Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3233322e302f32312d3234203d3e203332303938.roa
File:                     3230312e3137342e3233322e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier:          TReatAknr+id92OvoaDIqskd4zrGMFxyNjFgKTQRua4=
Subject key identifier:   03:BE:F7:94:A3:FA:7D:FB:43:8D:3C:BB:FB:ED:2D:B9:F7:18:C2:37
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       6AC184DAD3E78B1012ACC7FB6BEAEC4A807E806C
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3233322e302f32312d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:57 +0000
ROA not before:           Tue 05 Mar 2024 18:12:57 +0000
ROA not after:            Tue 04 Mar 2025 18:17:57 +0000
asID:                     32098
IP address blocks:        201.174.232.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c1:84:da:d3:e7:8b:10:12:ac:c7:fb:6b:ea:ec:4a:80:7e:80:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:57 2024 GMT
            Not After : Mar  4 18:17:57 2025 GMT
        Subject: CN=03BEF794A3FA7DFB438D3CBBFBED2DB9F718C237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:82:19:de:57:9b:37:2a:dc:16:34:21:85:
                    6f:7b:44:3b:3c:40:63:3f:19:90:62:33:1d:86:ef:
                    06:06:ba:66:1d:91:6e:97:e8:d7:21:1b:fe:d6:bc:
                    05:a0:70:fd:7c:d7:fd:3a:4f:7e:53:c7:7f:33:95:
                    80:6f:63:40:1e:36:b9:ba:76:ad:94:23:40:9b:74:
                    1c:36:9d:8d:48:05:a0:23:78:77:d4:88:6e:3a:89:
                    b6:b4:dd:1c:02:83:c6:d1:60:2b:9e:7b:12:b4:d9:
                    69:48:84:24:2f:43:38:02:d0:9e:99:51:d0:d9:7e:
                    68:92:5d:ab:b7:17:81:08:d4:af:3c:2f:05:cb:2a:
                    08:4e:c1:ac:47:97:fd:f0:74:f9:c1:9b:7b:5d:0c:
                    2a:8a:1e:52:50:95:90:a8:6b:91:a5:27:8c:ef:0b:
                    a3:69:bd:f1:d2:93:22:a3:46:bc:08:ca:f3:6e:5b:
                    35:3c:ee:bc:bc:df:14:f4:8f:68:a0:08:88:8c:da:
                    9b:d7:f5:1f:26:10:e1:bb:54:10:86:a2:af:81:5a:
                    e4:75:a8:0a:21:05:97:f9:11:af:23:0b:71:0a:74:
                    bc:1c:c5:be:5c:50:e1:1d:fa:f4:a1:92:19:e4:42:
                    92:1c:43:74:e0:4c:87:c4:89:ca:36:97:03:1d:f8:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BE:F7:94:A3:FA:7D:FB:43:8D:3C:BB:FB:ED:2D:B9:F7:18:C2:37
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3233322e302f32312d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:5f:18:f5:28:f2:35:06:e3:da:ec:63:ec:07:23:e9:47:b8:
         a3:9d:2b:f8:c0:6d:77:d4:d2:82:4e:6f:83:a2:c0:e2:a9:38:
         d2:4c:32:3d:d9:7f:04:12:c8:19:58:78:8a:b3:69:58:ff:ea:
         fc:5d:87:97:7d:0f:9a:23:c5:7e:5b:15:f3:e5:cb:35:15:5e:
         da:af:6c:08:f9:50:ef:e0:5e:87:32:51:1e:34:73:9b:64:7f:
         61:31:2d:32:3d:64:41:37:e3:df:90:29:41:1f:6b:a8:cb:87:
         7a:db:94:ed:15:3f:c5:11:7b:ae:d5:7b:70:fd:53:9d:ad:39:
         10:1b:9e:f9:37:f4:9d:64:c8:92:69:ad:0a:e5:3b:b8:54:96:
         71:54:c6:b9:c0:f3:18:ec:91:2c:f3:c3:1e:b3:5c:ff:aa:30:
         27:b4:0e:30:26:e6:d7:9c:e5:23:36:45:c4:b0:f4:7e:f4:ad:
         5b:ef:bf:08:5f:0e:91:c9:d9:d4:2f:89:de:3f:6e:d7:38:0a:
         4f:d9:ff:ae:e1:b7:48:61:f6:61:5d:93:b2:2a:23:90:06:bc:
         3f:9d:63:71:11:cc:fe:3e:30:a3:16:ae:8f:7f:46:f8:c8:87:
         d7:aa:fe:24:dc:14:6c:f1:e3:d6:28:22:89:fc:33:7d:67:11:
         a1:58:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org