Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38302e302f32322d3234203d3e203237373839.roa
File:                     3230312e3232312e38302e302f32322d3234203d3e203237373839.roa (raw, json)
Hash identifier:          yqtRvnu3sHlgPp3ISyo6Ikaad1xHU+bn9gJbmbZ4/Yw=
Subject key identifier:   A6:21:15:2E:DC:EB:09:85:39:27:CB:60:88:0E:0B:D7:B2:67:12:C3
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       3D62290B0AA9A4F1A578E65588756FD717A26158
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38302e302f32322d3234203d3e203237373839.roa
Signing time:             Tue 05 Mar 2024 18:18:26 +0000
ROA not before:           Tue 05 Mar 2024 18:13:26 +0000
ROA not after:            Tue 04 Mar 2025 18:18:26 +0000
asID:                     27789
IP address blocks:        201.221.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:62:29:0b:0a:a9:a4:f1:a5:78:e6:55:88:75:6f:d7:17:a2:61:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:26 2024 GMT
            Not After : Mar  4 18:18:26 2025 GMT
        Subject: CN=A621152EDCEB09853927CB60880E0BD7B26712C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3e:56:25:0c:e2:5b:69:b9:02:ac:19:b1:89:
                    70:2f:9f:11:a2:50:49:51:73:25:92:c3:89:73:6a:
                    4a:46:95:bd:23:1c:26:55:f6:d9:2c:38:cd:05:28:
                    f9:5f:33:fe:a6:4a:ac:62:44:b0:ab:52:d5:b8:53:
                    ac:5d:92:37:10:3b:d1:eb:01:85:23:47:b6:b5:a8:
                    b9:5b:01:40:20:cb:58:3f:d8:0c:34:e4:c6:9c:4e:
                    33:c1:6a:76:d8:b8:34:a9:8b:1c:39:0c:24:44:4e:
                    d1:ae:30:12:26:ca:85:d6:2a:f1:d8:4d:fe:a0:86:
                    95:75:1d:b4:5d:4f:45:e9:99:b2:21:de:04:c7:bb:
                    3a:7d:3a:e1:cf:a8:86:86:18:53:c7:0d:1d:c4:5d:
                    80:17:b8:67:ec:fd:09:47:49:1a:90:11:af:61:48:
                    e3:b8:ad:33:2e:0a:f1:08:60:f4:69:df:6c:47:b6:
                    e5:2f:9d:2f:f4:3d:fe:1e:8f:ed:5c:8d:7f:76:7f:
                    67:6f:b8:99:c2:75:f4:46:83:7f:5f:fa:f5:35:50:
                    ea:53:4d:ca:9e:cf:4f:5c:8b:32:ae:f9:f9:1c:27:
                    2b:18:7e:73:4d:cd:3d:6a:99:d2:91:e2:21:8c:84:
                    e7:89:99:b0:a2:32:38:cf:96:5a:8b:35:bb:a7:81:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:21:15:2E:DC:EB:09:85:39:27:CB:60:88:0E:0B:D7:B2:67:12:C3
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38302e302f32322d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:08:47:e7:26:cd:de:37:38:13:e9:4a:9a:51:cc:9d:b5:db:
         f8:6f:5b:33:85:f1:d6:03:95:1e:99:a0:36:49:bf:a5:0c:16:
         34:3d:01:1c:3f:21:70:16:74:e0:f3:b6:79:04:06:9e:b9:3c:
         c7:b0:c4:66:e0:69:1c:b9:83:1e:e3:54:4e:fc:cf:b3:61:5d:
         e5:0d:43:4e:3b:2b:6d:80:04:e7:34:3d:aa:6d:e0:4d:65:38:
         5d:2f:54:ad:f8:a7:8c:00:c3:ad:3e:6d:eb:fa:e6:78:29:2e:
         f4:16:d8:c2:3e:09:7f:48:94:9e:30:24:3b:48:57:fa:bd:8c:
         08:18:58:7d:fb:3a:81:1e:19:ba:59:4b:55:eb:ff:1a:98:2f:
         a7:d4:e6:6b:15:8d:74:db:ef:15:c3:2f:9a:43:82:47:d4:f6:
         1a:3b:e7:ea:f7:22:6e:f1:ea:4b:d3:33:ea:66:7f:47:9c:a4:
         2d:d3:4c:84:c0:b3:73:a9:cd:c7:35:06:20:c2:41:85:b7:83:
         66:48:e0:12:ef:75:68:1b:a9:a7:b4:b6:de:c4:bf:c9:98:56:
         cf:42:4c:b6:1f:b1:6f:a1:c3:a3:bf:b1:9c:8c:5c:97:0d:ae:
         fa:8a:12:f8:c2:7d:3d:97:62:06:39:b4:d4:f1:df:ae:28:7f:
         d9:8d:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org