Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3137362e302f32322d3232203d3e203332303938.roa
File:                     3230312e3137342e3137362e302f32322d3232203d3e203332303938.roa (raw, json)
Hash identifier:          CHAbuO9rpTa9ojRGzphdP+O1+bf9nllqJhCnf7DcExc=
Subject key identifier:   B1:77:3D:45:E7:DE:8C:30:B0:88:E8:38:CF:FA:3C:1F:99:62:4D:A2
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       6A3053942544307F33B14039C0F91A04760E3D2D
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3137362e302f32322d3232203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:50 +0000
ROA not before:           Tue 05 Mar 2024 18:12:50 +0000
ROA not after:            Tue 04 Mar 2025 18:17:50 +0000
asID:                     32098
IP address blocks:        201.174.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:30:53:94:25:44:30:7f:33:b1:40:39:c0:f9:1a:04:76:0e:3d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:50 2024 GMT
            Not After : Mar  4 18:17:50 2025 GMT
        Subject: CN=B1773D45E7DE8C30B088E838CFFA3C1F99624DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:20:2c:eb:a0:e7:68:8d:8f:1e:61:14:c4:
                    b1:09:41:4d:28:29:cb:e4:bd:42:9d:ac:06:3b:11:
                    1d:ca:b1:45:5d:32:eb:de:64:e2:20:1d:71:f7:02:
                    c9:f1:ee:19:75:7f:0c:ad:57:5b:09:43:b3:9f:37:
                    32:98:71:98:01:b9:88:bc:c9:41:c2:cf:7b:71:b6:
                    52:01:14:21:fe:5c:83:37:ae:df:cf:b3:fe:c4:e8:
                    6a:e3:60:be:85:5a:14:06:5d:d5:95:d8:c0:67:cb:
                    e0:f4:4c:54:e7:f7:69:06:86:ce:54:ea:12:bf:d1:
                    33:16:6a:a0:2d:f8:72:b9:a4:be:83:fe:fa:c0:53:
                    fb:2c:2c:fb:55:ee:f1:26:91:65:6d:d0:fa:1d:33:
                    d0:ba:7c:08:7d:00:54:51:e9:2d:db:07:19:22:a6:
                    ee:3a:8e:7d:ee:7f:82:af:05:a1:9a:5b:68:42:33:
                    ef:07:99:d4:16:3b:f9:be:d2:ad:7b:84:d5:79:54:
                    09:8d:ea:3b:37:49:ca:6e:3b:6e:73:77:76:86:83:
                    8f:33:43:a8:81:07:6d:3c:64:ff:66:be:30:79:e4:
                    cf:2d:51:6a:7a:56:b7:cd:c9:02:db:81:b1:4a:4d:
                    29:e3:d4:56:b8:cb:3b:fd:47:f2:5a:9f:c3:c5:2c:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:3D:45:E7:DE:8C:30:B0:88:E8:38:CF:FA:3C:1F:99:62:4D:A2
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3137362e302f32322d3232203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:b4:dd:81:39:1b:1a:45:d6:7d:86:c6:b6:40:79:60:7e:c2:
         67:c9:7a:8a:80:f9:4d:16:4f:21:21:ba:5b:0c:10:b5:a4:e9:
         60:2b:4f:8f:e2:5f:15:3b:62:44:0b:bb:8f:1d:51:0d:af:02:
         5e:fb:9b:89:6e:14:fa:70:f3:94:66:8e:dd:93:ae:ef:06:a5:
         fd:33:02:c9:6e:cf:26:1d:11:41:85:85:7f:7c:41:86:fe:16:
         38:da:a4:2d:86:86:fa:1f:de:52:a2:84:27:7e:82:bc:59:b5:
         5b:50:01:a3:4c:2b:67:17:67:f4:c5:b7:15:ee:71:a3:ae:1e:
         9d:23:ba:05:7f:2a:b7:37:18:e2:1f:b8:72:78:0e:a9:7a:4b:
         08:c0:d1:c2:74:ca:c3:30:e3:f2:c1:57:a9:c4:ca:48:76:5a:
         79:cc:89:74:6e:dc:72:99:46:18:18:24:17:4f:ef:5a:99:d6:
         f7:bc:df:2c:9b:c3:cc:00:b8:77:56:be:f1:fd:54:01:e7:03:
         8b:3a:ad:fc:59:5a:56:02:7e:08:dd:94:bd:f5:9d:56:be:a5:
         3f:cf:e2:c7:54:19:68:97:df:eb:05:d0:88:ec:63:0b:4d:8a:
         ed:39:03:ba:a9:63:99:2b:9f:94:47:22:a3:e4:e0:4c:ed:14:
         6e:0d:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org