Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203231353735.roa
File:                     3230312e3133312e3132312e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          wNiWNN2txDEeTjPKSoNsiJ10zzpgg6dRi/kkSsV/880=
Subject key identifier:   DC:26:F4:28:C1:66:AD:46:94:44:40:59:04:E9:4E:30:20:1D:6D:AE
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       2ABE653E17F2F45CC4541FD1FF06906D2CFF8644
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 17:56:44 +0000
ROA not before:           Tue 05 Mar 2024 17:51:44 +0000
ROA not after:            Tue 04 Mar 2025 17:56:44 +0000
asID:                     21575
IP address blocks:        201.131.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:be:65:3e:17:f2:f4:5c:c4:54:1f:d1:ff:06:90:6d:2c:ff:86:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:44 2024 GMT
            Not After : Mar  4 17:56:44 2025 GMT
        Subject: CN=DC26F428C166AD469444405904E94E30201D6DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:48:6e:14:b6:2e:df:94:57:30:4b:cd:70:
                    82:70:8f:32:e8:fe:89:2e:37:63:fa:df:18:b9:df:
                    cb:af:7c:8f:72:d8:53:8f:c2:39:01:e6:18:03:43:
                    ac:b5:45:34:37:1d:67:0e:e2:58:8a:c2:0d:c6:2e:
                    b0:4b:bd:cd:9d:f0:4e:c5:1d:1b:04:8c:b2:59:31:
                    b0:7a:ee:3c:db:42:66:86:63:9b:15:aa:df:9d:c6:
                    34:7c:f7:29:98:ef:ed:96:d2:58:6d:d3:8d:04:64:
                    23:e6:86:3d:ed:f5:77:c0:b6:e3:c2:7f:21:4c:a9:
                    bb:b3:dd:5e:41:da:e7:fd:24:79:e4:6f:f9:54:62:
                    6f:b5:20:3a:97:92:dc:73:52:ee:65:33:11:ec:54:
                    89:0e:d8:d7:fd:b9:0d:39:0d:f8:52:41:67:c7:ed:
                    4f:0a:08:b2:5e:e0:0d:e8:eb:2f:85:b5:1d:91:d8:
                    c7:42:7d:73:0a:80:08:a8:6f:2e:91:60:f0:98:1e:
                    05:2b:bc:79:9f:9d:d0:73:83:55:a4:d5:6d:6f:8f:
                    55:d7:1d:56:c5:78:d5:f4:5c:74:10:cd:7e:e5:39:
                    82:58:8b:66:25:bd:02:7c:98:e4:6d:95:05:99:c5:
                    da:e9:27:36:db:f8:d4:95:b4:07:a0:c2:65:3e:b0:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:26:F4:28:C1:66:AD:46:94:44:40:59:04:E9:4E:30:20:1D:6D:AE
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e5:b6:39:b2:c6:0c:e5:2f:45:34:f2:f8:3c:b1:53:db:39:
         2f:22:ca:3b:85:20:24:af:c7:d0:ac:1a:4f:90:2c:bd:3d:b6:
         5c:06:79:20:11:52:07:1a:03:d5:32:e7:8f:95:fa:fc:4e:fc:
         cd:eb:b7:c2:b3:fc:1a:41:c9:54:1c:84:fd:71:6d:a6:df:14:
         b0:c1:19:9d:60:5a:22:d1:b6:3d:10:43:b9:9e:db:88:c1:12:
         43:70:19:0e:09:0e:ca:4e:29:2b:72:c1:09:d1:c8:90:80:0f:
         f0:ae:a9:f5:98:e6:04:63:70:3f:19:d7:72:fe:7f:fd:c5:4b:
         a3:93:1b:c3:ee:0a:18:ae:de:52:cc:b6:c5:7c:e3:6f:29:12:
         b6:a8:a0:cb:91:15:d5:24:8c:c6:89:cb:3b:75:7c:c7:90:b1:
         18:4d:b0:63:63:0b:55:20:01:0c:e8:bf:a2:76:b3:b6:ca:c6:
         de:f6:b2:6e:54:a1:1f:9a:11:b7:e6:55:dc:8f:0e:07:d8:21:
         b3:34:2f:71:a3:1e:3e:2b:11:8d:15:fb:1c:48:31:92:94:97:
         71:2c:67:04:8f:06:47:e3:c6:a7:d5:61:9d:9a:07:cf:fe:7b:
         63:0c:4b:74:d7:ae:0f:72:64:bb:88:c0:8d:40:bb:57:d7:5f:
         3a:a8:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:31 2024 by rpki-client on console-ams.rpki-client.org