Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e302e302f32342d3234203d3e20323635383130.roa
File:                     3230312e3138322e302e302f32342d3234203d3e20323635383130.roa (raw, json)
Hash identifier:          xPgREvYhLsOjrTDemPcv5eFTrXcaA/3Qz2rcH81m/hM=
Subject key identifier:   41:A8:FB:9A:F1:1A:BF:01:64:F1:46:00:CF:87:A9:E4:94:FE:A6:77
Certificate issuer:       /CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
Certificate serial:       2803EA20C4F88DCC9ABCDE95024AA1A9C208312D
Authority key identifier: 19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e302e302f32342d3234203d3e20323635383130.roa
Signing time:             Tue 05 Mar 2024 18:01:36 +0000
ROA not before:           Tue 05 Mar 2024 17:56:36 +0000
ROA not after:            Tue 04 Mar 2025 18:01:36 +0000
asID:                     265810
IP address blocks:        201.182.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:03:ea:20:c4:f8:8d:cc:9a:bc:de:95:02:4a:a1:a9:c2:08:31:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
        Validity
            Not Before: Mar  5 17:56:36 2024 GMT
            Not After : Mar  4 18:01:36 2025 GMT
        Subject: CN=41A8FB9AF11ABF0164F14600CF87A9E494FEA677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:3a:32:ca:9c:d0:3a:fc:c7:cc:c8:01:2b:
                    12:9c:42:ee:41:be:45:84:e6:f6:64:c7:19:36:51:
                    9e:a8:25:85:f1:5a:d7:ea:4c:c4:88:14:49:e9:af:
                    a5:e0:ce:26:fa:d0:0f:4a:7a:e4:63:94:d2:91:5f:
                    ee:b2:b3:c0:7e:86:69:ac:98:db:3e:3f:73:52:9d:
                    95:5c:38:97:ef:88:09:0d:cf:41:5e:72:eb:65:9e:
                    6e:9c:43:c9:b1:f0:ce:83:37:74:5c:55:fd:11:24:
                    89:9a:90:e4:43:2a:c5:7d:5c:7f:dd:90:e5:00:72:
                    e8:ef:2a:69:08:86:51:27:eb:20:f7:e8:22:df:d3:
                    0c:eb:b4:f6:a9:dc:d2:dc:56:53:e0:9e:01:16:14:
                    34:db:61:89:38:5c:18:89:3d:95:88:a6:01:e5:d9:
                    a4:83:ae:9b:62:e6:c0:e5:a1:62:51:a9:c7:26:6e:
                    fe:29:6f:3f:7e:88:c1:17:40:ac:0a:ea:5c:41:06:
                    63:d5:8b:8b:e4:ca:12:3c:b1:d1:96:99:78:72:4f:
                    6a:09:1b:7b:d2:4a:e4:9c:7b:db:ac:24:ae:bd:51:
                    ec:6c:2f:02:0d:ea:de:fb:1f:da:59:7e:99:f6:a0:
                    61:6b:02:04:ae:e1:c7:06:57:cb:6f:0c:b8:a5:62:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A8:FB:9A:F1:1A:BF:01:64:F1:46:00:CF:87:A9:E4:94:FE:A6:77
            X509v3 Authority Key Identifier:
                keyid:19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e302e302f32342d3234203d3e20323635383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:78:e1:b3:e9:ac:41:c3:c7:f7:96:08:e8:a6:a8:1a:36:ac:
         1a:a0:71:ac:97:22:51:8f:82:5e:2f:12:7f:4b:aa:41:81:fb:
         a4:07:77:74:66:34:53:44:22:ec:d8:16:85:59:75:2f:7f:90:
         91:c3:9c:3c:b1:6e:c0:0c:71:5e:c9:f7:33:17:bd:f6:d3:de:
         5a:2d:63:20:c2:a0:99:f3:c9:60:da:71:55:86:00:40:45:fd:
         18:88:36:43:10:41:0d:a8:29:16:1c:34:61:6e:f8:59:6f:2b:
         fd:42:d9:4c:be:5c:94:6d:cf:5e:12:27:7a:96:29:bb:de:d1:
         12:16:56:b3:96:a7:dc:44:9d:f9:ee:68:cb:19:ef:86:10:75:
         69:44:17:31:a9:7e:48:33:35:ba:f2:bf:6e:c9:e9:c2:d5:1a:
         23:cc:09:a2:65:d8:92:4a:0b:dd:27:be:18:e5:08:9b:f9:3f:
         95:7b:72:19:d5:a0:ba:32:cf:4a:48:51:10:8d:b1:f1:a4:a6:
         26:ec:72:e9:02:c1:7d:9c:3b:90:e0:30:5f:a0:e4:da:fe:82:
         57:eb:fd:45:48:a8:9d:22:92:92:cc:9c:c4:90:ea:e4:28:e0:
         0f:99:6c:51:98:da:60:c5:9b:a6:6a:9c:0c:d5:5f:17:67:2c:
         ba:d6:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org