Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e35362e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e35362e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          dPERKbyPXuweEUZjEMtfCUs1RdLSZvclDkeewvZtt3M=
Subject key identifier:   31:4E:7D:89:FE:7E:03:BD:B7:D8:03:B7:9E:66:89:DC:EB:FE:48:16
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       5DB50C9C83D458F57CF8B6874B8AAB789F212608
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e35362e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:46 +0000
ROA not before:           Tue 05 Mar 2024 18:12:46 +0000
ROA not after:            Tue 04 Mar 2025 18:17:46 +0000
asID:                     32098
IP address blocks:        201.174.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b5:0c:9c:83:d4:58:f5:7c:f8:b6:87:4b:8a:ab:78:9f:21:26:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:46 2024 GMT
            Not After : Mar  4 18:17:46 2025 GMT
        Subject: CN=314E7D89FE7E03BDB7D803B79E6689DCEBFE4816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:65:fb:97:4d:85:c8:6f:c8:4a:df:1f:35:
                    22:d1:91:10:f1:d2:7a:2f:6e:9d:c7:96:6a:12:c1:
                    bc:44:98:aa:4a:ca:f5:a8:c1:0a:f5:54:67:be:c4:
                    31:0d:c1:95:df:a5:d3:12:c8:c4:e5:14:6b:15:6f:
                    0b:91:9e:0b:ff:24:bc:36:a3:69:e1:97:eb:ee:00:
                    8a:53:ec:6e:e1:07:fa:10:ed:eb:a3:e2:5c:31:f3:
                    e6:bf:71:50:e3:1e:49:15:42:2f:ff:88:9f:b3:46:
                    4e:35:d5:39:6c:63:e6:67:a3:33:f1:03:28:d3:b3:
                    d4:37:20:bf:89:44:f1:8f:4c:b7:62:1f:35:75:9a:
                    17:55:5b:dd:ae:ff:28:63:bd:51:b2:dc:ed:16:87:
                    7e:09:0e:79:34:81:4e:81:5d:65:d0:54:38:8f:3b:
                    df:c1:28:11:07:d0:da:c5:d8:36:30:bb:af:2b:03:
                    da:a4:12:11:5e:67:b6:4e:a4:e3:4c:a9:f6:09:ff:
                    4a:24:45:1b:bc:44:db:12:af:02:5e:e6:dc:d5:bc:
                    08:a7:fa:9e:ce:68:6b:f6:e4:05:60:61:02:fe:c4:
                    33:51:ed:e6:a1:2b:77:31:8a:30:14:d5:20:85:86:
                    c0:de:bf:84:64:df:ad:d6:b4:0a:49:36:c8:dd:43:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4E:7D:89:FE:7E:03:BD:B7:D8:03:B7:9E:66:89:DC:EB:FE:48:16
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e35362e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:59:e4:cb:7e:7e:79:38:51:4d:4e:16:4e:40:b3:ae:9c:86:
         33:e1:62:c3:18:a8:dc:10:93:41:f1:b9:2c:90:56:22:0b:5c:
         44:d5:c3:b8:a4:ef:69:56:a8:3d:c5:8c:88:a6:fc:f8:8c:e8:
         01:e5:dd:7c:81:04:f9:c2:cf:de:51:45:07:70:2e:84:d5:9a:
         7c:5b:c5:66:29:4d:b6:08:ee:30:af:1f:c3:e7:51:f3:a5:9f:
         25:3b:70:f9:8a:3f:6d:39:bd:47:10:6a:aa:cb:b1:ff:45:e1:
         a1:d8:17:2f:16:26:96:92:ea:c0:47:70:f9:cb:1d:0f:23:25:
         15:96:87:64:74:f0:45:63:33:6f:df:ee:6d:39:53:55:53:a7:
         b4:11:09:97:00:f0:c2:e1:96:1f:30:56:10:34:20:db:00:09:
         9e:d5:1f:5b:57:d6:2b:fb:47:1c:78:f0:ec:5f:04:c5:bb:96:
         fd:dd:dc:5c:2c:3d:0e:40:17:ac:8b:43:84:cc:37:fa:0b:fd:
         a9:73:6f:b2:f4:5c:6c:5e:5f:b0:97:89:90:8c:1f:08:be:a6:
         aa:63:1d:68:81:13:b0:a8:31:04:ff:40:0f:28:25:72:fd:00:
         ed:3b:50:f7:7f:3f:9f:5d:d1:7b:69:7f:07:15:65:f8:94:72:
         6c:f1:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:37 2024 by rpki-client on console-ams.rpki-client.org