Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38342e302f32332d3234203d3e203237373839.roa
File:                     3230312e3232312e38342e302f32332d3234203d3e203237373839.roa (raw, json)
Hash identifier:          3ED2w/2pom0O6l2nS9uoNjIZZCxX3MQWdHseIml4qns=
Subject key identifier:   C2:17:A3:EA:BC:D0:8C:6A:9C:A5:E7:CD:7E:CF:A0:1D:B6:21:F9:0C
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       407049647AB1A5DD155E34CA2888C7770617F3CF
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38342e302f32332d3234203d3e203237373839.roa
Signing time:             Tue 05 Mar 2024 18:18:22 +0000
ROA not before:           Tue 05 Mar 2024 18:13:22 +0000
ROA not after:            Tue 04 Mar 2025 18:18:22 +0000
asID:                     27789
IP address blocks:        201.221.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:70:49:64:7a:b1:a5:dd:15:5e:34:ca:28:88:c7:77:06:17:f3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar  5 18:13:22 2024 GMT
            Not After : Mar  4 18:18:22 2025 GMT
        Subject: CN=C217A3EABCD08C6A9CA5E7CD7ECFA01DB621F90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:ff:13:4c:d2:4b:90:16:db:b8:37:03:ab:
                    5e:d6:31:6b:17:70:a2:9b:31:bc:1e:20:c1:9a:fe:
                    27:33:b5:f1:f9:1d:87:d5:81:95:02:ba:7e:c4:f5:
                    93:9a:7e:a6:de:6e:70:f5:f5:d1:f9:0f:c6:91:ac:
                    ad:f5:91:6c:63:5f:da:47:09:80:a1:c6:db:90:77:
                    4b:e7:76:ee:90:33:9e:be:83:d8:46:99:50:c7:49:
                    17:9e:ce:af:88:81:61:aa:aa:51:c8:ea:d1:7c:94:
                    7a:01:c7:4c:cc:1b:30:16:7a:7a:21:7a:7b:30:7e:
                    7c:41:b5:18:8a:02:2c:77:16:fe:01:f1:30:08:63:
                    d2:63:d9:8c:72:e4:48:6f:0b:37:0c:e7:39:a7:88:
                    7e:0b:06:b6:34:81:25:31:31:48:dd:0a:3a:0a:a5:
                    2a:0e:f4:1d:5b:c2:62:09:3c:ff:dc:d3:82:a4:96:
                    3e:11:66:7d:ac:4e:e2:55:24:2a:7c:34:49:67:1d:
                    a5:b6:25:b9:2e:b6:cf:bb:e5:bd:e0:cd:69:4f:38:
                    ef:9f:f5:0b:e0:f6:4a:c4:09:9c:b7:39:ee:e4:92:
                    90:5a:4b:51:d2:b1:e5:5b:a8:33:4a:5e:f9:0f:9b:
                    03:d0:64:88:d4:65:4b:8c:ac:f9:27:9f:d6:db:5e:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:17:A3:EA:BC:D0:8C:6A:9C:A5:E7:CD:7E:CF:A0:1D:B6:21:F9:0C
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38342e302f32332d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:d2:3b:7c:94:0b:c6:a5:3c:86:17:bd:8c:64:5e:70:a0:54:
         c2:38:d6:13:a1:b6:f0:35:34:58:43:0b:92:7d:e5:4b:56:98:
         8a:11:ba:31:dd:b7:88:ae:dc:88:35:58:1a:72:da:7b:d0:7f:
         48:b9:a3:7a:27:f3:75:e1:2b:43:35:a3:70:8e:d9:af:73:55:
         bc:59:80:00:a8:e3:68:e4:b5:11:98:a5:91:3a:c8:65:37:d9:
         a3:41:80:e9:a4:b8:eb:ac:ca:0e:cb:84:c6:98:87:f2:0b:96:
         d8:43:04:fe:96:a1:97:2d:af:bc:56:3f:fc:15:10:6a:14:32:
         a9:31:c6:82:1e:48:9f:d9:d8:43:ed:30:b5:3f:28:3a:aa:5a:
         c3:f1:b6:53:42:ce:b7:80:5f:96:11:4c:43:c7:e5:1a:75:89:
         d3:27:ca:80:03:17:ec:ef:32:bb:65:38:fa:7a:83:0a:53:0c:
         59:6a:3e:54:6b:22:85:f1:17:83:bf:63:09:32:32:87:8a:5f:
         51:7a:95:ea:ed:a2:fc:f2:1b:18:ee:6f:e6:82:f6:32:d1:4f:
         a9:96:f0:3d:67:e5:cc:53:d7:59:65:f5:f6:7f:c6:b6:2b:68:
         86:00:06:e8:7c:ba:65:72:a4:64:14:6b:8f:8b:31:4f:9b:3e:
         59:07:92:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org