Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230312e3136362e3132382e302f31382d3234203d3e2037343338.roa
File:                     3230312e3136362e3132382e302f31382d3234203d3e2037343338.roa (raw, json)
Hash identifier:          5WDYIbXYGXMY71RQC4JUXRIVi6yvV6SsDqrRbZMmOBI=
Subject key identifier:   A2:A9:9D:37:0B:2B:66:58:F7:63:C1:15:8F:B6:CD:84:17:CA:17:B9
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       6FEE55B9BA50CE4C7DF408B35143FA1F582A3B40
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230312e3136362e3132382e302f31382d3234203d3e2037343338.roa
Signing time:             Tue 05 Mar 2024 18:16:23 +0000
ROA not before:           Tue 05 Mar 2024 18:11:23 +0000
ROA not after:            Tue 04 Mar 2025 18:16:23 +0000
asID:                     7438
IP address blocks:        201.166.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ee:55:b9:ba:50:ce:4c:7d:f4:08:b3:51:43:fa:1f:58:2a:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Mar  5 18:11:23 2024 GMT
            Not After : Mar  4 18:16:23 2025 GMT
        Subject: CN=A2A99D370B2B6658F763C1158FB6CD8417CA17B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:ed:e9:4a:4f:6c:4a:82:db:43:d4:b1:c8:
                    ff:45:68:64:37:1e:24:25:8c:20:5b:6f:4c:4e:53:
                    e3:bf:d8:9a:c1:9c:48:26:8f:9f:8a:ef:7a:f6:84:
                    c2:d5:0c:90:69:12:5a:a8:8d:a3:da:3a:80:dd:1b:
                    74:e2:91:b5:ae:39:2d:2e:ad:c1:54:90:b5:2b:0c:
                    8d:48:ec:7f:0f:2e:e6:9f:76:87:86:fb:3e:8d:a5:
                    8e:3d:0b:0a:a1:d7:65:16:0b:8d:fd:8a:45:95:8c:
                    6c:b8:1d:a1:40:b6:41:08:a6:0f:54:5e:35:3b:23:
                    86:05:9e:a2:02:22:82:c1:8e:97:ef:1e:dd:d6:13:
                    c6:19:bb:46:cd:5a:6a:fc:d8:0c:00:d9:14:02:4d:
                    42:3d:a8:ab:f2:6b:07:4c:8b:ad:13:33:af:83:2d:
                    94:3f:23:e0:df:47:e9:1d:d9:ec:00:dd:a9:c2:38:
                    27:42:83:b3:f0:f6:48:13:a1:94:93:65:55:21:1f:
                    8e:df:be:4e:7f:5b:f0:ec:de:8a:7d:66:ea:cb:78:
                    c7:47:64:f4:88:28:ab:cb:63:03:6e:9b:30:36:b0:
                    75:04:3b:3c:f9:65:d8:4c:f7:83:45:ae:a5:72:55:
                    9a:bd:d7:4e:02:b3:46:e4:fe:dd:d9:cc:0a:d0:82:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:9D:37:0B:2B:66:58:F7:63:C1:15:8F:B6:CD:84:17:CA:17:B9
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230312e3136362e3132382e302f31382d3234203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.166.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:e2:60:f8:21:4b:b2:7d:e7:ec:f9:26:e9:00:b7:6e:5e:
         10:19:5f:8c:e5:06:92:e7:f8:50:d3:c8:db:6f:8d:eb:c8:dd:
         28:b8:a0:df:7e:f0:9b:20:ea:03:e1:e0:b2:1c:72:09:62:7f:
         44:00:54:56:20:f1:c6:51:9c:b8:31:37:fa:01:67:c2:7d:69:
         ae:e8:eb:79:ed:8d:f8:f9:80:49:87:e2:ab:fc:4b:02:ca:6d:
         12:9c:e0:1e:0b:75:a5:c2:6a:fc:6d:69:1d:2d:24:83:9d:c9:
         c8:37:80:29:8f:3d:09:fc:72:19:b1:e1:f3:27:65:6b:c4:e7:
         1e:28:9b:be:09:32:21:4a:bc:bf:ff:39:64:24:7b:df:27:bb:
         41:2b:78:fd:ba:24:9e:53:8c:67:a0:0d:48:6e:c7:07:5a:0c:
         b9:32:27:dc:48:26:18:1d:42:61:b8:de:ca:9f:27:72:8e:be:
         09:b4:f4:cf:16:5a:f1:bc:03:3c:7b:4b:3b:28:3a:12:13:6b:
         4b:f2:52:77:45:60:72:c7:cb:fb:d9:70:e5:86:6c:69:1e:48:
         b2:02:3e:fa:83:ab:d4:fe:e3:95:a9:a8:b5:82:31:b8:63:9e:
         97:da:9b:81:5c:c8:23:d3:ee:e1:bb:87:71:81:2e:75:26:8a:
         e0:f0:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org