Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e39362e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e39362e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          W9774wg+zU6dhOR8Wk3FLnLFYzGuQv46dhuMFAEmWZE=
Subject key identifier:   F8:FB:9C:DA:D7:E3:7A:63:DD:11:85:45:2A:04:0A:BC:6C:C8:E0:6D
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       6745772873511C290A041CA1BEFDC6A45E4850D3
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e39362e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:48 +0000
ROA not before:           Tue 05 Mar 2024 18:12:48 +0000
ROA not after:            Tue 04 Mar 2025 18:17:48 +0000
asID:                     32098
IP address blocks:        201.174.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 02:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:45:77:28:73:51:1c:29:0a:04:1c:a1:be:fd:c6:a4:5e:48:50:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:48 2024 GMT
            Not After : Mar  4 18:17:48 2025 GMT
        Subject: CN=F8FB9CDAD7E37A63DD1185452A040ABC6CC8E06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:0a:8a:ce:52:e5:e2:8c:a4:40:4c:2b:3e:
                    c4:6b:8c:ed:23:d3:ae:68:01:16:56:b0:33:8c:ec:
                    77:43:5d:f2:e5:0a:4e:4b:1a:30:c9:e2:dd:67:27:
                    31:72:14:3d:f3:7d:1f:84:3a:bd:49:dc:f5:e6:a7:
                    82:84:62:36:21:02:5d:c4:b2:c8:5e:5a:8e:14:d4:
                    84:3e:3f:88:68:28:7e:3c:2f:cc:2b:8c:29:75:a0:
                    c7:67:b6:29:75:70:c6:31:ac:4a:b6:d5:02:8c:6b:
                    e7:f8:5d:e0:d7:73:b0:9c:5c:0b:ee:53:88:c7:1f:
                    ee:7e:fa:99:98:3e:57:bb:c2:89:ab:95:83:dd:6a:
                    7b:1d:12:ba:3b:62:29:b5:2c:14:dc:e4:ef:fb:c2:
                    09:05:e6:f7:74:ad:89:17:84:f3:0e:66:1d:f6:2e:
                    ed:93:e4:03:6e:0a:bc:b7:76:ae:00:c1:9c:a3:c4:
                    a7:78:bc:ae:69:88:82:cd:ec:8c:60:da:05:a2:9b:
                    3f:f3:cd:68:3f:2e:a9:95:57:3b:d2:af:94:e3:16:
                    eb:b4:17:4d:5f:c6:46:b4:4e:36:a0:31:78:3d:a6:
                    57:4a:4f:ca:93:ed:0c:50:40:3a:6a:22:a5:66:89:
                    8e:04:9b:70:62:5d:2c:39:34:e6:d4:e6:94:5c:a8:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:9C:DA:D7:E3:7A:63:DD:11:85:45:2A:04:0A:BC:6C:C8:E0:6D
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e39362e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:7b:8a:eb:6e:86:5c:30:b2:97:c6:1c:85:d7:a7:6d:76:4e:
         20:1a:9f:d1:c7:e1:33:c6:1f:7a:a4:71:e9:8b:a3:b2:d8:0b:
         aa:68:45:ba:e5:61:b8:4a:25:8c:55:1c:3a:85:2c:1d:47:fe:
         ca:aa:e5:0b:6d:90:20:a9:f7:90:aa:00:68:e1:c7:42:bf:67:
         aa:8d:6c:b7:26:eb:f4:11:01:1c:9c:35:71:f7:97:8f:68:8b:
         9a:4f:2b:75:85:18:d7:f7:34:4c:cb:e1:f1:f5:45:c5:9f:5d:
         56:63:50:31:a6:71:2c:e5:cd:a8:4d:68:70:86:fc:07:5b:6e:
         d1:5b:e5:12:2a:ee:d9:27:9c:d2:1a:b9:92:bc:8f:bf:7c:06:
         32:fa:b5:0f:19:9f:56:35:1e:86:04:25:69:41:d2:b7:41:48:
         f0:5a:33:fa:4c:56:68:e8:b6:02:45:c3:cb:5e:b8:e6:89:0d:
         25:f4:ca:d7:ea:94:69:79:4b:14:c8:ce:77:8b:b4:64:d1:81:
         e4:b3:50:1a:01:90:4f:78:d4:2b:59:08:10:43:0b:ac:41:3d:
         03:b2:42:ff:fa:0f:bf:af:cc:a6:85:4f:2b:cc:be:77:b5:87:
         66:de:a4:4e:00:68:80:be:de:dc:0b:4c:a9:53:25:89:3e:36:
         16:95:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:46 2024 by rpki-client on console-fra.rpki-client.org