Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e37322e302f32312d3234203d3e203237373839.roa
File:                     3230312e3232312e37322e302f32312d3234203d3e203237373839.roa (raw, json)
Hash identifier:          ANPmVaTPJp8mZJVpNv35V3AvC7ymnnghtAg/CVNo7p0=
Subject key identifier:   B6:55:B9:19:E8:74:44:30:98:55:C2:25:D8:D3:C8:52:5C:09:47:7A
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2AE3B4A186D584A8484DC8364837234EA2AB265E
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e37322e302f32312d3234203d3e203237373839.roa
Signing time:             Tue 05 Mar 2024 18:18:21 +0000
ROA not before:           Tue 05 Mar 2024 18:13:21 +0000
ROA not after:            Tue 04 Mar 2025 18:18:21 +0000
asID:                     27789
IP address blocks:        201.221.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e3:b4:a1:86:d5:84:a8:48:4d:c8:36:48:37:23:4e:a2:ab:26:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:21 2024 GMT
            Not After : Mar  4 18:18:21 2025 GMT
        Subject: CN=B655B919E87444309855C225D8D3C8525C09477A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:b7:8f:09:fd:44:7f:97:c7:23:13:e3:8a:
                    94:d3:9b:f1:5f:28:b4:d8:9c:e2:9c:40:2e:7c:b8:
                    ae:d8:6c:0d:f6:3e:ad:43:ab:d6:09:fd:d7:cc:72:
                    10:7e:4f:e8:c2:bf:8b:e1:ee:62:d7:50:6d:5b:b3:
                    cd:b3:c3:b0:d9:dc:e0:07:48:71:4e:e3:99:46:79:
                    11:99:4d:8f:d5:bd:8b:ed:57:ce:f6:e4:5f:6f:e5:
                    ae:4f:ec:33:52:9d:b1:0e:46:60:75:f1:ce:59:e5:
                    66:99:36:ab:32:63:20:2f:84:a8:30:da:ff:79:e9:
                    27:66:bb:21:88:38:81:f2:9c:0b:9f:e9:62:b3:6f:
                    93:a1:f6:d3:37:af:7d:91:89:c8:e4:ce:f1:91:ac:
                    eb:ce:46:c9:fe:b4:1d:1c:69:b3:eb:fd:ec:7d:64:
                    1b:95:bf:f8:bf:b1:d3:cb:b2:d2:8f:b6:bd:89:d4:
                    e7:f9:cd:e4:0f:b8:1c:cf:64:1c:36:d2:06:45:f2:
                    92:34:80:f0:a9:c0:16:7f:27:73:70:3d:2d:04:9d:
                    f2:8f:b3:30:41:bc:fc:d1:a0:50:ea:e4:03:94:d5:
                    cd:e7:36:31:9e:c6:21:09:96:d4:e9:47:29:6d:87:
                    50:09:87:8f:48:b7:71:14:09:3a:8e:b3:79:87:e0:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:55:B9:19:E8:74:44:30:98:55:C2:25:D8:D3:C8:52:5C:09:47:7A
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e37322e302f32312d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:d0:30:7e:70:6f:38:1b:ac:b0:02:47:3f:21:7f:b7:d0:89:
         6b:a1:63:01:3d:96:94:66:e7:20:96:05:96:57:ed:b1:94:17:
         3c:27:42:ae:86:6d:21:ab:3f:aa:22:be:07:32:8c:c4:53:5f:
         5d:cf:c0:8e:81:79:6e:ca:68:69:6e:3b:ae:f8:3d:00:8a:9d:
         ed:ca:c7:c0:84:5a:39:9d:ee:d4:0a:5e:ea:39:3a:63:a7:e4:
         1f:e5:99:27:c7:6d:9f:3e:6c:50:73:d5:ad:86:97:9a:23:68:
         9f:6a:ec:dc:a1:b3:cd:55:92:33:a2:e4:ba:d1:ef:b1:8b:4d:
         7e:5b:2c:fa:50:56:37:31:60:8e:3e:ab:cf:ef:d1:27:e7:c5:
         e5:78:ad:8d:b8:49:5c:56:23:f9:18:e7:82:a9:39:45:2e:62:
         41:d6:39:df:07:cd:82:19:68:e4:85:fb:14:4c:35:b6:a4:53:
         aa:c6:92:bb:bb:ab:6b:b3:d8:e1:cd:b1:44:07:aa:ba:27:63:
         38:70:cb:57:86:c0:59:1a:79:0b:a9:cd:16:e2:35:92:35:56:
         d9:81:7f:6d:c8:9e:ec:15:0f:b0:b3:b8:1c:90:ba:06:ed:5a:
         96:5a:57:5c:8f:cd:03:f2:2f:eb:3a:ab:76:89:92:31:37:bb:
         30:55:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org