Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
File:                     3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier:          usSxLYP8eCL3Q+J29LZEUTQrZx4RshXu+HgT1b6k5Vk=
Subject key identifier:   7E:75:BE:90:4D:C6:F5:D1:AF:7E:43:02:3E:16:55:10:B1:EF:3A:85
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       78D85763A3699399F1BD2141A3F1F7E4C50C1960
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:54 +0000
ROA not before:           Tue 05 Mar 2024 18:12:54 +0000
ROA not after:            Tue 04 Mar 2025 18:17:54 +0000
asID:                     32098
IP address blocks:        201.174.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 02:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d8:57:63:a3:69:93:99:f1:bd:21:41:a3:f1:f7:e4:c5:0c:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:54 2024 GMT
            Not After : Mar  4 18:17:54 2025 GMT
        Subject: CN=7E75BE904DC6F5D1AF7E43023E165510B1EF3A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:3b:9f:9b:66:f0:26:02:2e:25:dd:5c:d2:
                    90:91:b3:e5:5b:c1:75:df:f9:af:d9:70:1f:91:c8:
                    84:12:c5:f2:b5:70:e4:84:cd:12:a4:80:2b:31:f7:
                    22:ff:d1:cd:02:2f:c4:d7:88:c9:e6:5a:a1:1d:1a:
                    07:61:3a:f1:93:5b:fb:26:d4:65:fa:b2:25:98:4d:
                    5d:cd:7e:8b:6d:40:c3:b8:49:c6:e4:7f:b6:df:96:
                    3b:eb:88:52:12:3c:ca:5c:13:75:91:dc:8d:1c:28:
                    7f:08:fa:18:8e:60:c5:c3:7c:c5:70:86:0d:a0:fe:
                    e1:38:75:49:08:87:29:c6:f3:24:b1:b2:7f:f7:73:
                    75:23:d5:fa:56:1c:da:ca:fa:93:f8:ca:b7:80:80:
                    a1:6a:c6:4f:bb:63:2d:d2:1b:1b:a2:65:7c:77:7d:
                    44:2a:b4:74:6c:46:d3:97:97:b4:e5:0c:ea:55:b9:
                    79:ac:2e:99:d3:ad:e5:9d:2e:45:b0:d1:69:96:e6:
                    de:30:c7:06:a4:36:05:f5:8c:fd:51:ad:41:23:b7:
                    04:3c:ba:42:31:a5:f1:6b:72:a1:bd:e9:45:cd:20:
                    57:93:bf:1b:4a:4c:a8:a7:8c:c6:59:5e:76:cb:94:
                    32:03:01:30:d4:81:06:1c:bc:66:72:92:82:84:23:
                    82:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:75:BE:90:4D:C6:F5:D1:AF:7E:43:02:3E:16:55:10:B1:EF:3A:85
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3139322e302f32312d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:ce:0a:6c:c2:94:8e:b2:9b:fd:ab:35:15:b8:bc:ef:39:
         f7:71:ff:34:57:85:90:ae:09:a7:ed:70:9d:54:6c:7b:1a:39:
         b2:a5:13:e0:a5:b1:e4:2b:72:b0:3c:a6:1c:34:76:ab:ed:f3:
         a4:03:2f:07:a9:1c:d2:15:a4:25:27:55:cb:51:47:18:3b:0c:
         31:94:af:3f:72:6e:5a:fb:9d:55:35:a5:bf:29:db:fe:c5:5f:
         19:91:2a:87:2e:47:a5:e1:c8:a7:39:59:34:71:1c:5d:8a:69:
         10:73:e2:1a:d9:1e:2a:d7:09:77:69:0f:f1:95:57:5c:9e:55:
         97:34:4c:b4:32:cb:4d:af:2a:10:51:ce:6e:88:f7:e4:c5:6e:
         f6:57:d7:b9:6c:0c:b2:d2:aa:c7:36:44:f7:d3:24:88:5e:d8:
         0e:8d:f0:f7:6f:99:d0:41:de:a7:9e:91:45:f1:1a:59:65:2b:
         ae:d2:ef:c9:fb:a3:42:ce:76:b9:dc:b7:f6:9c:17:95:3b:c8:
         f9:bb:80:df:af:80:48:aa:db:90:64:4f:41:41:61:10:d3:72:
         66:58:10:a9:a7:9a:9e:6e:b7:8b:9e:7c:7b:fc:58:53:9d:29:
         08:22:88:fd:5a:f3:d4:9c:0a:85:0d:e1:54:33:f4:b7:4c:70:
         3d:22:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:46 2024 by rpki-client on console-fra.rpki-client.org