Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3230302e302f32312d3234203d3e203238353039.roa
File:                     3230312e3137342e3230302e302f32312d3234203d3e203238353039.roa (raw, json)
Hash identifier:          k7NqcvoQOONWtZ36AmeQ7ahqC6zlqluT5n3hgASpidY=
Subject key identifier:   2D:17:70:93:B3:E1:2C:21:C2:76:F4:95:55:E3:30:2E:3E:D6:F0:63
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       31BE42BE64BFE6078B5049DF4DECD0742F0D71A7
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3230302e302f32312d3234203d3e203238353039.roa
Signing time:             Tue 05 Mar 2024 18:17:51 +0000
ROA not before:           Tue 05 Mar 2024 18:12:51 +0000
ROA not after:            Tue 04 Mar 2025 18:17:51 +0000
asID:                     28509
IP address blocks:        201.174.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:be:42:be:64:bf:e6:07:8b:50:49:df:4d:ec:d0:74:2f:0d:71:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:51 2024 GMT
            Not After : Mar  4 18:17:51 2025 GMT
        Subject: CN=2D177093B3E12C21C276F49555E3302E3ED6F063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:55:ff:64:58:21:64:e4:e9:da:b0:b4:b0:
                    53:b7:7a:f3:c3:69:1b:68:26:bb:0f:fe:b2:56:05:
                    96:d5:52:9e:5b:d6:17:c0:f5:61:f8:bb:01:31:de:
                    3a:a0:d9:56:42:ee:e1:b0:1d:01:bd:c5:fc:85:09:
                    71:09:b3:6b:61:c6:b2:f6:c3:19:e8:aa:eb:a0:e0:
                    b9:e1:58:9c:26:a1:d6:40:85:aa:1c:ef:cc:4c:4b:
                    e6:f3:2d:0d:a7:78:aa:01:de:20:78:87:09:fd:70:
                    dd:12:6a:b1:83:b3:27:74:15:2b:0a:a1:b6:ae:e6:
                    de:d8:27:e6:e1:09:36:a6:ee:4e:c8:cc:30:ba:96:
                    dd:a8:86:84:c2:71:c2:45:fe:db:14:20:8b:3e:6e:
                    2c:fe:4d:a0:cc:d6:fe:2b:82:82:86:88:91:2b:89:
                    ab:d3:0e:1f:96:2d:e9:16:77:2b:d5:85:f2:72:9f:
                    26:53:05:dd:de:ca:15:de:3e:85:0e:4b:d7:c0:87:
                    48:ed:1d:fa:d9:68:46:02:d2:fe:66:98:5a:12:90:
                    1c:1d:5f:b9:37:64:98:99:1a:42:05:c1:21:78:44:
                    21:54:6b:1d:35:4f:6f:d4:46:37:43:b8:16:16:ae:
                    75:1b:f6:56:78:3a:98:eb:18:4e:3d:73:64:f2:7f:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:70:93:B3:E1:2C:21:C2:76:F4:95:55:E3:30:2E:3E:D6:F0:63
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3230302e302f32312d3234203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:4c:7b:1d:1d:8d:84:28:96:75:7d:0f:f5:94:14:04:88:bb:
         88:fb:eb:87:af:b2:e3:a9:63:fe:7e:55:2b:83:b2:dc:e1:42:
         49:b7:57:3e:86:c4:42:a7:e9:1f:59:84:d2:2f:90:a2:da:c3:
         d5:67:0a:b4:30:a7:d5:eb:1d:ce:73:b4:e8:ad:b4:b3:bb:15:
         e8:dd:4d:0b:05:58:12:af:d6:64:16:06:74:49:f1:59:04:5d:
         b3:e9:6f:d2:f6:cf:57:8f:3d:2d:1b:4e:e6:e0:f4:bf:7c:d7:
         88:6c:e2:b5:03:33:b3:70:ac:c5:d3:89:8f:fb:99:d2:ad:2b:
         bb:63:67:a1:a6:20:5c:be:9b:49:90:85:7e:4f:6c:6c:9c:cd:
         b3:6d:ed:6c:ce:a0:fb:67:1a:7b:b8:5d:15:40:39:8d:6a:37:
         f7:38:4f:d8:cd:93:a6:e3:9a:99:8f:c9:89:d6:b4:b0:76:6f:
         99:db:27:44:a7:81:20:c0:b5:d9:97:cd:c0:68:ba:32:2e:c6:
         cb:35:07:d0:71:d1:b6:00:7b:de:9d:15:8f:c7:a3:4b:51:e6:
         9a:c9:c0:5f:b2:ef:0a:35:9d:23:2e:54:de:28:3b:22:e5:08:
         94:95:59:b3:a3:4b:93:fd:5b:42:7a:0e:8c:f0:1d:19:c3:78:
         a1:37:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org