Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133302e302f32342d3234203d3e20323639383632.roa
File:                     3230312e3231382e3133302e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          pirjCk90tMawKQGcjl3Brt4XTzn4HiVpz+obeDpY/+k=
Subject key identifier:   28:8A:86:C5:4A:6B:A8:79:73:A8:92:95:D3:F1:B7:C1:99:A2:C3:7A
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       0E7C64A7F8A7A10A70F7C41D2333C350FA69E642
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133302e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 05 Mar 2024 17:53:02 +0000
ROA not before:           Tue 05 Mar 2024 17:48:02 +0000
ROA not after:            Tue 04 Mar 2025 17:53:02 +0000
asID:                     269862
IP address blocks:        201.218.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7c:64:a7:f8:a7:a1:0a:70:f7:c4:1d:23:33:c3:50:fa:69:e6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:48:02 2024 GMT
            Not After : Mar  4 17:53:02 2025 GMT
        Subject: CN=288A86C54A6BA87973A89295D3F1B7C199A2C37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:95:2c:85:de:ff:4c:23:c3:bf:e2:78:d1:
                    eb:34:d8:e4:90:e2:96:c9:4e:2b:d8:04:1d:dd:94:
                    75:10:ae:e5:ad:8b:b3:c4:d8:9e:2e:05:c8:b9:eb:
                    74:41:20:3c:45:00:1c:64:23:80:7e:a0:df:5a:39:
                    c1:77:29:67:e7:ce:1b:a3:ae:79:78:39:7e:74:79:
                    43:71:92:bd:8e:60:2c:68:86:e5:2a:fe:40:ff:cc:
                    ea:eb:43:46:37:5d:70:ab:fd:13:06:a8:44:68:27:
                    54:19:e2:bc:87:56:d4:b6:aa:06:8a:86:4c:7e:d9:
                    56:63:14:c5:1f:96:ec:9c:b0:dd:10:64:6c:86:a0:
                    0e:85:94:e1:ec:0d:e2:80:83:c1:46:10:b2:1e:81:
                    b9:84:cf:a5:1c:57:2f:56:ad:cb:6a:1f:91:06:81:
                    e4:06:c9:64:3f:f7:bd:d6:5a:f5:bd:97:5e:33:b2:
                    74:92:83:0c:84:c6:9f:d5:6e:19:0b:79:ab:cf:08:
                    fb:e0:8c:4c:61:61:4f:a9:7b:0d:82:cf:71:7f:f4:
                    a8:83:9b:12:d8:fa:37:0e:8e:89:ad:42:84:70:23:
                    d1:1d:c9:d2:25:51:f9:5a:50:a7:fc:da:6c:bf:36:
                    34:8f:9e:90:05:86:05:c1:1e:a3:45:ee:8d:38:c8:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8A:86:C5:4A:6B:A8:79:73:A8:92:95:D3:F1:B7:C1:99:A2:C3:7A
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133302e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c7:14:1c:33:89:01:70:5f:54:2c:aa:39:c5:8e:87:ea:41:
         85:0e:55:6b:c5:fa:c8:6c:34:16:4a:48:bb:36:a5:ab:60:3c:
         a1:51:37:d6:bf:b8:21:17:0f:03:74:c7:52:61:55:90:85:5b:
         a8:bf:00:1f:f9:54:d8:e3:84:8c:69:84:b2:76:52:33:ba:f0:
         0d:72:22:8c:f4:7d:14:8f:7d:46:0d:c5:62:83:01:86:8b:e2:
         c7:8d:af:f4:7c:78:b8:5d:2e:a6:3b:3a:06:66:c6:7d:08:67:
         e7:78:90:d4:2e:6e:f9:ab:32:a8:97:af:97:95:7c:2b:7a:f2:
         90:b2:bf:d6:3e:2a:ab:c8:e3:97:21:96:ab:44:a7:e7:b3:c0:
         58:d1:12:49:e3:ca:bb:b2:9e:b5:ae:e9:ea:38:0e:1e:45:ef:
         33:5a:42:aa:d2:1b:8c:d7:3a:0a:c6:29:fa:19:27:f6:d3:4b:
         62:f5:33:de:eb:c8:5f:bb:a3:cb:99:2c:79:19:20:dc:33:54:
         3f:5a:4d:16:c4:6d:8e:54:7c:18:ff:d4:26:d5:04:6d:53:11:
         f3:be:d0:d6:e0:68:db:ae:46:64:95:ee:a1:0a:45:c1:58:72:
         1b:d1:e4:eb:a9:12:db:99:67:59:95:28:0a:63:45:db:38:28:
         cd:a3:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org