Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS28048.roa
File:                     AS28048.roa (raw, json)
Hash identifier:          A0SUmB2JFXEfh959Ittbj8XrzDncQA5iVR+h9kFDT9Y=
Subject key identifier:   03:EF:FB:57:99:C0:91:DF:F2:82:5F:A5:FF:10:39:14:97:EB:DF:F9
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       5ECA079F9B1676F96E8A05D706250060552E22EB
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS28048.roa
Signing time:             Tue 05 Mar 2024 18:07:59 +0000
ROA not before:           Tue 05 Mar 2024 18:02:59 +0000
ROA not after:            Tue 04 Mar 2025 18:07:59 +0000
asID:                     28048
IP address blocks:        201.254.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ca:07:9f:9b:16:76:f9:6e:8a:05:d7:06:25:00:60:55:2e:22:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:59 2024 GMT
            Not After : Mar  4 18:07:59 2025 GMT
        Subject: CN=03EFFB5799C091DFF2825FA5FF10391497EBDFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:68:5f:d9:3c:fd:f0:6f:4d:03:d1:7d:7b:
                    cc:e8:2c:c3:3a:c7:02:c6:2c:42:d6:71:e9:2c:87:
                    0b:95:bb:5b:ee:10:fb:a5:0b:09:c6:c5:d0:28:81:
                    6f:c3:17:d3:7b:02:47:3f:45:ea:48:e8:13:68:e9:
                    25:5f:46:75:ef:0c:0a:45:10:35:9f:20:6a:03:4f:
                    51:77:d0:85:d4:76:e7:31:6d:da:25:c5:25:89:29:
                    a9:92:ac:e1:2d:09:09:47:47:d5:83:f1:5b:99:fd:
                    34:22:81:5b:7c:c3:50:1a:0f:bc:cb:81:45:af:48:
                    34:6c:26:6c:7f:b6:c9:59:6f:ff:d2:3e:d0:99:88:
                    53:45:a7:95:fa:41:b2:1e:f3:5b:0a:b5:99:c4:7b:
                    d6:79:38:65:bd:ad:18:ec:ad:97:7b:cb:f8:f4:14:
                    72:17:46:75:a5:06:75:d2:a1:e4:7f:0c:7d:17:fa:
                    30:20:f9:20:36:6f:ad:ba:19:69:34:5e:f9:69:34:
                    b7:1c:cd:14:84:f6:be:e2:f6:4a:34:df:c8:fb:0c:
                    e8:18:48:39:e5:86:f1:54:69:3a:c2:6a:94:92:a8:
                    53:5b:2c:57:e0:ae:ee:51:f0:b1:21:c1:c7:01:34:
                    ef:df:e9:a8:6c:21:09:5d:68:33:f0:42:cd:e8:73:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EF:FB:57:99:C0:91:DF:F2:82:5F:A5:FF:10:39:14:97:EB:DF:F9
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS28048.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:b2:5d:fa:31:22:49:96:02:df:75:fc:30:f7:20:02:7d:81:
         56:a7:89:2e:bd:64:d8:1c:d3:e4:e8:90:41:8e:2c:2e:a0:a5:
         8f:30:f1:7f:dd:3e:8e:2b:47:78:22:a4:14:0a:18:29:44:6d:
         16:f0:3f:9b:69:36:58:ad:70:85:c7:86:b4:8d:04:e5:cb:ec:
         2e:98:d1:fa:b9:79:21:dc:4f:07:bf:3e:c6:d9:84:cc:12:f5:
         ab:37:dd:6f:fa:9a:58:ae:5c:66:92:73:6b:dd:04:22:4f:a8:
         5c:a8:f8:fe:ac:0c:5f:1d:bc:5c:ea:e8:94:39:fc:60:43:93:
         c9:c3:07:00:41:f5:b2:d2:27:b2:17:f4:56:39:33:49:f1:2c:
         a3:8a:da:01:80:bf:ca:3c:22:da:0b:a6:77:6e:cd:29:15:bb:
         31:fa:cf:eb:5c:b7:8c:bf:f5:1e:cc:a3:06:56:d2:61:40:48:
         fc:a1:35:c2:e8:d6:15:d2:1e:32:8c:21:d4:42:ab:e5:bd:93:
         c5:41:e9:52:15:cb:2a:de:78:03:81:41:28:c2:2a:fa:76:9f:
         52:46:27:a3:87:67:f1:01:39:14:fd:dd:71:d8:29:2f:ba:fc:
         78:26:90:f8:e4:42:d8:a4:03:75:d5:69:fa:58:5e:a6:8b:51:
         c6:2e:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org