Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e33322e302f32312d3234203d3e203332303938.roa
File:                     3230312e3137342e33322e302f32312d3234203d3e203332303938.roa (raw, json)
Hash identifier:          IWrtLtAHsc31JJloAuLgri6NVxHOk42hK5X5BePLz8g=
Subject key identifier:   8D:F9:47:A9:E9:6D:C5:BC:FB:F2:C0:15:08:DE:48:9A:07:6C:F5:06
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       27DB55F24C393C7D9ED4D22C7ABC1AF6FDD01869
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e33322e302f32312d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:55 +0000
ROA not before:           Tue 05 Mar 2024 18:12:55 +0000
ROA not after:            Tue 04 Mar 2025 18:17:55 +0000
asID:                     32098
IP address blocks:        201.174.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 02:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:db:55:f2:4c:39:3c:7d:9e:d4:d2:2c:7a:bc:1a:f6:fd:d0:18:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:55 2024 GMT
            Not After : Mar  4 18:17:55 2025 GMT
        Subject: CN=8DF947A9E96DC5BCFBF2C01508DE489A076CF506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:04:2a:78:b0:af:78:e4:43:d6:1e:a1:c1:
                    1e:ab:a8:fb:01:0f:1c:9d:aa:9f:94:3d:58:10:b4:
                    32:8e:0d:16:63:80:ef:57:d6:16:2a:46:12:66:9f:
                    51:b6:6a:78:4b:9f:c1:64:eb:0a:f3:27:f4:a1:d1:
                    cb:84:b9:28:08:4c:03:57:b2:01:ea:f1:c0:44:52:
                    1d:40:2b:d4:e9:fe:08:e9:e7:ac:fa:d0:e7:be:7b:
                    f7:8d:33:dc:3d:8f:c1:af:3c:00:20:e8:7d:d6:2a:
                    2b:ae:81:70:0b:a6:54:09:ad:af:bf:75:19:de:26:
                    3c:1f:82:58:36:6b:41:cb:1e:d7:95:48:15:c7:a2:
                    fe:82:bc:2b:fd:8a:d7:ac:73:36:92:9f:49:98:df:
                    e0:a8:f9:1a:c8:c5:f0:c9:ce:dd:fc:5f:ed:94:77:
                    0d:42:c8:2d:42:e1:33:68:0e:f2:35:8f:a8:e4:2d:
                    ae:16:48:37:33:b9:b0:bc:fe:36:e6:05:fe:2e:cf:
                    eb:38:4d:b3:63:76:38:a3:cd:f1:89:bc:4e:fb:0c:
                    ae:98:b6:5a:cd:cd:9d:de:a3:ea:e3:cb:d3:6b:d1:
                    c7:f7:2e:b3:7c:ee:fc:b3:fc:99:8a:db:72:64:ca:
                    fd:2b:5d:47:aa:c0:04:95:bd:98:2e:01:d8:b5:a7:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F9:47:A9:E9:6D:C5:BC:FB:F2:C0:15:08:DE:48:9A:07:6C:F5:06
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e33322e302f32312d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:cd:83:45:bd:21:fb:6b:ab:04:71:9f:19:93:16:f8:98:ea:
         2a:16:db:be:a7:6c:6c:39:18:63:a7:67:b0:d4:36:7c:be:a2:
         b3:6a:d2:f3:4e:47:51:44:7f:23:71:87:7b:6c:db:96:31:7d:
         ce:7e:c0:9f:45:ab:82:ff:fc:58:ad:42:36:42:6c:4b:54:94:
         18:96:d5:f2:ec:67:20:4e:a2:e7:4b:61:90:52:d5:30:e0:01:
         79:e2:1f:24:07:4f:12:9c:ec:72:0d:7d:b0:82:7e:e1:47:30:
         3e:b5:50:fd:4b:e0:72:79:35:56:54:44:1f:04:1a:d3:71:df:
         fb:b2:b0:8c:a0:4c:bf:42:5c:3f:7b:1c:5d:7d:69:02:c7:1c:
         fb:f9:8b:b4:02:ac:a1:a3:83:6d:82:ea:ae:23:49:cf:25:9e:
         9c:56:cd:da:16:37:72:51:a6:f0:54:d1:e9:8c:07:ce:9b:9c:
         ef:55:9c:5a:e6:1d:19:ee:32:1c:af:97:1a:8a:72:f3:03:40:
         fa:9a:91:ff:e2:e9:c8:49:02:b9:aa:93:22:11:10:de:cc:2e:
         03:01:c8:14:9f:28:99:73:d0:9b:e0:e5:20:2a:ee:ed:ad:f1:
         6e:64:54:59:43:05:93:71:c0:e1:7b:df:6e:24:90:31:95:28:
         51:d4:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:46 2024 by rpki-client on console-fra.rpki-client.org