Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133352e302f32342d3234203d3e20323731383432.roa
File:                     3230312e3231382e3133352e302f32342d3234203d3e20323731383432.roa (raw, json)
Hash identifier:          o8n/TUOHYzSCQsOd95gGhS8x8XZsORqWdBQN95g7hGA=
Subject key identifier:   85:71:53:AA:DF:AC:68:DA:62:E7:45:17:11:C4:5D:19:10:35:4B:9A
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       2699B16F1B7A4F7FD761B293821EFEF9B27723F3
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133352e302f32342d3234203d3e20323731383432.roa
Signing time:             Tue 05 Mar 2024 17:52:57 +0000
ROA not before:           Tue 05 Mar 2024 17:47:57 +0000
ROA not after:            Tue 04 Mar 2025 17:52:57 +0000
asID:                     271842
IP address blocks:        201.218.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:99:b1:6f:1b:7a:4f:7f:d7:61:b2:93:82:1e:fe:f9:b2:77:23:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:47:57 2024 GMT
            Not After : Mar  4 17:52:57 2025 GMT
        Subject: CN=857153AADFAC68DA62E7451711C45D1910354B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:88:55:2d:c7:ff:85:3d:dc:20:1e:6b:c2:
                    22:e9:f2:20:ec:ae:e6:a1:92:9e:70:58:1e:89:1d:
                    3e:8b:38:67:05:ec:63:50:8f:bf:87:ef:7d:c8:96:
                    84:a2:9c:65:3b:78:23:14:5b:d7:36:6f:53:4c:41:
                    d5:c4:bf:39:15:3d:5f:41:f4:bc:e4:cb:92:bc:01:
                    c8:c8:06:80:c6:38:f8:d2:a9:f6:db:c8:bc:6e:d3:
                    66:7e:98:cb:21:bc:7d:f2:6f:ee:fc:cc:03:2a:70:
                    40:fb:70:98:92:98:76:f0:4c:85:d6:c6:16:9b:da:
                    fc:8a:14:17:3e:f6:38:52:14:7b:06:72:51:7d:67:
                    2a:55:5c:12:cd:ab:84:0f:d5:40:fa:96:f0:d4:86:
                    f9:c9:30:d6:a3:09:38:a0:00:3f:2a:58:58:cd:f1:
                    4f:ed:e7:64:9f:fa:9a:8a:59:41:6f:88:71:ae:96:
                    11:07:c0:f1:83:8f:5e:5f:dc:26:c6:da:84:8a:5e:
                    14:09:77:9d:57:8f:0f:be:32:fb:be:6a:3c:30:06:
                    0d:31:49:73:f7:3b:ea:08:2c:65:2b:77:c3:00:84:
                    41:ce:84:c2:78:f4:8d:ec:e6:32:d1:bf:68:4a:3c:
                    97:c6:24:58:30:b3:fa:83:30:64:69:09:36:42:95:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:71:53:AA:DF:AC:68:DA:62:E7:45:17:11:C4:5D:19:10:35:4B:9A
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133352e302f32342d3234203d3e20323731383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:17:d9:0d:9a:d2:59:e4:9e:a0:b5:16:7b:df:26:95:7b:a1:
         bc:e9:bc:36:36:96:36:28:da:c6:62:c8:d7:1b:91:ff:2a:65:
         44:9d:eb:f5:7d:a9:48:da:12:78:2d:b5:fa:f1:dd:93:00:a8:
         1b:ef:bf:62:54:9b:49:e4:3b:e6:01:fa:70:1e:5c:44:28:20:
         02:41:d2:5c:ca:46:df:26:df:60:16:1b:07:f5:da:63:08:1f:
         4f:3d:96:d0:c0:83:cb:d6:3b:c9:57:ae:c4:92:83:ff:69:af:
         06:47:b0:23:ff:af:7f:fe:7a:ba:0a:fc:2a:85:1a:bf:aa:87:
         03:d9:bc:a0:1f:38:44:a0:2c:cd:7f:96:a9:87:d5:ca:18:6c:
         0a:cd:76:b9:83:81:2c:78:67:61:9b:c9:f2:c9:e8:b8:70:09:
         08:68:9d:bc:46:bc:4e:84:e8:10:f7:db:dd:ac:b0:7f:a0:b9:
         01:3b:1c:90:a0:ab:c5:37:fb:eb:79:3b:d5:32:29:c4:67:ca:
         6a:93:9f:38:86:2f:c5:f0:38:14:43:59:bd:6c:aa:88:81:4e:
         cc:e4:ab:25:32:3e:72:e6:a8:67:da:44:77:d7:8b:c6:d1:3b:
         81:8d:ae:57:49:f3:70:58:c5:c2:38:03:51:0d:40:d6:a7:62:
         43:58:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org