Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa
File:                     3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          QJYeSz2NyYoa20apzd49HJPizYBZLdblQrPRYzb3PDs=
Subject key identifier:   43:CA:4F:A6:46:E0:78:6A:B1:D4:93:66:59:EE:2A:A6:F5:F1:48:FD
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       04B1D6FBFDD1E972C873ED608482874A30F60EE4
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:31 +0000
ROA not before:           Tue 05 Mar 2024 17:39:31 +0000
ROA not after:            Tue 04 Mar 2025 17:44:31 +0000
asID:                     52328
IP address blocks:        201.159.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b1:d6:fb:fd:d1:e9:72:c8:73:ed:60:84:82:87:4a:30:f6:0e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:31 2024 GMT
            Not After : Mar  4 17:44:31 2025 GMT
        Subject: CN=43CA4FA646E0786AB1D4936659EE2AA6F5F148FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:a6:7b:ea:64:e4:d4:83:89:91:e5:2b:1b:
                    18:12:56:35:8e:02:4a:eb:dc:b0:64:1f:65:79:10:
                    6e:26:a1:8c:5a:7b:8f:9b:55:39:ea:fe:7e:02:e7:
                    96:5f:d8:f3:20:4c:25:22:fa:33:0e:d8:13:e1:12:
                    eb:89:6a:cd:14:65:f0:6c:5c:71:a9:d8:5d:20:96:
                    f9:6a:0e:7b:09:45:4f:b9:af:db:eb:72:01:9e:ea:
                    97:df:30:57:76:ba:3d:94:e5:27:95:58:5c:14:26:
                    4f:c4:df:88:a2:24:a7:72:e4:0a:8d:07:a5:35:1d:
                    94:72:82:e7:ba:d0:15:95:d5:bf:70:95:65:f5:27:
                    9f:79:93:06:8c:bf:88:9f:d9:07:26:ec:9d:76:c9:
                    10:ff:13:0a:64:93:3a:32:a5:21:c3:98:b0:98:dd:
                    37:17:90:93:04:cb:3f:85:14:b8:2d:f6:bd:8d:de:
                    67:59:37:04:16:50:2c:2e:a8:f8:bf:a2:f4:d2:5e:
                    c8:35:c8:1b:ba:88:01:16:ca:29:a7:db:e6:ab:6d:
                    a5:b7:ad:e6:83:3b:ed:b4:72:b4:31:cd:69:5e:7b:
                    df:ab:c4:72:1d:78:af:b6:90:b7:ae:1e:2b:a6:15:
                    e1:67:09:23:38:99:66:89:60:96:c5:ef:38:6e:4f:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CA:4F:A6:46:E0:78:6A:B1:D4:93:66:59:EE:2A:A6:F5:F1:48:FD
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:97:70:b0:36:e1:da:cc:71:39:38:d2:34:5c:e5:d1:1b:
         20:c5:ef:bb:5c:b4:2e:e7:ac:67:6f:41:0d:4e:af:d0:d2:d5:
         f0:9e:90:0f:ca:21:a8:5e:ef:e4:54:40:3a:b8:e3:d6:f7:12:
         55:d9:ff:4a:ae:b7:8d:cf:5c:05:9c:7f:ab:bb:ef:7b:b6:3a:
         b8:6e:08:87:6f:61:5c:00:4f:13:16:c3:c7:f0:5d:a8:fe:70:
         b2:85:b3:f2:1f:21:fd:f1:c9:79:2f:f4:02:ae:99:85:3c:ba:
         e2:56:9a:9b:90:8c:21:41:3f:21:1c:7d:b6:85:76:69:41:45:
         a9:d2:98:09:75:f2:28:c8:5a:1a:d5:ec:e4:5d:43:7f:26:87:
         b5:6f:8c:3f:6c:70:fe:16:aa:5a:b3:2d:1b:46:1b:d8:ba:34:
         b6:74:b0:94:66:fd:9f:bd:c9:53:49:ab:ef:c8:88:06:a5:af:
         9c:0e:8c:05:87:19:03:06:59:ad:59:d8:2c:c3:4f:10:62:ac:
         06:28:3b:3c:4f:89:f3:56:55:3c:ac:37:fe:26:64:c2:a8:dc:
         83:d4:d5:f3:91:80:32:a0:38:f2:48:ea:2c:b6:cf:39:34:ea:
         8c:80:ca:4e:b7:96:15:b1:b7:69:f1:5f:c9:64:e9:6a:b5:e8:
         c1:69:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org