Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34322e302f32342d3234203d3e203332303938.roa
File:                     3230312e3137342e34322e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          ruVA3DIVSInJgjA62WAzAAsLJzqeqmy5QR7ugSGnzTE=
Subject key identifier:   41:0B:25:2E:4F:F8:E7:FD:D7:F7:FC:D7:AE:7D:7C:71:75:A5:18:CE
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       118AD106659BECB54DADB737AFD28D9F72C96F48
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34322e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:44 +0000
ROA not before:           Tue 05 Mar 2024 18:12:44 +0000
ROA not after:            Tue 04 Mar 2025 18:17:44 +0000
asID:                     32098
IP address blocks:        201.174.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 02:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8a:d1:06:65:9b:ec:b5:4d:ad:b7:37:af:d2:8d:9f:72:c9:6f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:44 2024 GMT
            Not After : Mar  4 18:17:44 2025 GMT
        Subject: CN=410B252E4FF8E7FDD7F7FCD7AE7D7C7175A518CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:b3:b7:73:6b:55:28:fd:4c:ea:3a:12:63:
                    ac:a8:a7:f9:14:45:58:2f:e7:c3:79:d3:26:65:85:
                    84:96:61:26:2b:6d:26:f3:a6:ce:bc:18:54:44:6c:
                    12:80:e1:df:74:71:f2:25:4b:a8:d5:ff:5f:de:00:
                    9e:ce:3f:c9:2b:f5:30:a9:f8:26:6c:9c:54:27:8a:
                    f6:f2:30:fb:43:d8:59:8c:4a:8d:34:a5:3f:9c:58:
                    96:12:ef:a2:05:24:ba:04:03:02:b0:25:86:d9:ab:
                    e3:0f:99:e9:93:a2:a0:75:a5:5f:d0:4d:d1:15:70:
                    28:e2:10:58:11:eb:09:1b:e6:7a:16:80:52:7c:0f:
                    23:94:cc:69:ec:59:23:7e:17:43:c5:7d:90:58:b5:
                    38:58:5a:1f:9f:1b:43:18:e2:3c:33:27:22:24:ed:
                    0f:fa:ef:5c:20:ec:64:62:32:09:0f:6f:0c:19:a7:
                    0b:df:07:76:9f:2e:05:d2:b8:2b:7e:68:35:48:a8:
                    d5:d0:db:d9:9f:8d:92:cb:15:90:ba:f2:70:b1:b1:
                    be:55:0d:7c:d6:2d:c7:39:a2:72:24:05:ae:a2:1b:
                    be:1a:cf:17:78:0e:85:f5:1d:8f:fd:d6:40:01:4c:
                    8b:5e:ad:3c:76:bd:e2:23:2d:e4:79:7e:f3:61:14:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0B:25:2E:4F:F8:E7:FD:D7:F7:FC:D7:AE:7D:7C:71:75:A5:18:CE
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34322e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:9f:eb:d6:af:ba:27:19:44:a8:1c:d9:79:89:97:f1:59:e0:
         45:e7:56:ea:de:2a:2b:8e:94:50:88:c7:e1:66:64:c6:a6:f0:
         2a:30:4a:d6:c7:92:c8:52:66:33:aa:9f:aa:7e:82:33:5c:8a:
         6d:c4:85:e1:4b:c6:22:95:47:d1:f9:29:f3:d9:a5:b8:fa:0c:
         0d:d9:7a:89:75:e2:53:27:72:e0:72:5f:04:a3:b4:a8:bd:11:
         7c:9b:71:bf:ba:5c:7d:04:59:7f:36:5f:ac:57:d2:6e:e1:5f:
         30:8e:55:b8:59:2c:c2:1e:2c:ab:8e:66:f5:24:e8:6c:39:55:
         58:c0:f0:7d:00:4a:a4:55:42:a3:90:d3:0f:9c:1f:05:03:c7:
         cc:16:39:91:e9:fe:bb:27:9d:ed:e1:7f:ad:70:6c:c5:9e:a8:
         0f:dc:2c:a9:cc:7d:bf:0e:0b:f6:b8:d7:b6:78:fe:d0:8c:77:
         38:6f:e9:18:9b:56:5d:aa:81:65:1e:c5:1f:b2:6b:28:d2:28:
         85:01:59:49:27:ba:55:6b:3b:e4:d3:62:e2:78:c3:5d:a3:63:
         31:c7:41:c3:b4:75:49:cd:22:9f:2c:a1:59:97:d1:e6:4b:fd:
         60:71:b5:80:ad:02:dc:a8:23:7b:41:8c:f6:fd:7a:ba:f5:29:
         6c:92:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:46 2024 by rpki-client on console-fra.rpki-client.org