Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36302e302f32342d3234203d3e20323632393133.roa
File:                     3230312e3137342e36302e302f32342d3234203d3e20323632393133.roa (raw, json)
Hash identifier:          BrNByWW/vB8LyM6B+OCRZsBUZRWevOQch+hSjq8tPDw=
Subject key identifier:   7C:59:9C:66:AF:CD:99:77:CD:E8:0A:9C:65:8D:F7:5C:C6:56:FC:38
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       3019DE01745D8E5C6C8F18BFAE1067E8D28307DA
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36302e302f32342d3234203d3e20323632393133.roa
Signing time:             Tue 05 Mar 2024 18:17:56 +0000
ROA not before:           Tue 05 Mar 2024 18:12:56 +0000
ROA not after:            Tue 04 Mar 2025 18:17:56 +0000
asID:                     262913
IP address blocks:        201.174.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:19:de:01:74:5d:8e:5c:6c:8f:18:bf:ae:10:67:e8:d2:83:07:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:56 2024 GMT
            Not After : Mar  4 18:17:56 2025 GMT
        Subject: CN=7C599C66AFCD9977CDE80A9C658DF75CC656FC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:43:ca:1a:9f:ad:66:3e:1b:79:04:5a:12:
                    56:cc:96:58:d0:21:ae:b1:64:dc:0e:af:5f:50:14:
                    9f:56:51:ca:38:2c:a5:04:66:2b:e2:25:d4:e2:33:
                    72:24:c5:cd:f4:4d:c3:6e:f4:e2:bc:05:ff:85:0a:
                    a3:f8:a3:5c:11:1f:fb:a7:e4:f9:03:2b:7a:d6:e3:
                    05:7d:5c:2a:52:ab:d8:d1:61:c1:4f:16:c5:47:3b:
                    b0:78:22:a5:22:b2:72:67:77:f9:bc:d1:33:6a:38:
                    1e:d5:0f:ed:03:13:29:22:4b:18:98:39:e3:6b:07:
                    66:b0:b4:57:ec:b6:43:c4:fa:e0:77:7b:d3:bc:2e:
                    98:ef:9e:3f:25:d2:0f:68:3c:b2:e0:f0:ed:7d:f0:
                    59:ca:fb:4c:39:21:4d:6f:0d:be:f9:0d:5e:78:2e:
                    b3:fe:48:72:ac:6f:cd:41:fa:53:ec:cb:ac:d3:07:
                    87:34:31:26:d7:52:3e:06:11:3a:f1:2d:d3:5a:3e:
                    26:8b:cf:f3:34:91:e0:66:7a:7d:60:d0:06:c4:b7:
                    8b:01:74:7c:79:d4:a4:2d:ee:37:8b:37:f4:d8:29:
                    dc:75:86:cb:31:3f:9c:09:2c:58:c1:e9:6e:2d:06:
                    9a:db:dc:6f:47:c1:b4:fe:e1:55:3b:f0:b2:e6:f7:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:59:9C:66:AF:CD:99:77:CD:E8:0A:9C:65:8D:F7:5C:C6:56:FC:38
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36302e302f32342d3234203d3e20323632393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:dd:d0:72:64:bf:05:19:4c:0b:9c:92:3d:86:92:88:37:3a:
         f1:7d:20:42:cb:a6:0d:72:04:33:a4:3b:0d:35:31:06:77:1d:
         0f:da:5f:7f:09:61:76:30:76:77:5c:96:59:33:f3:6f:0e:83:
         f3:3f:de:c4:61:90:dc:9d:dc:f6:15:ff:95:c9:48:a9:4b:61:
         e7:e4:60:d5:4c:ab:c7:60:e7:56:95:52:0e:60:26:0b:e4:15:
         77:fd:12:28:80:b5:2b:fd:e0:be:6b:80:d3:8d:c7:4e:2d:46:
         f4:81:e6:6b:c5:ee:dd:56:6f:0e:94:20:a1:da:0d:8b:2d:8f:
         bd:44:b6:10:7f:e4:aa:bd:cb:b6:02:34:37:34:8e:e0:26:ce:
         47:c9:e6:f3:d6:f9:c8:08:f7:6f:3a:55:8b:97:ce:93:f7:9a:
         c7:0f:6d:1c:23:ef:91:2e:6a:81:7b:14:68:85:96:d9:ad:7e:
         cc:2a:5f:f9:d3:a7:8b:42:5f:a5:de:bd:e6:08:40:20:a1:86:
         a1:7f:fa:1e:fa:bb:a3:56:91:ad:7a:fb:29:4f:b1:7d:57:c8:
         15:97:56:53:8b:e3:29:42:05:db:4d:60:96:7b:20:d4:7b:f3:
         7d:68:c8:fb:34:f8:92:3b:20:25:95:95:9d:62:91:a9:cd:8b:
         0e:e2:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org