Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3132382e302f31392d3234203d3e203532343339.roa
File:                     3230312e3231382e3132382e302f31392d3234203d3e203532343339.roa (raw, json)
Hash identifier:          1lW8jjCl4Jo9z0HUR3/HBmG4vyhlfQaGpwgq/0YFIYo=
Subject key identifier:   A2:6D:EB:2B:92:49:1E:9A:A9:26:82:89:8D:1B:28:2B:48:38:19:77
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       48BF8C64BCDABB96A8239792EAD731A18D1616CC
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3132382e302f31392d3234203d3e203532343339.roa
Signing time:             Tue 05 Mar 2024 17:52:58 +0000
ROA not before:           Tue 05 Mar 2024 17:47:58 +0000
ROA not after:            Tue 04 Mar 2025 17:52:58 +0000
asID:                     52439
IP address blocks:        201.218.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 17:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bf:8c:64:bc:da:bb:96:a8:23:97:92:ea:d7:31:a1:8d:16:16:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:47:58 2024 GMT
            Not After : Mar  4 17:52:58 2025 GMT
        Subject: CN=A26DEB2B92491E9AA92682898D1B282B48381977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:c4:41:ca:83:a2:60:42:b7:5c:3e:4c:81:
                    1b:50:e3:6b:30:8d:d3:e2:8e:12:11:80:fb:5b:c2:
                    55:70:a2:49:f1:3c:1d:eb:d2:5e:30:16:27:12:59:
                    06:12:33:a3:2a:1e:03:fb:81:d5:d6:3d:19:88:fe:
                    da:7e:26:0f:1e:e0:0b:5a:3f:a0:7d:60:0e:87:f6:
                    be:46:99:3a:95:96:19:77:73:b7:06:50:76:c7:3e:
                    e8:11:f7:82:41:5d:b0:ae:67:fb:e5:f4:1f:59:f1:
                    72:6a:37:f2:49:86:05:38:98:4f:a2:22:39:0f:a7:
                    ea:cd:c4:7e:00:9a:fe:38:1a:d4:7e:45:79:64:91:
                    0e:a0:48:f8:40:aa:04:92:77:3e:b7:14:f5:76:e4:
                    33:53:21:62:f2:78:98:ab:9d:52:a7:7b:16:80:85:
                    a0:72:79:f4:9d:96:d7:7b:d4:18:df:46:a5:3d:92:
                    5b:ce:8d:55:63:3b:f6:6c:c2:da:ea:b3:58:00:22:
                    9b:24:c1:c0:1c:46:37:5b:6e:15:e8:25:d9:f2:96:
                    82:5a:dd:37:4b:94:04:3c:40:2a:3b:ff:7b:bc:56:
                    25:ba:c8:06:cd:2d:b4:e8:55:c3:8a:5d:0f:22:17:
                    6d:52:da:00:7c:8a:69:ea:c8:34:ed:8c:f9:45:14:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6D:EB:2B:92:49:1E:9A:A9:26:82:89:8D:1B:28:2B:48:38:19:77
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3132382e302f31392d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:ee:c8:67:ac:96:55:2e:b9:5e:a5:8e:98:49:68:52:54:1c:
         b4:71:bb:a2:41:7e:e0:bb:0d:0e:c2:d6:90:ca:49:1e:09:f2:
         3f:0c:03:6b:2c:8f:ff:a2:90:3e:03:06:37:af:a9:04:65:9d:
         62:4e:46:0f:7b:5d:26:3a:f1:39:80:cc:54:d5:70:68:b1:ae:
         da:bc:93:09:2e:06:f1:f2:4c:6e:d8:55:13:9d:29:7b:5b:ee:
         37:d9:c3:7b:8f:1e:ea:84:cb:4f:d8:e5:54:42:f4:a0:e6:5a:
         f7:b3:1f:4a:28:a8:36:68:62:ef:2c:73:73:c5:73:a8:a6:ca:
         c5:46:93:12:6c:83:5c:b0:8d:79:46:99:cf:e5:eb:88:31:a8:
         80:87:7f:10:c7:b9:6c:1d:07:c2:a8:a8:08:d7:2a:f7:9f:77:
         ba:4b:3a:94:0e:6d:e0:b9:85:c1:60:1e:c7:19:7a:34:71:66:
         d1:f7:dc:10:e8:d9:84:aa:57:f9:b3:ec:0f:cb:cf:e1:9c:92:
         ea:4d:f4:a0:7b:36:6c:3d:11:bb:89:f3:dc:89:ee:01:2d:2f:
         31:74:9f:2d:9a:a3:00:1d:11:47:6a:99:91:61:59:7b:ba:e6:
         c7:ad:bc:90:25:f4:90:ae:a6:9f:0a:e8:75:bf:fb:c1:ae:83:
         46:62:7a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:24:11 2024 by rpki-client on console-ams.rpki-client.org