Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa
File:                     3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa (raw, json)
Hash identifier:          P6YEdAAS7XMEvVxZAmCTwjPYio5U/GYB6h2o19r3kBg=
Subject key identifier:   AB:0F:CA:47:51:09:39:C3:98:57:AA:75:7E:35:C2:F4:80:1B:CB:B7
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       58B69D776B851E83B740468D6CB38ABC6B501A4A
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa
Signing time:             Sun 06 Oct 2024 17:30:00 +0000
ROA not before:           Sun 06 Oct 2024 17:25:00 +0000
ROA not after:            Sun 05 Oct 2025 17:30:00 +0000
asID:                     264845
IP address blocks:        201.219.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b6:9d:77:6b:85:1e:83:b7:40:46:8d:6c:b3:8a:bc:6b:50:1a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Oct  6 17:25:00 2024 GMT
            Not After : Oct  5 17:30:00 2025 GMT
        Subject: CN=AB0FCA47510939C39857AA757E35C2F4801BCBB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:39:b7:2f:ee:fc:fc:fb:d7:e9:d3:22:d0:
                    af:a9:8d:d8:d4:b4:db:dd:92:40:26:d3:7e:1a:cc:
                    78:3e:c5:31:3f:a1:79:20:e5:f0:a9:9b:a7:10:b6:
                    62:14:5f:10:56:b9:6d:db:0a:4b:85:8d:01:ac:57:
                    92:88:c5:99:89:32:a0:53:9a:bf:c0:24:d7:13:e4:
                    83:31:74:31:a2:db:c5:7a:f5:91:ba:16:3a:ef:58:
                    da:da:84:d9:88:24:d1:ee:bb:a8:0c:4d:bb:fe:c2:
                    a3:39:ef:53:e0:da:00:75:a7:be:5f:2f:f1:20:96:
                    c9:a2:6a:2e:3f:fe:c5:ee:f5:ed:42:6a:c3:dd:8d:
                    f7:23:78:1e:8f:b1:d8:01:12:43:4b:0a:ac:3f:e6:
                    78:d1:ab:e3:f7:54:92:24:2d:ac:9d:be:77:f2:8a:
                    98:67:91:7c:20:04:cf:a1:e6:5e:c1:c9:fa:45:22:
                    30:21:c3:d0:75:c6:d0:61:7a:35:af:57:b7:63:86:
                    07:a0:17:27:d5:40:6e:87:93:ee:29:db:30:e2:7c:
                    0e:29:b6:28:f8:fc:f3:6a:78:83:f6:42:4f:28:0d:
                    23:54:cf:55:d6:86:74:cb:9b:5d:f1:1d:b6:10:c6:
                    f3:92:94:5d:39:14:d0:a0:51:b3:ec:3d:bb:3b:f1:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0F:CA:47:51:09:39:C3:98:57:AA:75:7E:35:C2:F4:80:1B:CB:B7
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32322d3234203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:24:da:6a:4d:7b:a9:fd:36:8e:d5:78:29:79:42:fd:2a:53:
         1c:62:ea:d0:d3:54:3d:ce:0f:c9:09:cb:d8:5b:d6:b2:02:3c:
         77:89:3d:5c:fe:e3:7a:62:4e:6b:b8:df:2f:c6:b2:7d:b6:58:
         38:76:60:b9:1b:7b:35:7a:76:db:e7:3f:34:47:8b:33:ba:6e:
         4e:73:77:91:b9:4d:8b:09:ac:d6:a7:85:7c:12:67:9f:e0:de:
         8e:ee:d7:d3:3d:71:7d:ab:c2:48:0d:62:c1:b3:84:3e:d7:a4:
         d4:ac:e8:47:75:61:40:60:7f:b0:c1:50:b4:9c:58:a2:b1:10:
         dc:b5:8f:04:05:2f:8f:c1:09:57:76:57:a7:0a:c9:13:d9:21:
         b2:cb:eb:ac:0b:d1:30:89:69:fa:72:da:c0:1a:b9:0f:e8:f6:
         c9:15:35:cc:b0:3d:5d:fe:54:1c:6f:21:9f:4d:39:82:4a:dc:
         10:a0:ce:df:97:75:41:13:23:dd:5b:de:84:a4:b5:49:ca:e1:
         4c:80:51:6e:be:55:5f:6b:4e:a4:b9:8b:8e:c4:80:b0:93:dd:
         f4:72:27:4d:8c:9d:da:2e:c3:9e:e6:ce:77:81:22:2c:b0:16:
         cd:be:45:e5:58:1b:2a:d0:20:a3:c3:ed:59:be:b8:20:3b:25:
         c9:4b:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org