Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e203532343339.roa
File:                     3136302e31392e3230312e302f32342d3234203d3e203532343339.roa (raw, json)
Hash identifier:          aPJuT6v2rowV8h7DTXjdH/DFZLEjpVYoyRbWp5FhM8w=
Subject key identifier:   0D:4C:62:F7:B8:09:D7:8A:11:C6:00:84:94:49:5B:DB:3B:27:6A:60
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       2ED13F7C99EE2E4EC00860BB669DFF36B0275D85
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e203532343339.roa
Signing time:             Tue 05 Mar 2024 17:50:50 +0000
ROA not before:           Tue 05 Mar 2024 17:45:50 +0000
ROA not after:            Tue 04 Mar 2025 17:50:50 +0000
asID:                     52439
IP address blocks:        160.19.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d1:3f:7c:99:ee:2e:4e:c0:08:60:bb:66:9d:ff:36:b0:27:5d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: Mar  5 17:45:50 2024 GMT
            Not After : Mar  4 17:50:50 2025 GMT
        Subject: CN=0D4C62F7B809D78A11C6008494495BDB3B276A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:c7:f4:29:98:ef:37:62:07:5c:fc:61:8b:
                    55:17:69:8c:05:20:72:4e:07:2b:8f:36:f7:fb:ff:
                    e7:f8:c6:04:b7:17:40:ee:52:7f:15:ff:59:af:f0:
                    5c:37:d1:c9:02:1c:87:86:a1:3f:56:27:77:4b:31:
                    2c:65:28:d8:05:32:78:cb:f2:c9:76:5f:6a:79:3d:
                    5b:43:96:40:42:5f:17:6a:9a:75:b0:8e:f4:9c:6f:
                    28:a7:a5:a3:75:56:76:3f:94:37:da:6d:9d:08:fe:
                    6e:c8:c9:af:b7:e0:cb:ba:1c:c4:54:d3:83:0d:38:
                    f6:fd:bb:72:28:34:7f:4c:66:05:ea:81:c0:4c:07:
                    f8:e9:26:03:e5:f0:52:64:a6:f6:d9:df:87:a8:aa:
                    2a:f6:3d:c3:75:df:69:a5:d3:a6:ed:12:78:9f:1a:
                    9a:f7:35:98:2d:87:7e:3a:d6:6c:48:c8:e9:ba:60:
                    d3:8d:95:8a:a8:37:f7:a0:cc:49:11:ac:6e:04:07:
                    d4:36:da:d6:c3:ce:9e:bb:8b:26:0d:7f:e4:4a:85:
                    e0:43:c3:d9:24:3c:00:ec:93:32:29:61:0a:91:38:
                    d2:e1:9b:c8:14:6b:14:d0:35:73:f9:b1:58:55:25:
                    a8:85:98:83:31:64:75:7d:0f:e8:47:7b:77:0c:76:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4C:62:F7:B8:09:D7:8A:11:C6:00:84:94:49:5B:DB:3B:27:6A:60
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:dd:b6:23:7b:f8:4b:f5:db:67:17:1a:5f:2a:c6:66:4f:24:
         67:86:31:c1:98:0b:5e:2a:df:5a:0d:cf:d5:81:89:f1:56:50:
         50:4d:70:06:89:4a:32:cc:c5:a0:29:3f:f5:80:36:77:27:59:
         ae:41:b4:39:ec:58:61:43:e5:fc:80:32:ab:67:6c:db:6f:a9:
         2a:26:64:2e:d7:23:f3:e6:c5:da:ff:68:47:3c:ab:e8:f3:2f:
         86:89:0d:51:f0:d6:94:bd:4e:d6:af:81:11:e2:5c:7d:f8:96:
         dd:4b:47:cc:12:a0:83:c6:61:f1:8a:9a:e9:94:0d:4d:f8:82:
         20:15:50:d3:1a:61:4c:a7:d0:de:09:2f:84:f1:94:41:74:06:
         22:c1:7e:4b:53:45:fb:ab:c0:4d:0a:32:44:cf:f5:05:ba:6d:
         98:fe:62:43:b8:23:8e:72:fc:71:12:80:7a:9b:63:d3:1f:10:
         56:78:4d:19:66:84:9d:0a:03:b2:cf:d4:28:ef:d2:e1:6c:b0:
         33:ac:bb:0a:f3:15:94:62:83:73:40:30:24:ba:ba:19:fd:28:
         a7:df:69:ee:63:5d:2b:a0:6b:96:5e:aa:33:f0:bc:9c:da:62:
         5a:54:67:df:0c:93:16:4e:c9:ec:bc:e9:27:96:f4:a6:0e:a5:
         23:54:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:16:17 2024 by rpki-client on console-ams.rpki-client.org