Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/3230312e3138322e31362e302f32322d3234203d3e20323635373933.roa
File:                     3230312e3138322e31362e302f32322d3234203d3e20323635373933.roa (raw, json)
Hash identifier:          3f+pRhJjwlMP6s2gXAJtRsrNzLkKxy26oEJX9SiPNLk=
Subject key identifier:   8D:8C:F3:24:00:BE:3E:42:AD:C1:BB:3E:3D:5C:B1:20:7A:30:0C:A0
Certificate issuer:       /CN=1932D1177B6B1B833DA0B0BFDA867C3E41569172
Certificate serial:       64DAEF83BE14A4FA37979E65501B63EE232901AC
Authority key identifier: 19:32:D1:17:7B:6B:1B:83:3D:A0:B0:BF:DA:86:7C:3E:41:56:91:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/3230312e3138322e31362e302f32322d3234203d3e20323635373933.roa
Signing time:             Tue 05 Mar 2024 18:02:26 +0000
ROA not before:           Tue 05 Mar 2024 17:57:26 +0000
ROA not after:            Tue 04 Mar 2025 18:02:26 +0000
asID:                     265793
IP address blocks:        201.182.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:da:ef:83:be:14:a4:fa:37:97:9e:65:50:1b:63:ee:23:29:01:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1932D1177B6B1B833DA0B0BFDA867C3E41569172
        Validity
            Not Before: Mar  5 17:57:26 2024 GMT
            Not After : Mar  4 18:02:26 2025 GMT
        Subject: CN=8D8CF32400BE3E42ADC1BB3E3D5CB1207A300CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:1e:cf:81:94:9e:db:28:35:95:0e:a2:c4:
                    e3:a0:eb:cb:30:42:66:8d:cd:04:ff:bc:88:ca:ed:
                    41:0f:4e:62:9d:ef:a4:63:11:68:b0:82:e4:da:fa:
                    c2:0e:bb:a1:34:4a:96:3c:4f:cf:af:b6:bf:f1:b9:
                    ec:21:ad:c2:eb:c3:e4:4c:b3:62:9b:29:d9:f0:12:
                    d4:db:ab:3c:9d:4e:43:c1:47:d6:63:19:79:fa:f0:
                    5e:ce:c0:9a:44:96:e5:dc:36:76:5c:2c:a9:df:49:
                    71:19:a3:83:8f:73:68:bd:fc:d0:a2:de:7b:ac:ad:
                    de:b9:19:b8:7b:c6:7a:54:b8:4a:52:13:84:4e:a0:
                    39:09:2a:c0:5f:1d:6b:5b:37:5f:ac:6c:45:57:1e:
                    dd:08:c0:20:82:56:db:18:2d:4a:cd:70:de:69:ad:
                    2a:4b:02:f6:92:85:a1:cb:e7:4e:84:42:e6:28:7a:
                    36:a0:f4:e9:a4:f6:fc:c7:5a:b1:74:68:93:05:2a:
                    d6:3e:fb:da:76:55:02:1a:0c:5d:5a:a3:c6:8a:b9:
                    2f:a7:99:43:78:7e:af:20:77:72:20:00:3b:94:94:
                    71:86:53:36:7f:e0:6f:46:9b:27:66:18:eb:ea:89:
                    b1:bb:f5:06:7b:73:e7:cc:3f:94:3a:b9:d1:44:ae:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8C:F3:24:00:BE:3E:42:AD:C1:BB:3E:3D:5C:B1:20:7A:30:0C:A0
            X509v3 Authority Key Identifier:
                keyid:19:32:D1:17:7B:6B:1B:83:3D:A0:B0:BF:DA:86:7C:3E:41:56:91:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1932D1177B6B1B833DA0B0BFDA867C3E41569172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65400B805FC4A311FE62F1E886594A2ABB0E968645293803A577534722B2A92A/0/3230312e3138322e31362e302f32322d3234203d3e20323635373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:5d:7f:22:c3:48:6a:f5:33:3d:5a:45:62:61:c3:9e:c7:
         0c:56:f1:a6:ba:b3:12:de:6d:09:6d:d5:a7:d3:75:c8:a0:7e:
         55:2d:b2:28:13:30:e0:59:b5:a6:ca:69:11:03:04:8a:a2:6c:
         5e:77:90:60:9a:a3:22:32:08:ca:f3:6f:ff:f8:c0:36:8d:16:
         52:98:28:65:95:0b:c2:e6:b1:3f:1c:cc:cb:66:64:e3:44:58:
         a4:ec:9c:f4:8c:c9:e3:d5:41:c5:f5:37:a2:39:9d:95:f4:e6:
         4e:65:b1:a8:19:0e:bb:bf:0c:69:c6:9a:27:95:55:05:a6:07:
         48:9b:ab:e0:0f:43:d3:93:2c:b9:ca:c6:05:f6:23:df:3f:f3:
         f8:97:87:cc:1e:8f:56:5f:12:d1:e2:9c:d8:42:5b:a3:07:9b:
         d0:ba:f9:94:ee:89:b3:da:a2:16:c0:83:b0:9e:b1:89:e0:44:
         6b:2d:1f:55:23:89:ba:b6:47:0b:d8:7e:e0:84:5d:83:28:72:
         a4:d8:c6:e2:95:af:3f:4c:04:d8:45:9e:c1:de:1e:37:84:36:
         03:f1:4d:9b:84:13:85:80:dd:49:c0:a3:8e:99:ce:1a:8d:1b:
         10:b6:8f:7f:48:78:98:c3:b6:71:07:a9:be:0c:2a:af:36:32:
         c4:89:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:45 2024 by rpki-client on console-fra.rpki-client.org