Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32312d3234203d3e203238313033.roa
File:                     3230312e3232322e34382e302f32312d3234203d3e203238313033.roa (raw, json)
Hash identifier:          i7m3qpOo09ozQev6ycfdZlMKs5QTX+TifOd6vflHJjk=
Subject key identifier:   21:92:85:F3:47:F4:B5:43:38:B8:3B:57:84:FF:C7:F8:9B:0B:B5:27
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       61B593A44FED1A1697D0528E3996E0356AACFC68
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32312d3234203d3e203238313033.roa
Signing time:             Tue 05 Mar 2024 17:58:19 +0000
ROA not before:           Tue 05 Mar 2024 17:53:19 +0000
ROA not after:            Tue 04 Mar 2025 17:58:19 +0000
asID:                     28103
IP address blocks:        201.222.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b5:93:a4:4f:ed:1a:16:97:d0:52:8e:39:96:e0:35:6a:ac:fc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Mar  5 17:53:19 2024 GMT
            Not After : Mar  4 17:58:19 2025 GMT
        Subject: CN=219285F347F4B54338B83B5784FFC7F89B0BB527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b0:12:56:2b:de:a8:a1:ed:2a:b2:7b:47:c8:
                    b0:3e:af:e4:59:c6:f3:8a:bf:48:ca:15:69:15:c0:
                    81:57:3b:ad:98:51:6d:d7:90:76:ac:09:b4:a5:34:
                    1d:35:89:51:19:49:90:d5:57:d5:95:e5:1e:09:bb:
                    97:1b:d6:50:cb:34:69:c4:9e:c4:b3:99:37:ad:7b:
                    1e:dd:58:b1:bb:b5:ef:39:22:e0:7d:4a:5a:c4:0c:
                    bc:f6:25:a1:01:be:2f:95:ac:67:26:06:c6:29:00:
                    15:5b:fd:39:f3:74:ca:3f:40:cf:e1:0e:ba:61:c6:
                    5d:41:4e:6b:2c:20:a4:1f:f6:c1:d9:ff:5d:56:f6:
                    82:a8:34:89:21:9d:ab:54:1b:d5:e1:2e:0a:75:56:
                    0d:99:a4:7f:5d:60:72:47:b3:33:67:4b:4e:a4:34:
                    c4:0c:af:65:a7:03:3b:18:32:28:6a:bb:45:15:b3:
                    7d:01:15:07:47:2e:c9:42:ee:9e:ff:ff:e5:a1:5e:
                    3c:f6:e5:05:48:87:5f:e2:11:05:5b:d1:48:0c:d4:
                    53:f3:f2:bb:f3:e3:95:2f:b6:b7:f9:0d:f5:3b:80:
                    06:44:19:6b:58:d7:a6:69:9d:06:c0:48:cd:7a:ac:
                    45:85:19:67:5a:e3:64:86:1c:0b:6d:b0:85:5b:0e:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:92:85:F3:47:F4:B5:43:38:B8:3B:57:84:FF:C7:F8:9B:0B:B5:27
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34382e302f32312d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:12:0c:f4:f5:ee:8f:1b:32:5d:1e:bd:e8:a5:e8:a8:31:83:
         f8:0d:7d:3e:3b:0b:cc:c6:3d:40:70:f6:9a:8b:41:85:a5:67:
         9a:ca:08:6b:fe:1b:cc:c9:31:95:06:55:eb:f4:29:3e:c3:ef:
         d6:70:4b:06:77:de:73:9a:64:10:5c:22:fc:58:62:3a:32:cc:
         f1:fa:f4:55:47:12:61:91:c3:99:02:c1:ff:49:61:63:37:84:
         75:b2:e8:34:3a:7b:55:70:83:75:6e:4a:54:fb:b6:2d:e4:7f:
         44:cb:74:1f:74:87:67:33:5d:02:08:4a:65:82:be:49:28:b5:
         10:3c:d6:bf:05:73:44:69:f7:63:80:f5:64:eb:ab:24:13:84:
         c9:2e:3b:e7:e9:07:f0:32:39:b4:92:27:28:bb:98:88:78:b1:
         ca:75:7b:06:f1:59:f8:0d:64:76:9d:1a:de:e9:28:6d:4b:5a:
         9c:44:ba:dc:5e:5e:59:8f:dd:d2:df:24:2b:ec:14:f7:db:06:
         f4:03:ca:36:50:29:85:10:c5:67:95:67:19:5d:f7:94:d8:86:
         7e:96:51:a4:e1:f9:8b:c4:a5:06:56:9f:ac:cf:3b:e3:37:60:
         38:29:d3:41:0a:17:f3:65:0b:0b:87:23:e4:89:bb:01:b2:91:
         5e:1f:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 14:04:59 2024 by rpki-client on console-ams.rpki-client.org