1:8a:ad:d0:2e:4c:c5:77:1e:7e:
                    0d:4f:06:aa:b2:01:94:e2:5f:60:35:a6:34:4b:5b:
                    e1:15:17:55:fd:f9:49:6f:06:d1:80:dc:3b:54:9d:
                    1e:5c:bf:db:ce:30:da:11:e9:6e:28:cf:b6:bd:e1:
                    05:66:a3:f4:6e:c9:70:17:9e:59:b2:9a:1c:21:dd:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:94:66:EC:8A:6C:E8:C7:AB:02:FB:5A:BA:46:31:63:43:34:3F:C8
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3234302e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:ff:7d:1b:be:62:8b:fb:4b:fe:cc:47:20:15:30:85:d8:c2:
         5b:09:09:4c:78:7d:23:37:2c:ce:3b:85:79:f7:90:e8:cf:1b:
         83:ce:a3:e2:9e:7d:78:22:6d:d9:3b:52:0b:04:15:55:d9:99:
         5a:a1:4f:e1:70:74:06:86:59:45:1d:a3:1c:55:e7:f2:0c:f1:
         88:80:fb:c1:1d:f3:0a:c1:be:45:0a:3b:b6:e0:8b:3a:bb:a9:
         e3:9c:8a:d3:4f:e9:6d:4b:23:97:a9:5b:49:9b:40:75:00:ce:
         8c:50:d9:4e:6b:63:6f:04:46:28:85:11:cd:70:4e:98:eb:db:
         2b:5f:0c:bd:df:fa:ce:26:5c:24:49:86:b7:36:ed:1d:52:17:
         db:0c:a4:95:7f:91:f0:1a:12:bc:fd:e6:f8:1b:6f:7b:14:29:
         45:1a:22:91:e8:0f:6b:78:a8:37:e7:83:99:ad:8d:82:13:af:
         3f:1a:e0:7e:bc:ba:0d:aa:c1:01:0f:d2:e1:96:8b:ce:01:0d:
         65:1f:0f:d6:11:81:31:46:e8:52:d3:6f:71:23:f9:97:d1:40:
         04:e3:68:c6:f2:cb:7a:61:7e:97:3e:9e:13:ed:56:a3:4c:2d:
         77:d8:66:52:1e:10:06:36:04:01:f2:19:ca:46:3f:b4:78:fa:
         4f:b0:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org