Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232382e302f32322d3234203d3e2037343338.roa
File:                     3138392e3230312e3232382e302f32322d3234203d3e2037343338.roa (raw, json)
Hash identifier:          UohVIdfhaB16IDd413QjvC1Mp/for4pJ0+Dr8cCD3gA=
Subject key identifier:   96:83:94:F9:F0:30:90:2C:D1:A6:DC:0F:98:83:5C:E0:8A:3E:6A:9D
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       127175897126BFAC24A695381BB61084485475B5
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232382e302f32322d3234203d3e2037343338.roa
Signing time:             Tue 05 Mar 2024 18:16:23 +0000
ROA not before:           Tue 05 Mar 2024 18:11:23 +0000
ROA not after:            Tue 04 Mar 2025 18:16:23 +0000
asID:                     7438
IP address blocks:        189.201.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:71:75:89:71:26:bf:ac:24:a6:95:38:1b:b6:10:84:48:54:75:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Mar  5 18:11:23 2024 GMT
            Not After : Mar  4 18:16:23 2025 GMT
        Subject: CN=968394F9F030902CD1A6DC0F98835CE08A3E6A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:f1:72:5d:8d:dd:84:4b:f2:00:c2:99:97:
                    f0:39:11:aa:aa:f7:24:20:01:1e:ad:85:6d:63:67:
                    a2:e7:f0:1d:61:43:60:2e:be:f3:50:0b:51:61:82:
                    9b:51:38:aa:b3:56:2a:14:56:64:71:52:db:c1:db:
                    a7:86:c7:bb:d6:b3:32:80:c7:d3:1d:6b:80:1d:37:
                    0a:3d:e4:88:24:b8:6c:13:5a:e3:d6:f6:81:5e:1c:
                    8c:46:39:a7:ee:0e:04:68:f9:28:98:b0:45:96:fc:
                    3a:91:39:7d:32:3b:54:b0:5b:b1:9a:03:5b:29:c1:
                    65:da:a6:b7:cf:95:7d:01:2b:ca:52:22:e9:86:20:
                    d1:f4:33:ed:e2:3e:96:0c:6d:c7:52:49:29:d9:c7:
                    96:8f:d4:1b:5c:7d:a7:62:fb:7e:3a:ee:6a:06:34:
                    6a:31:ae:a7:30:2e:43:38:a4:d2:35:fd:d8:76:29:
                    53:31:07:a1:cb:be:13:4f:23:80:24:8a:ca:0a:a5:
                    3a:8d:ac:7e:d3:4b:13:aa:8b:ec:61:13:2a:d8:4a:
                    ba:b7:ab:35:8e:06:62:23:ef:0d:48:f3:74:5c:0e:
                    a2:81:68:92:ba:c1:46:f0:1a:f3:4d:96:00:ea:4e:
                    ef:c1:51:8e:b0:69:79:f6:38:b6:26:c8:ec:08:f7:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:83:94:F9:F0:30:90:2C:D1:A6:DC:0F:98:83:5C:E0:8A:3E:6A:9D
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232382e302f32322d3234203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:99:b5:75:8c:d0:06:cb:4f:7f:7e:b4:97:a2:57:61:70:a3:
         e6:55:10:19:ef:32:62:48:31:b1:81:d4:b6:21:e2:36:e3:32:
         f8:77:58:85:1c:9e:2b:cb:ab:06:59:0b:47:6f:b9:b2:dc:bd:
         77:02:34:24:ef:80:8a:98:2c:d7:5a:d1:24:b6:7b:6d:41:30:
         8a:36:f8:35:73:83:00:67:f4:80:03:8e:97:59:5f:af:f5:50:
         63:37:1a:4c:bf:89:24:fe:80:4f:24:4a:71:5b:78:e8:a0:82:
         07:90:c9:1b:bc:50:e0:c8:e2:dc:6c:26:35:7b:86:7b:34:2e:
         6a:b0:62:e8:55:8a:af:48:4c:7f:1f:66:1a:5d:3c:63:6f:07:
         0a:10:83:68:42:0e:61:cb:ef:44:cf:10:47:5e:9b:44:a4:80:
         ba:81:f2:fc:da:63:97:52:07:de:4d:07:a1:31:da:1b:13:8a:
         73:3d:71:cb:44:30:86:68:ae:04:52:58:a2:cf:09:d8:e2:09:
         07:71:2d:01:6b:ba:a2:74:5e:da:27:f7:0a:bb:31:28:8b:c2:
         ba:ad:6e:c8:38:d6:ee:18:fb:67:d5:6b:2f:50:32:1d:83:e6:
         69:8e:53:76:e6:95:b7:ce:ab:f5:d3:0f:b6:51:6a:96:b7:19:
         0a:f7:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org