Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa
File:                     3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          PXfbS18XhrHzaXzQMEb74DR9F00c+XjVtuPDZxWlrNU=
Subject key identifier:   80:4B:97:16:F1:40:FF:5F:93:0B:A2:8A:F0:45:08:17:59:DC:07:79
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       4C17D1AB0DB61D406273586E9F8D85F587AF1620
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:22 +0000
ROA not before:           Tue 05 Mar 2024 17:39:22 +0000
ROA not after:            Tue 04 Mar 2025 17:44:22 +0000
asID:                     52328
IP address blocks:        201.159.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:17:d1:ab:0d:b6:1d:40:62:73:58:6e:9f:8d:85:f5:87:af:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:22 2024 GMT
            Not After : Mar  4 17:44:22 2025 GMT
        Subject: CN=804B9716F140FF5F930BA28AF045081759DC0779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:51:41:42:4c:2c:e5:8f:53:c5:d3:2f:a0:
                    5c:51:6d:8b:88:b9:c8:7a:e2:4f:73:3d:dd:d0:d6:
                    ae:27:29:0a:c7:94:f8:4d:c1:c9:cf:72:3f:38:13:
                    91:79:a9:84:5f:92:4b:cc:44:24:64:3e:aa:d4:b4:
                    e2:ac:e5:25:8e:9d:af:68:d4:76:b2:cf:0e:71:fb:
                    41:b1:1d:ff:a1:00:2f:30:dc:f2:64:48:be:d7:d4:
                    b0:7a:a0:41:72:f1:12:d1:94:99:bc:cf:f9:05:7b:
                    b5:24:ab:af:01:12:6c:06:86:cb:67:db:da:ff:da:
                    f5:4c:d7:61:d6:ce:21:61:08:03:3e:8e:b2:04:5c:
                    9c:01:7e:d9:03:13:0b:0e:9e:58:bd:f7:5c:98:97:
                    87:92:65:e9:46:66:b0:53:77:f9:be:82:78:95:8e:
                    dc:24:2e:a0:34:75:d1:5d:19:6b:e8:25:41:16:3b:
                    48:90:57:1b:10:02:44:f2:b4:63:48:88:09:53:c0:
                    71:c9:82:d1:f4:a9:ae:9c:23:cd:5a:76:f7:0e:8f:
                    8c:24:ab:d0:31:3d:76:3a:e8:ff:96:79:29:f3:2d:
                    17:25:f8:ec:eb:87:6d:e3:bc:eb:fc:8d:4a:3d:f5:
                    e8:ae:6c:78:c6:f8:56:8a:9e:4f:a1:bd:9c:ad:15:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4B:97:16:F1:40:FF:5F:93:0B:A2:8A:F0:45:08:17:59:DC:07:79
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:20:71:99:25:31:c6:22:af:60:1b:4d:71:ee:6b:e9:90:
         8f:2d:4c:ac:06:48:52:88:3a:9c:bf:49:09:bc:dc:ae:2b:af:
         18:c7:73:1a:2e:ae:6d:6c:73:da:d4:c5:55:85:67:26:6f:7a:
         3a:13:be:00:b8:9a:8d:c2:78:0f:65:ee:4a:3c:05:58:44:9e:
         76:9f:8f:e0:af:6c:5a:ba:f7:86:cc:78:6d:d7:d0:98:ec:f4:
         a9:68:79:c9:15:d3:37:3e:22:53:ea:83:5e:ca:2c:63:f8:3a:
         1f:aa:f9:af:73:0c:4b:ff:3a:7d:8f:17:5e:a8:b8:81:7f:93:
         cd:5d:02:63:26:28:d2:06:fe:d1:43:db:69:c8:10:f4:68:38:
         91:4d:92:52:65:f7:65:ad:fd:7c:01:21:52:ab:53:99:76:a8:
         af:d3:49:0a:97:79:a9:a2:7a:1f:90:7f:0f:08:5d:06:6e:db:
         59:7b:ae:84:4b:21:93:5e:ef:ad:d2:1c:e3:b7:b3:01:83:95:
         6f:8e:06:27:e9:1b:4d:a2:92:7c:1a:04:48:89:3d:dc:1f:cd:
         ec:6f:62:23:b5:50:3e:47:02:fa:b4:e3:91:84:90:10:89:0a:
         88:e9:0e:f4:2b:5e:a8:5e:c0:82:bc:fd:84:82:d2:10:6d:8e:
         d3:06:26:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org