Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230312e3231372e3132382e302f31382d3234203d3e2036303537.roa
File:                     3230312e3231372e3132382e302f31382d3234203d3e2036303537.roa (raw, json)
Hash identifier:          NbY4rGU6XtnN4AptlbaSBC+Hkjgz953INefDsWzzeA0=
Subject key identifier:   57:33:B1:53:FC:9C:FA:99:84:2D:60:FB:34:D4:06:84:A2:06:A9:85
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       751041B7E9ADB88B30992359488CEBE51843368A
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230312e3231372e3132382e302f31382d3234203d3e2036303537.roa
Signing time:             Tue 05 Mar 2024 18:20:02 +0000
ROA not before:           Tue 05 Mar 2024 18:15:02 +0000
ROA not after:            Tue 04 Mar 2025 18:20:02 +0000
asID:                     6057
IP address blocks:        201.217.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:10:41:b7:e9:ad:b8:8b:30:99:23:59:48:8c:eb:e5:18:43:36:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Mar  5 18:15:02 2024 GMT
            Not After : Mar  4 18:20:02 2025 GMT
        Subject: CN=5733B153FC9CFA99842D60FB34D40684A206A985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:a3:43:7b:8c:9c:dc:c7:a4:5c:74:1c:5a:
                    ad:58:fc:a0:5b:43:86:b3:0b:17:d5:72:80:a7:37:
                    f3:59:38:db:3a:d8:b5:c2:7e:59:a2:1d:21:cb:cb:
                    81:5e:80:a3:75:ec:7b:04:b0:2b:6a:eb:2a:d5:17:
                    e6:1e:3c:ac:72:28:4b:6d:bd:ff:b3:3d:29:58:cc:
                    76:f5:7d:3f:63:80:b8:e9:cb:cb:eb:47:de:c6:e0:
                    43:5d:b5:1a:3d:ec:f6:cf:58:96:99:6d:41:10:f3:
                    6f:3f:1f:c9:0f:d8:ee:ec:e1:b5:e6:12:01:d4:43:
                    b7:b3:4f:79:70:66:e3:4a:0d:19:85:f7:4d:c9:d0:
                    c4:a3:5d:9a:1e:cb:20:74:69:b9:d3:67:e9:b9:7b:
                    10:82:a9:81:f0:60:81:91:26:88:a6:26:58:fe:aa:
                    8e:ee:c7:97:a8:23:0f:22:62:7d:7d:c5:be:da:00:
                    9c:ec:20:dd:08:56:47:c4:8c:20:29:ab:fb:93:58:
                    4b:67:ee:6b:1a:89:69:d5:cf:18:d5:e9:1b:11:20:
                    38:68:94:4c:3a:a5:2c:73:1c:c3:be:e1:14:00:af:
                    e7:c5:dc:04:30:be:6b:8d:13:cd:e9:14:f7:32:05:
                    57:00:e1:70:60:98:e7:db:ec:ec:71:c4:c4:bc:54:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:33:B1:53:FC:9C:FA:99:84:2D:60:FB:34:D4:06:84:A2:06:A9:85
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230312e3231372e3132382e302f31382d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8b:08:77:a9:f8:dd:b0:22:a4:58:39:2d:0e:5f:3a:c4:80:91:
         7e:17:ef:a5:1b:d6:eb:ec:a8:53:60:64:29:7f:d1:53:c2:f1:
         60:8a:cd:8a:65:f6:82:a4:2a:d3:6d:97:cd:31:fb:2d:77:93:
         d5:f8:ec:b3:2c:5a:1f:4c:f5:76:ea:35:be:6c:a6:39:ba:b7:
         8a:5e:18:b8:54:43:bd:1d:d1:ce:b2:d6:e7:e1:5f:e4:ca:e2:
         aa:20:ac:09:2e:86:c6:c1:09:02:15:6a:3b:66:25:21:b3:5a:
         f2:3f:09:1a:23:a6:b9:ac:0c:19:3a:18:e8:22:0c:70:80:7c:
         84:d4:2e:18:41:bb:ca:0f:ef:b5:49:31:f4:64:6d:a6:ce:b8:
         c1:ee:7c:14:4d:66:5b:fb:75:f0:d5:10:1e:10:ee:99:0a:61:
         8b:62:1f:62:c4:9c:e4:f4:c6:b5:15:1a:2e:88:85:66:66:7c:
         f4:3d:58:db:93:f3:d5:f1:14:4b:59:da:cd:cd:57:04:d4:5c:
         42:70:ee:2f:d8:1f:aa:68:be:5a:00:8b:8e:13:84:39:f6:43:
         89:08:92:2e:9b:49:e4:e1:31:be:ed:ac:2a:e4:96:84:12:d3:
         9b:9a:71:94:13:c8:6a:e7:8c:9d:4e:b0:ad:99:82:56:b5:cf:
         5b:08:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 23:52:42 2024 by rpki-client on console-ams.rpki-client.org