Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e32342e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e32342e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          8/j4bwY4ycxQ0jOhzIbTLg4pBGHlMqmcMXXlQhtTfp8=
Subject key identifier:   26:DA:D9:DB:7B:A2:EF:05:47:95:0F:27:C3:9D:A7:D0:C2:A6:AD:4D
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       751B70B80F22102FB1D036927C2DB131CFB92F3D
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e32342e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:51 +0000
ROA not before:           Tue 05 Mar 2024 18:12:51 +0000
ROA not after:            Tue 04 Mar 2025 18:17:51 +0000
asID:                     32098
IP address blocks:        201.174.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1b:70:b8:0f:22:10:2f:b1:d0:36:92:7c:2d:b1:31:cf:b9:2f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:51 2024 GMT
            Not After : Mar  4 18:17:51 2025 GMT
        Subject: CN=26DAD9DB7BA2EF0547950F27C39DA7D0C2A6AD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:b7:05:5b:f2:e2:87:3b:56:08:6d:31:11:
                    e1:b6:25:7c:2b:f1:90:cf:cf:50:75:fb:66:fa:2b:
                    2d:a7:47:56:88:33:e6:4a:40:30:15:eb:81:12:60:
                    2b:4f:a7:31:a3:26:fd:f8:01:90:a8:35:28:0f:a7:
                    fc:37:52:e2:e8:f8:37:c2:11:dd:12:83:98:74:dc:
                    2c:47:74:dc:f9:b9:c1:c7:ee:c5:51:20:4f:a3:51:
                    40:3b:e9:06:59:a7:82:9a:62:fd:98:c9:fd:e6:a8:
                    f3:d4:28:3a:b6:02:e7:3e:d7:66:25:7f:41:34:2c:
                    1d:73:01:27:b5:8c:31:a2:ee:fb:d4:a9:d7:39:1e:
                    f4:00:8d:a7:ba:35:28:af:84:2c:b4:70:01:f9:8b:
                    31:7a:f8:a3:77:ea:e2:97:ab:38:49:94:dc:df:51:
                    9e:dc:18:59:93:0a:01:58:97:b3:b0:cc:5b:50:bc:
                    7d:f1:70:81:1b:5c:68:44:f4:6b:bb:0c:41:d3:fa:
                    6b:50:50:c5:79:e4:de:4d:a2:be:42:69:1d:4d:63:
                    53:f8:e6:1a:1e:9a:02:9b:99:63:7a:c3:ca:31:0a:
                    be:cb:e9:5a:d9:2e:a5:a1:50:7f:9b:52:97:e4:99:
                    91:bf:d2:28:e9:24:82:a1:cf:44:cf:8e:33:a2:01:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DA:D9:DB:7B:A2:EF:05:47:95:0F:27:C3:9D:A7:D0:C2:A6:AD:4D
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e32342e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:96:86:85:d5:4f:d0:69:3d:3a:e2:4d:3e:ea:97:9e:eb:ba:
         64:8a:c6:99:ab:1f:47:ae:0a:e2:5e:a8:cd:18:98:02:8d:94:
         03:0e:c9:57:74:06:da:4f:c8:d1:51:3e:38:f5:47:7b:3c:83:
         73:35:a6:1d:2c:c4:e7:2b:fd:52:4e:1b:a0:9f:ef:bf:aa:08:
         28:24:f6:c9:41:9c:fa:38:fd:e4:3e:a3:ae:6b:15:19:bf:78:
         5c:2c:b9:47:86:f0:a4:25:f6:7e:71:ae:d8:9e:9a:18:20:7e:
         ce:40:7b:e4:99:54:aa:4a:68:99:27:6b:f3:8b:50:dd:51:53:
         be:4b:d8:a7:dd:eb:63:80:0a:09:ee:ce:38:dd:47:a7:b0:a8:
         40:3d:29:d8:03:35:26:2b:55:c8:d0:b2:bf:19:b6:d1:4c:88:
         22:b9:d8:86:d4:87:2a:54:64:79:26:b3:25:d7:ef:ef:c5:0c:
         6b:7e:fa:95:03:ca:94:66:03:c2:8a:e2:46:6f:50:5c:eb:1f:
         a2:24:5a:32:d0:e7:b1:75:2c:0d:bf:70:e9:a6:b1:f1:dd:2f:
         f6:15:be:c4:95:fa:af:72:a4:a1:22:0c:90:3c:fd:05:ff:6e:
         b1:dc:71:fd:f3:cf:8b:d7:cb:27:0d:bb:49:4f:86:e9:29:4a:
         58:b6:a9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org