Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134342e302f32342d3234203d3e20323639383632.roa
File:                     3230312e3231382e3134342e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          S4dF8c8A6tP9iCkF33QcatRmAo3kRWwdvHwYdi7kcJw=
Subject key identifier:   4B:45:34:FE:C5:C4:AC:C3:C5:06:B4:A8:8C:06:2B:9B:6C:7B:F7:6D
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       0CAB0A31E964E4050923CB7E70203A123BD9FAD1
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134342e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 05 Mar 2024 17:52:56 +0000
ROA not before:           Tue 05 Mar 2024 17:47:56 +0000
ROA not after:            Tue 04 Mar 2025 17:52:56 +0000
asID:                     269862
IP address blocks:        201.218.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ab:0a:31:e9:64:e4:05:09:23:cb:7e:70:20:3a:12:3b:d9:fa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:47:56 2024 GMT
            Not After : Mar  4 17:52:56 2025 GMT
        Subject: CN=4B4534FEC5C4ACC3C506B4A88C062B9B6C7BF76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:35:4e:54:6b:b9:e2:2c:72:18:8e:be:06:f8:
                    e7:c3:e4:c2:24:69:29:f4:d4:e3:82:f1:c8:0d:2e:
                    fe:11:62:19:2c:98:c1:36:92:bc:8d:76:87:a7:46:
                    a8:30:ef:d2:e8:4c:46:d1:6d:d6:00:b8:95:f1:2c:
                    d4:3a:c4:08:a0:9c:fe:0c:29:7d:83:82:4a:e1:46:
                    2c:e9:19:e9:b7:30:bb:78:72:a3:05:b8:97:99:d9:
                    57:e1:1f:b0:8d:52:c6:57:7d:09:bd:ab:4a:61:d7:
                    00:69:31:ad:2c:05:3b:82:38:9a:83:10:90:00:cb:
                    72:80:ea:2a:aa:92:a6:c0:a0:46:87:47:95:bc:37:
                    fa:3a:e0:1c:a1:de:14:f9:a3:3e:a8:5c:f5:d5:3f:
                    6f:4c:c3:a9:3f:f6:1f:13:ce:60:5e:b2:ce:d3:1c:
                    38:0a:26:bb:8a:ee:44:ed:9e:7a:96:23:e4:a5:45:
                    ce:e0:03:5d:8b:42:63:6a:2a:67:f5:df:52:20:e4:
                    c4:0f:44:63:aa:7d:9f:f3:63:d2:de:07:78:cb:fe:
                    f4:68:a5:84:24:a3:37:aa:80:3b:0d:aa:bc:df:a9:
                    94:7d:d5:9d:db:7f:37:be:59:a7:ba:96:67:41:f3:
                    cb:d7:fd:44:a5:6c:71:e3:ed:14:b2:56:cf:6d:3c:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:45:34:FE:C5:C4:AC:C3:C5:06:B4:A8:8C:06:2B:9B:6C:7B:F7:6D
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134342e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:10:c4:59:18:cc:24:44:97:5b:9f:d7:f9:02:b2:fb:28:
         1a:23:76:c1:00:bb:89:29:8e:13:93:6c:99:eb:25:dc:c8:13:
         fa:be:63:bd:65:09:21:c5:e0:8f:f9:3b:2a:d8:7d:50:e1:af:
         c4:57:82:de:15:ff:70:32:6f:4e:4b:b0:f9:aa:82:a8:66:4c:
         9f:ba:21:55:de:ff:79:3f:08:bf:51:56:53:c6:53:54:bb:b9:
         19:de:f4:84:47:77:ac:47:c1:43:96:30:66:25:cf:87:d6:ed:
         42:a3:d4:60:9f:e4:cf:cb:c8:df:8c:32:c5:8e:32:53:74:45:
         54:95:55:2c:71:f7:4a:35:06:28:9c:fc:d1:69:d1:1d:34:0e:
         0e:d2:8d:2c:7d:92:a8:fd:c6:f5:83:12:bf:72:cf:aa:8d:ff:
         fc:8c:54:42:2d:19:e2:dd:09:42:1d:e6:19:f1:ed:f4:e8:d3:
         36:17:66:37:ca:3f:5e:b5:0f:31:52:39:d0:e5:07:43:cc:ec:
         3d:07:fe:67:4f:9e:14:7e:b7:59:79:ac:40:ee:cc:aa:83:24:
         90:1f:04:69:70:4f:e8:dc:10:7b:eb:e1:53:09:39:70:d5:fb:
         f3:90:96:68:13:91:3b:f1:db:ca:e1:8f:6b:2d:50:eb:d4:24:
         2a:a4:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org