Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36392e302f32342d3234203d3e203237373839.roa
File:                     3230312e3232312e36392e302f32342d3234203d3e203237373839.roa (raw, json)
Hash identifier:          AhPBi/w928K724Gb5fDMkZd34DHmnV7qCadAqfGzjO8=
Subject key identifier:   42:84:AC:58:DC:C6:5A:15:D4:6C:5F:E6:7E:11:E3:CD:AC:47:08:84
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       0A813BFC59913980988DE1859870334F3F6A4CAA
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36392e302f32342d3234203d3e203237373839.roa
Signing time:             Tue 05 Mar 2024 18:18:32 +0000
ROA not before:           Tue 05 Mar 2024 18:13:32 +0000
ROA not after:            Tue 04 Mar 2025 18:18:32 +0000
asID:                     27789
IP address blocks:        201.221.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:81:3b:fc:59:91:39:80:98:8d:e1:85:98:70:33:4f:3f:6a:4c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:32 2024 GMT
            Not After : Mar  4 18:18:32 2025 GMT
        Subject: CN=4284AC58DCC65A15D46C5FE67E11E3CDAC470884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:47:04:9e:24:88:70:62:67:3c:14:85:cc:
                    a8:f3:99:7b:6c:a7:19:89:e4:67:3f:e6:6b:e1:94:
                    62:ae:db:45:c0:82:0c:f7:f5:42:73:a6:7f:4e:41:
                    3e:40:f4:5f:3d:88:1d:91:4d:ba:7c:6c:bc:36:12:
                    27:2d:38:62:8c:6c:89:cf:d4:14:92:93:65:7d:be:
                    8d:75:a4:aa:46:47:23:78:db:52:c6:93:32:ce:be:
                    4c:ff:f6:5f:f7:37:87:6e:6d:77:4d:4e:42:a4:dc:
                    cb:be:41:8e:cc:a8:42:05:27:d9:89:1a:ab:f6:7e:
                    d9:d1:62:c5:e1:01:6a:72:35:98:94:31:7a:19:73:
                    70:f4:87:c6:29:4c:46:1e:0f:11:03:f1:9b:4b:fa:
                    d2:50:24:c5:58:32:47:d1:4b:73:5b:64:c5:d5:ae:
                    98:e7:c0:17:83:b8:0a:a9:4a:c7:ee:98:4a:61:92:
                    68:ed:84:4e:56:94:4c:63:c5:e9:25:35:a2:f3:18:
                    4a:0c:3b:cd:04:b7:97:cd:2b:e4:61:b1:f1:39:f9:
                    9b:1e:d3:2f:70:2e:58:6f:ca:ce:53:d7:0b:64:9a:
                    99:89:76:15:1a:98:7c:69:f0:38:ea:29:57:ee:f2:
                    b2:b8:70:aa:5f:08:97:07:65:c0:f8:7c:28:70:ae:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:84:AC:58:DC:C6:5A:15:D4:6C:5F:E6:7E:11:E3:CD:AC:47:08:84
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36392e302f32342d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f3:59:f0:8a:22:f0:bf:11:3d:ff:b6:11:9d:87:7c:44:94:
         90:bc:e7:4e:c3:71:37:82:6a:57:e0:7d:ac:ae:c2:35:09:a9:
         b0:e7:b0:a6:ee:f1:21:c5:c0:54:8d:2d:ee:e6:09:d4:16:c1:
         9e:ab:1e:55:e5:46:0f:77:45:3c:ea:d8:6b:14:75:83:4f:55:
         13:89:e0:39:59:2d:5a:2d:ed:bc:15:40:f0:9c:dc:6e:43:11:
         41:b4:37:71:bc:0d:9b:55:75:e1:2b:ba:0d:f7:14:4a:37:50:
         a5:26:62:10:1e:e4:92:fb:be:42:00:1c:59:53:7c:ae:62:6e:
         d6:52:39:b0:41:72:97:76:13:b4:20:64:32:cc:43:f7:f4:60:
         44:53:ba:4b:3d:b2:d6:a9:06:ab:12:61:8c:80:ed:2c:62:44:
         54:4b:b2:14:83:59:a2:ae:5f:21:92:28:a0:40:d5:73:2b:15:
         e8:2d:ea:65:d4:54:7d:95:0b:50:37:d7:a3:c1:7a:e4:d0:52:
         31:81:4a:77:d7:f7:40:f0:08:ef:c1:2a:1d:9c:93:ea:0c:56:
         68:fa:bd:a7:fa:d6:fe:45:ed:49:0a:4d:5b:01:7f:1a:a6:3a:
         73:d8:ce:d0:65:f2:b3:92:46:54:ca:b8:0d:f1:ff:07:5d:bc:
         29:a9:c4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org