Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36342e302f32322d3234203d3e203237373839.roa
File:                     3230312e3232312e36342e302f32322d3234203d3e203237373839.roa (raw, json)
Hash identifier:          o8szNqnAtM4hnzPUIBtl2vkwPkmN2u0TUoFRbKDamSw=
Subject key identifier:   46:9E:4E:E8:FF:86:8A:B8:90:33:01:DD:8E:78:B5:FE:CB:61:DF:08
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       7E4E044BF8FEF2A4266ADEBCE549255025016B05
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36342e302f32322d3234203d3e203237373839.roa
Signing time:             Tue 05 Mar 2024 18:18:33 +0000
ROA not before:           Tue 05 Mar 2024 18:13:33 +0000
ROA not after:            Tue 04 Mar 2025 18:18:33 +0000
asID:                     27789
IP address blocks:        201.221.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4e:04:4b:f8:fe:f2:a4:26:6a:de:bc:e5:49:25:50:25:01:6b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:33 2024 GMT
            Not After : Mar  4 18:18:33 2025 GMT
        Subject: CN=469E4EE8FF868AB8903301DD8E78B5FECB61DF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:b1:21:e6:bc:e9:0e:03:46:e4:11:d3:89:
                    1d:c3:b2:cb:04:59:82:3f:fd:a3:9a:9c:8b:cf:92:
                    20:97:3e:56:19:59:c4:da:0e:a5:51:e1:06:14:3f:
                    1b:b7:b7:2f:81:58:b8:40:75:c1:43:1a:d6:08:ec:
                    46:a8:01:b9:8d:34:3d:51:1b:c4:19:d2:b0:0b:5c:
                    79:c8:a9:90:31:fb:c4:ff:49:85:7b:73:5a:56:93:
                    64:3e:49:c2:fd:70:13:8d:73:06:0a:79:5b:e1:3f:
                    37:c5:06:51:24:f7:b4:b1:5e:2d:df:f7:73:dc:3f:
                    b1:86:1d:70:0e:6a:e5:88:f3:91:ed:ff:22:af:f6:
                    f0:bc:0b:f8:f5:91:98:13:01:31:45:1f:ea:a1:8e:
                    6d:1d:7f:51:ac:b0:f2:e2:87:a1:d0:90:ec:c8:03:
                    1d:db:f5:a4:24:a7:bb:b6:02:9e:c6:a9:1c:c1:72:
                    38:a9:7b:5c:96:db:98:ef:e9:db:85:07:e7:87:c4:
                    f0:07:49:01:3c:8e:5a:ea:fa:3e:0f:da:6e:37:6f:
                    b6:fc:02:f7:6e:38:95:43:90:cc:98:e5:5d:38:61:
                    4f:89:19:32:3a:24:56:df:32:0a:49:1e:6f:8b:46:
                    f5:af:1c:23:f8:e8:f6:fd:ca:37:97:23:24:f0:b1:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9E:4E:E8:FF:86:8A:B8:90:33:01:DD:8E:78:B5:FE:CB:61:DF:08
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36342e302f32322d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:92:7f:b3:34:0f:81:37:bc:92:9b:67:58:8b:a6:33:2d:da:
         83:92:1f:76:3d:5c:cd:a1:dd:f9:06:ac:5f:e4:1c:37:59:86:
         5d:bf:3e:c8:7d:3e:49:71:8c:ea:da:1b:04:c3:e0:48:54:70:
         bc:01:f6:8c:cd:42:5c:7e:e6:ad:d0:12:ab:26:5b:7a:86:70:
         2f:ab:5a:15:4f:75:65:dc:90:c5:a5:b9:29:f8:b3:d8:78:67:
         db:53:9a:4c:9b:13:91:e3:f1:90:3a:33:89:da:76:79:2b:39:
         e7:a7:a5:a9:b9:27:b0:1d:2a:bf:8b:fb:8a:2c:2e:27:2a:db:
         4d:ac:cd:5d:4a:63:77:20:71:d7:b7:52:91:7c:09:2f:cb:9d:
         d7:5b:3f:21:a5:a7:de:8e:0c:3a:c8:9b:9d:9f:17:66:3c:db:
         43:cf:a1:50:d8:60:9f:b8:fa:a0:b7:9f:29:f0:80:6a:ef:1f:
         50:9b:be:52:15:71:19:f0:8c:b9:0c:30:f5:db:36:1e:1b:99:
         c0:6d:b4:9d:38:15:42:71:2b:d8:53:7b:5a:ac:60:56:74:a7:
         ca:c7:1e:f9:69:8c:6f:78:60:62:1a:81:7e:3f:20:38:eb:b5:
         41:f0:9a:25:4d:92:2a:3d:bb:cc:33:25:ec:3d:72:20:d3:ea:
         d5:d1:3c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:45:33 2024 by rpki-client on console-fra.rpki-client.org