Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e302e302f32322d3232203d3e20323635383130.roa
File:                     3230312e3138322e302e302f32322d3232203d3e20323635383130.roa (raw, json)
Hash identifier:          w8XZPVGtrkYLfH9Ps7hS+yvRcWGUDrymTEdnnQGbzeY=
Subject key identifier:   F3:18:EC:02:E6:16:41:6E:3F:98:88:D2:5C:E9:92:13:39:20:3F:CD
Certificate issuer:       /CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
Certificate serial:       6D6599E13C7A56105182FE3A58B55544C147CACE
Authority key identifier: 19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e302e302f32322d3232203d3e20323635383130.roa
Signing time:             Tue 05 Mar 2024 18:01:35 +0000
ROA not before:           Tue 05 Mar 2024 17:56:35 +0000
ROA not after:            Tue 04 Mar 2025 18:01:35 +0000
asID:                     265810
IP address blocks:        201.182.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:65:99:e1:3c:7a:56:10:51:82:fe:3a:58:b5:55:44:c1:47:ca:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
        Validity
            Not Before: Mar  5 17:56:35 2024 GMT
            Not After : Mar  4 18:01:35 2025 GMT
        Subject: CN=F318EC02E616416E3F9888D25CE9921339203FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7e:36:36:89:67:44:ca:9f:26:6e:ff:5c:a1:
                    25:63:9c:fe:a7:f9:ec:89:27:cf:ca:bc:b9:a0:3e:
                    0d:a7:85:d4:8c:7a:67:a5:e3:48:a0:f7:9a:d2:1c:
                    b0:b7:2a:17:9d:9e:92:1e:75:91:bc:a9:26:b5:a1:
                    63:cf:82:29:3b:39:ef:92:46:39:9c:16:1a:7f:51:
                    ff:7f:cc:34:12:4d:8e:21:53:e3:22:15:25:3b:b2:
                    80:b7:9e:6c:b5:a6:76:08:f0:df:16:98:94:c6:f3:
                    7e:13:ea:d3:0e:ef:d8:ed:3b:82:51:4e:8f:da:46:
                    26:a2:5e:ae:ee:06:e1:cc:34:f6:66:b0:cb:40:d0:
                    73:18:1e:bf:14:0f:da:3c:2d:07:4c:ee:47:44:ab:
                    67:35:f8:18:47:09:2b:0a:bf:49:81:f6:69:80:50:
                    fa:6d:ec:38:bc:31:58:49:c3:ac:84:4e:f6:11:e1:
                    20:b1:47:b2:b2:c3:6c:db:73:c8:44:02:99:4e:3c:
                    00:cb:4a:4d:91:b7:73:69:c4:36:af:d4:09:28:ac:
                    44:ca:63:cf:1f:fe:07:fc:92:cc:b7:af:3f:a3:9f:
                    68:91:30:81:20:7a:28:a3:65:8b:d2:0e:0d:f6:49:
                    68:a6:1d:00:46:3f:db:38:2b:0c:98:f1:b9:d2:72:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:18:EC:02:E6:16:41:6E:3F:98:88:D2:5C:E9:92:13:39:20:3F:CD
            X509v3 Authority Key Identifier:
                keyid:19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e302e302f32322d3232203d3e20323635383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:d5:bf:15:f3:18:d3:b5:8e:e2:c5:f6:4e:8b:60:2b:5c:63:
         55:a4:1c:09:25:e7:6b:6c:c9:ed:d4:a9:e8:12:d6:fa:6e:5e:
         b2:c0:de:ee:c5:33:3c:72:7e:32:14:33:7f:68:c4:f0:6e:d9:
         26:85:aa:2b:fa:20:1a:c4:09:01:e2:39:c6:33:4d:ce:38:3a:
         11:33:84:c4:1a:24:be:27:04:58:78:5a:b9:94:56:11:99:d5:
         76:e5:e2:b6:43:d1:d1:74:24:82:c1:c7:58:e4:74:be:88:44:
         1d:f1:14:fa:70:e7:19:97:93:d9:bf:03:39:51:63:f3:5b:76:
         30:99:81:c6:cc:67:9a:01:5c:94:1c:8b:ea:7b:00:73:85:99:
         93:8c:f2:5e:07:8c:4a:2b:68:4c:af:80:61:51:e0:2d:97:38:
         a9:13:6a:83:80:21:49:de:a4:97:a6:70:37:6a:71:c1:31:05:
         0b:97:4e:7d:ab:df:bf:da:66:e5:4f:13:5a:c7:ca:6e:a1:a8:
         00:2c:e9:81:95:fa:c8:5a:ca:6c:36:a6:24:4e:6e:85:f0:f0:
         67:85:40:92:a1:fc:46:cd:68:1c:06:d6:2d:0e:e7:e2:5c:9a:
         19:9d:ba:d6:30:77:6a:68:55:4b:a6:b9:3c:2d:02:62:79:44:
         42:3c:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:29 2024 by rpki-client on console-fra.rpki-client.org