Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/3230312e3133302e38322e302f32332d3234203d3e2033353439.roa
File:                     3230312e3133302e38322e302f32332d3234203d3e2033353439.roa (raw, json)
Hash identifier:          zrGHAw08QzwYganLSlKAis/GuXF1fFi3EBhwJJ7i5pM=
Subject key identifier:   70:D4:94:8D:34:55:8C:3D:B2:BD:6D:C6:FE:D2:93:86:CF:B1:54:86
Certificate issuer:       /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial:       3FB8155DF11E0BA2FD1EF81093B3EDA1B46C6D48
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/3230312e3133302e38322e302f32332d3234203d3e2033353439.roa
Signing time:             Tue 05 Mar 2024 18:01:50 +0000
ROA not before:           Tue 05 Mar 2024 17:56:50 +0000
ROA not after:            Tue 04 Mar 2025 18:01:50 +0000
asID:                     3549
IP address blocks:        201.130.82.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b8:15:5d:f1:1e:0b:a2:fd:1e:f8:10:93:b3:ed:a1:b4:6c:6d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
        Validity
            Not Before: Mar  5 17:56:50 2024 GMT
            Not After : Mar  4 18:01:50 2025 GMT
        Subject: CN=70D4948D34558C3DB2BD6DC6FED29386CFB15486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bd:c7:2a:d9:76:a3:96:6c:5c:d5:2b:b1:b7:
                    06:de:4d:b8:f4:ce:c5:d0:1c:5b:37:2c:77:e5:a8:
                    97:02:af:cf:01:28:e1:6d:06:80:a0:14:7e:ac:ac:
                    fc:33:90:fb:bf:3c:19:c0:f4:71:16:bc:d4:e4:e3:
                    13:94:e9:87:80:cb:05:02:ce:1d:9c:95:ec:4a:02:
                    9e:c0:78:cf:b2:94:e7:38:ed:64:78:3f:c1:f7:8f:
                    75:b5:20:f0:b4:ad:96:90:32:e6:00:06:76:7e:44:
                    5a:ab:e5:ed:fd:fb:4d:8b:38:03:93:b4:86:cc:51:
                    fe:9a:c3:dd:f2:84:d3:87:f7:44:b2:44:94:73:95:
                    56:99:6f:d0:42:58:12:3c:3d:37:d0:03:3a:31:d5:
                    6e:54:f1:a3:0c:65:ca:c7:4d:9a:4c:23:7b:19:5b:
                    4d:cf:f0:7c:62:bb:ab:c4:65:46:8f:91:54:17:0c:
                    94:14:3a:d2:87:31:5c:48:d2:26:cb:d2:5b:d5:64:
                    42:88:7e:7e:3b:3d:43:f7:64:27:5f:80:62:47:20:
                    eb:77:c9:99:a7:18:66:2a:7c:8d:8e:34:a9:60:f1:
                    9b:23:c0:b9:18:f6:ec:3f:a9:44:ac:28:43:51:3e:
                    88:a5:54:a4:a6:5e:16:23:a3:91:7b:96:e1:36:0d:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D4:94:8D:34:55:8C:3D:B2:BD:6D:C6:FE:D2:93:86:CF:B1:54:86
            X509v3 Authority Key Identifier:
                keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/3230312e3133302e38322e302f32332d3234203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:05:fa:34:d8:cb:a5:53:76:a1:2e:9c:b9:8a:19:1e:e0:8b:
         96:76:94:6b:08:ec:28:95:5c:19:6e:48:40:d9:21:78:f4:55:
         fc:b9:d8:66:59:5f:29:c0:6b:d0:7c:98:c3:f9:5c:73:30:fe:
         e2:2f:6d:27:f4:bb:56:b6:f8:02:0c:b9:0a:76:72:a1:f1:a6:
         60:bf:cb:cb:88:96:e8:72:d9:0b:6d:81:01:44:02:0d:49:ec:
         ec:0a:3c:57:73:d2:83:c0:76:9c:ed:13:da:4a:07:56:85:58:
         65:24:5a:6e:bc:63:c0:ef:57:19:58:97:9d:0a:14:46:e4:8a:
         04:d1:36:e5:44:ba:dd:35:f4:00:bd:84:92:fd:09:bf:08:04:
         b3:f1:20:18:da:1c:fa:6f:87:1b:a7:e8:13:e9:4a:eb:aa:df:
         59:d4:b9:6c:10:ac:04:af:2e:de:46:97:95:0c:93:2d:65:6d:
         f9:ed:8b:37:54:f5:7c:d2:d6:2a:1a:11:91:d2:fd:0b:5c:0f:
         7b:fc:2d:46:1f:74:e5:80:61:2e:8a:66:74:68:09:6b:d2:5d:
         c7:6c:c5:5c:0a:9c:79:b6:18:b2:9d:d7:a3:a0:b3:df:99:6d:
         9d:ea:4c:71:1a:84:32:92:9c:3c:a1:e9:16:65:0f:a1:fe:62:
         33:19:5d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org