Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32342d3234203d3e203532333238.roa
File:                     3230312e3135392e3231382e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          1tyma66GOvmIJ7CHQ8ZF5p9gwc41dNd28vAV421ZZAQ=
Subject key identifier:   FF:4C:BD:2A:0F:46:2E:D6:35:EA:F0:22:03:EB:BD:D6:77:08:2E:58
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       33951911755C1B3002EB2772DEF8184556C48B9E
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:32 +0000
ROA not before:           Tue 05 Mar 2024 17:39:32 +0000
ROA not after:            Tue 04 Mar 2025 17:44:32 +0000
asID:                     52328
IP address blocks:        201.159.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:95:19:11:75:5c:1b:30:02:eb:27:72:de:f8:18:45:56:c4:8b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:32 2024 GMT
            Not After : Mar  4 17:44:32 2025 GMT
        Subject: CN=FF4CBD2A0F462ED635EAF02203EBBDD677082E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:0c:52:bc:62:48:38:2b:cd:24:af:e3:d7:
                    e2:f9:4a:7f:25:31:e5:76:a6:c5:b9:e0:63:4c:d5:
                    23:7b:3a:6d:8d:8c:86:f0:08:04:c8:a6:a1:42:59:
                    3c:1b:dc:9f:66:95:72:42:b7:99:e2:bc:f1:fe:b1:
                    1c:58:d0:32:d0:76:b7:46:a7:51:36:0f:ef:2b:dd:
                    27:9a:86:6e:13:0d:72:50:50:b3:25:75:cb:df:4f:
                    d1:85:37:44:41:54:8e:93:18:70:23:80:5b:20:a8:
                    03:7c:a6:d9:e6:2c:3f:41:e4:be:1e:1c:60:db:9a:
                    6f:9d:c1:ad:82:0e:0e:cc:72:8f:1d:7e:4b:ed:e7:
                    34:57:99:9c:5f:48:9f:82:09:7b:14:34:9f:d8:19:
                    88:9d:17:a4:ee:03:84:eb:f5:34:e2:dd:55:b1:32:
                    ee:d3:2d:f0:27:e1:0b:49:36:96:8d:13:1d:dc:4f:
                    cf:f3:d6:d0:90:5e:41:5a:72:32:12:d9:3e:14:a0:
                    85:d8:62:7e:f1:86:29:72:43:27:0e:48:58:53:fb:
                    6f:76:0a:10:c5:6a:fb:7a:0b:0b:d6:a4:ce:82:ac:
                    da:49:46:57:3b:ab:2a:26:2a:de:85:9d:a2:d4:1f:
                    bb:54:92:1c:59:86:9d:e2:ee:08:89:89:3a:c0:ec:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4C:BD:2A:0F:46:2E:D6:35:EA:F0:22:03:EB:BD:D6:77:08:2E:58
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ea:1e:11:ca:50:37:48:e8:b0:44:f3:6d:06:ce:31:75:0d:
         f7:b7:2d:a1:68:ad:bb:67:ff:ba:88:a1:c0:a3:10:53:92:d5:
         67:0e:48:4c:81:85:62:c4:ab:93:0c:66:68:f3:8f:26:7c:6b:
         94:f2:15:40:09:df:47:11:0e:01:c9:9e:de:41:c3:36:d5:a0:
         14:ac:b4:ec:e5:d3:6e:35:7e:99:0b:0f:03:8b:16:11:78:b6:
         44:7e:d8:7e:f8:2e:41:2e:3e:fc:f3:03:de:4a:0a:50:ff:c4:
         00:d4:c8:39:ef:64:ab:b7:e0:9a:26:09:58:28:b6:f7:5e:3d:
         9f:04:4d:e8:7e:75:7a:8b:bd:3f:76:3c:36:22:10:7c:e2:c6:
         2f:b2:26:d7:94:e0:7c:33:e1:38:d6:62:aa:4b:cd:35:8f:9c:
         0c:b4:c4:19:96:df:e2:11:1b:2e:3b:bd:5e:d4:77:b4:47:9c:
         09:17:cb:8e:0a:03:b5:03:a6:a4:49:b5:1d:72:2e:a8:3c:51:
         95:a4:35:97:31:3a:0c:28:bf:8e:5f:4c:95:6b:d6:1d:06:42:
         0e:02:53:fc:98:5f:f5:ea:47:fb:a8:af:82:c2:cc:34:4b:77:
         2b:04:bd:77:a0:bc:73:ee:f6:bd:7d:eb:a8:d4:62:28:12:26:
         be:6c:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org