Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32342d3234203d3e203330313637.roa
File:                     3230312e3137342e34342e302f32342d3234203d3e203330313637.roa (raw, json)
Hash identifier:          dujcRh0vaO6xIq14hCZcYih5zCHUHXmrYVXGXNHHxSg=
Subject key identifier:   D7:19:A6:11:CA:6A:B9:DF:4E:39:49:37:25:DB:D8:DD:8A:E5:72:BF
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       3732FCB624746AC5C1D63C4BC4A706D215EC1B92
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32342d3234203d3e203330313637.roa
Signing time:             Tue 05 Mar 2024 18:17:55 +0000
ROA not before:           Tue 05 Mar 2024 18:12:55 +0000
ROA not after:            Tue 04 Mar 2025 18:17:55 +0000
asID:                     30167
IP address blocks:        201.174.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:32:fc:b6:24:74:6a:c5:c1:d6:3c:4b:c4:a7:06:d2:15:ec:1b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:55 2024 GMT
            Not After : Mar  4 18:17:55 2025 GMT
        Subject: CN=D719A611CA6AB9DF4E39493725DBD8DD8AE572BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:59:a8:e9:64:c8:2c:78:9f:1f:af:65:89:a1:
                    de:6d:c3:a0:bf:f6:8b:df:90:13:9f:45:09:11:94:
                    33:b1:da:5e:52:fc:e5:ee:00:b6:cd:44:c7:75:be:
                    92:17:a7:86:ce:d1:19:f6:4b:83:af:9d:a0:81:d2:
                    13:a4:45:06:b8:14:9a:e8:d1:11:4b:e5:cb:ba:f4:
                    68:87:14:c4:1e:04:73:fc:ec:70:d3:1b:aa:1a:3d:
                    d1:ad:1a:29:34:e3:84:82:c2:34:1a:3e:1a:e2:48:
                    0f:d1:0b:1b:cb:4a:5f:c6:35:73:ad:9c:ce:53:97:
                    94:12:24:70:eb:9e:fc:f5:bb:5a:77:f5:b8:e6:9f:
                    45:92:ef:c5:58:00:9c:b3:f7:b8:12:09:96:f0:e9:
                    4f:67:f9:dd:e1:cb:b5:ef:9f:6d:e7:75:ed:ae:73:
                    b1:76:f0:1a:15:3d:73:cb:4f:2f:1a:9e:e3:5e:15:
                    79:cd:97:fc:00:d7:30:25:5b:08:fe:b2:03:40:f0:
                    85:52:bc:3d:bb:14:e6:db:e3:ab:1d:ef:20:fa:1f:
                    c8:df:3f:73:12:1a:84:56:48:2b:cc:13:81:08:0c:
                    19:ac:c9:cb:b3:72:06:30:3b:22:55:6e:09:c5:e8:
                    68:1c:24:f6:9b:cb:aa:4c:bb:b5:c3:bf:65:80:6a:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:19:A6:11:CA:6A:B9:DF:4E:39:49:37:25:DB:D8:DD:8A:E5:72:BF
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32342d3234203d3e203330313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:97:c0:82:5e:81:79:c3:f8:eb:b7:52:71:c7:5f:bb:ff:
         5e:b2:97:23:17:a9:fe:64:86:a3:51:2e:53:a1:73:ef:4b:76:
         1a:c9:f2:7b:5c:05:9a:e5:f9:d5:ed:95:7f:6b:8f:ed:83:63:
         f5:d5:f0:c0:d3:c0:a3:45:9b:9c:52:24:07:c3:b2:d7:6f:22:
         07:50:91:6d:82:15:23:37:37:48:81:5e:3f:d4:f5:23:51:a1:
         a0:b8:ca:14:00:63:8a:14:56:a5:db:59:21:89:81:59:ca:16:
         53:fb:c9:53:08:bb:7a:95:7e:64:cc:76:6a:cd:8a:d7:52:7f:
         79:72:02:d0:c1:f5:83:5e:4f:8e:02:98:71:64:06:d5:9b:4f:
         ce:4f:bd:ab:a0:5c:25:d6:77:57:6c:ba:21:cb:cd:d1:b1:f7:
         08:72:20:a4:c8:f3:f2:45:33:8f:bf:e7:19:ee:53:11:d5:a0:
         5e:e9:3c:ef:cc:6f:c6:00:cb:ac:c2:f8:6e:ec:bb:8d:41:c2:
         d8:28:b1:02:b5:52:87:5f:ee:35:ee:cc:3a:11:36:1b:49:79:
         ae:a6:0c:89:1e:ae:07:00:71:f0:f9:18:2d:5a:37:21:2e:29:
         59:3a:e7:89:36:fa:d4:d1:16:0e:7f:43:d9:35:a3:40:70:94:
         10:41:af:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org