Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130312e302f32342d3234203d3e203332303938.roa
File:                     3230312e3137342e3130312e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          mERTzttrPruhLuqnKwxxn8iOPxS5Wlko844ZOQE716o=
Subject key identifier:   A8:35:0B:3F:E1:08:EA:90:5F:B9:5A:A4:CF:B9:A4:F2:40:FE:86:82
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       27266729E7E869CB05F27054D28808C046B5B396
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130312e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:44 +0000
ROA not before:           Tue 05 Mar 2024 18:12:44 +0000
ROA not after:            Tue 04 Mar 2025 18:17:44 +0000
asID:                     32098
IP address blocks:        201.174.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:26:67:29:e7:e8:69:cb:05:f2:70:54:d2:88:08:c0:46:b5:b3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:44 2024 GMT
            Not After : Mar  4 18:17:44 2025 GMT
        Subject: CN=A8350B3FE108EA905FB95AA4CFB9A4F240FE8682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:7e:c7:57:3e:dd:3a:ea:b8:15:c8:6c:5c:
                    ac:6f:a8:84:f0:41:f7:3c:e8:24:b3:fa:72:fd:6e:
                    9e:0e:e1:5b:9e:8a:29:90:b7:ec:60:ec:5d:18:63:
                    2b:22:eb:6b:d8:24:95:c4:94:d6:36:80:3a:1c:c5:
                    de:90:cc:09:99:bb:9e:1f:76:54:b0:cc:89:2e:c4:
                    6c:91:ff:32:c2:a6:53:06:39:b6:d2:f7:d6:35:73:
                    2f:8d:f8:d8:00:1c:4b:d4:6e:a1:38:bc:4c:96:fe:
                    86:61:8d:aa:25:12:e0:b8:e4:02:ee:59:2d:c5:88:
                    76:20:45:32:8c:65:80:45:6f:2d:54:a5:b3:bf:e5:
                    6b:79:86:6c:42:54:4a:d7:3a:53:7c:79:14:48:bd:
                    d0:a8:8c:9d:d7:30:84:5d:b2:68:58:d2:d0:f4:57:
                    4e:cd:8e:a1:d1:db:48:15:d4:5e:ac:8b:df:eb:57:
                    f7:2b:a2:89:88:60:33:b6:e3:89:98:80:c2:50:a5:
                    14:e9:6d:b4:23:06:28:83:a0:26:67:10:1b:89:bf:
                    8c:3b:ea:4f:35:2d:f4:a5:75:c5:97:bf:ae:5e:de:
                    28:56:46:3f:f7:3a:4d:b8:89:f1:b6:44:0e:44:7c:
                    56:8b:23:45:41:f9:80:53:d9:d4:64:e2:2b:a2:ee:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:35:0B:3F:E1:08:EA:90:5F:B9:5A:A4:CF:B9:A4:F2:40:FE:86:82
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130312e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:fe:9f:28:e9:26:fd:91:d4:38:aa:8e:30:8b:8c:d5:de:
         8e:65:d8:af:c8:f0:e3:d8:6b:d2:2b:de:b0:18:ac:23:5b:03:
         1f:eb:b0:ed:25:39:4b:3d:9d:ac:75:88:ec:84:3a:80:b1:83:
         79:73:89:23:98:74:f8:2f:0a:1e:7a:0b:b7:ce:2d:c9:53:b4:
         60:10:c7:fe:12:56:b0:92:2b:2b:10:19:2c:7d:21:fc:37:17:
         a0:0d:86:82:da:3e:74:b5:ac:d9:bb:b1:40:be:f6:84:44:af:
         98:c4:ee:82:92:da:74:36:09:7b:48:c0:67:b6:cf:cd:13:1f:
         82:02:8a:04:b7:3f:20:d4:fb:0d:0b:8c:ff:11:40:c4:0a:64:
         04:4e:ee:c6:a9:37:3d:48:07:2b:04:12:b5:86:dd:88:d7:d0:
         28:7f:60:74:ba:5b:e5:bd:55:df:f4:33:cb:a3:56:b0:1e:bf:
         92:db:94:72:ef:c3:a2:d5:68:09:85:a1:71:16:16:fb:09:80:
         b2:6d:af:1e:5d:2d:dc:49:61:17:a4:a3:cf:ad:1f:14:b1:da:
         52:d4:67:be:da:06:34:52:fa:9f:40:05:2e:c3:ec:b4:6a:7f:
         89:ca:c7:2a:95:76:54:8a:c4:7d:c2:8d:52:15:4c:24:b3:41:
         39:e7:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org