Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36322e302f32342d3234203d3e203332303938.roa
File:                     3230312e3137342e36322e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          zyDi/CFQPXykdjTMR0itX4O+el19fuFCOuB7Jkcmx00=
Subject key identifier:   BA:E7:27:2A:B4:D8:8E:EF:1A:EE:E5:62:30:F2:D4:D5:B4:33:8D:67
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       4053D96C629BCF8AFB500245F7A6EB6D5C4E3056
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36322e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:49 +0000
ROA not before:           Tue 05 Mar 2024 18:12:49 +0000
ROA not after:            Tue 04 Mar 2025 18:17:49 +0000
asID:                     32098
IP address blocks:        201.174.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:53:d9:6c:62:9b:cf:8a:fb:50:02:45:f7:a6:eb:6d:5c:4e:30:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:49 2024 GMT
            Not After : Mar  4 18:17:49 2025 GMT
        Subject: CN=BAE7272AB4D88EEF1AEEE56230F2D4D5B4338D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:39:18:04:75:76:03:43:3b:28:92:71:51:
                    f7:2c:f0:33:92:2b:a8:b8:0d:48:99:32:81:b7:d2:
                    43:f0:f9:cd:4f:70:f2:87:5f:59:b2:b5:cc:5d:ab:
                    a0:e2:10:05:99:b0:ad:e4:7a:b8:6f:a4:d5:24:15:
                    0c:d9:d0:35:54:9a:12:5c:35:2a:b5:7d:7a:ed:bd:
                    03:4f:7e:e0:4a:3a:c3:fa:55:1a:f6:b9:69:bd:0b:
                    ff:e9:00:cd:78:a4:06:d0:63:20:a4:f1:8f:54:87:
                    91:f2:e9:e8:95:7d:e5:90:e5:b2:b7:2b:38:17:24:
                    71:ca:c0:ed:9a:40:7d:9c:94:19:c9:7c:86:89:df:
                    17:75:ef:5a:b4:bc:6f:f7:8b:c5:9e:03:ef:c8:5f:
                    f7:86:78:c8:1c:4a:aa:37:62:f6:e0:18:d8:e2:31:
                    6c:54:2d:4a:b0:95:11:5a:37:8c:e4:92:65:0f:18:
                    9e:0d:65:5f:39:26:25:f1:ce:dd:1b:79:7b:db:a3:
                    ed:15:f8:0c:ee:6d:04:e7:cc:03:94:01:65:fb:ed:
                    f0:fd:5d:87:90:21:82:9e:a8:44:23:b6:28:5e:1f:
                    5f:49:dc:d5:33:46:42:a3:c1:4a:bb:3e:d9:fd:17:
                    68:93:62:35:32:3f:08:d2:aa:d9:c9:9a:8c:74:5a:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E7:27:2A:B4:D8:8E:EF:1A:EE:E5:62:30:F2:D4:D5:B4:33:8D:67
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36322e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:76:96:0e:7d:a9:aa:10:7a:40:53:dd:1a:d1:21:c2:8c:e7:
         e7:93:de:07:c9:d0:4a:3c:43:54:97:9c:21:12:e4:e5:05:37:
         1c:9a:a6:92:97:2f:2c:77:2d:75:81:b0:54:50:9c:a5:67:7e:
         03:1f:5a:b1:5e:73:31:88:39:9a:90:8a:1c:20:ee:17:92:9b:
         8a:62:97:54:25:2d:4e:f3:4c:6a:2b:55:15:5f:50:ec:41:04:
         4d:ae:a3:59:93:33:8d:66:52:56:c4:5c:66:8e:19:8a:be:e1:
         93:0e:d6:d4:76:e8:83:54:4e:ab:c3:b2:e0:1b:9a:dd:5e:32:
         16:0a:02:83:83:61:b7:5c:1a:ff:c9:39:02:72:19:f1:21:75:
         86:16:82:6f:63:93:be:f5:44:dd:23:93:5b:e6:4f:d9:54:28:
         07:1f:15:dc:b3:50:6e:6a:49:0d:d4:ba:ce:2d:6c:2f:51:d8:
         e2:13:ee:ef:69:28:28:7c:f5:f7:02:33:89:36:2f:31:f2:2f:
         43:50:cb:7f:df:2f:51:70:29:66:aa:58:1d:d7:ec:95:be:0e:
         98:a6:6a:0c:ab:f5:a2:21:a2:5e:0c:df:15:16:32:07:e0:97:
         3a:98:be:25:6a:83:d1:16:94:38:45:f4:1b:f5:72:77:fd:22:
         be:23:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org