Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34392e302f32342d3234203d3e203238313033.roa
File:                     3230312e3232322e34392e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          siTEO5gsIikAVYrUbSqCMiTt33SpDw9acHbCmjvai3Y=
Subject key identifier:   05:CD:E6:A6:07:D8:E1:6A:31:61:A3:77:2F:C8:BE:56:A9:FE:36:B3
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       4C2983D5C2554BEC73647A3F98D30CDB094108B0
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34392e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 12 Aug 2024 12:50:00 +0000
ROA not before:           Mon 12 Aug 2024 12:45:00 +0000
ROA not after:            Mon 11 Aug 2025 12:50:00 +0000
asID:                     28103
IP address blocks:        201.222.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:29:83:d5:c2:55:4b:ec:73:64:7a:3f:98:d3:0c:db:09:41:08:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Aug 12 12:45:00 2024 GMT
            Not After : Aug 11 12:50:00 2025 GMT
        Subject: CN=05CDE6A607D8E16A3161A3772FC8BE56A9FE36B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:48:fb:5c:b9:20:ab:bc:b5:b8:87:45:54:
                    d7:c2:70:f0:3e:de:6c:01:bd:37:82:22:cc:34:1c:
                    b4:cd:75:70:7b:e8:c7:73:e2:b6:ec:9c:80:04:c1:
                    e0:bc:42:6b:3a:32:85:09:39:63:ed:27:31:51:f9:
                    61:c5:ca:f2:3b:8e:fd:d5:61:77:b7:5a:43:e6:ce:
                    57:3b:c5:c4:59:91:de:b2:c1:ce:da:8d:14:d7:02:
                    d6:f1:7f:ab:16:57:6b:71:39:70:3f:39:0a:ed:a3:
                    7b:26:27:d0:78:17:40:e1:89:43:8c:b1:95:ee:b0:
                    b0:5d:da:3d:f9:79:8a:ed:db:a9:5d:f0:69:24:18:
                    db:25:6e:3d:80:04:6f:1e:48:d8:ae:3f:50:dd:b5:
                    9c:a0:71:7e:a5:d5:0a:07:05:2e:12:7e:54:1f:e1:
                    c8:01:7e:b0:5c:2a:8b:8c:76:0f:d5:ec:af:3e:a2:
                    62:46:40:a7:5e:83:0f:c1:26:ac:f2:68:56:a6:ac:
                    ea:78:4a:7d:8c:ec:54:df:26:69:14:5d:87:eb:c3:
                    bb:21:22:8e:60:ce:2a:b3:82:fd:9b:c7:05:ef:ca:
                    02:fb:31:24:82:75:91:24:a0:05:72:c6:ad:98:df:
                    6e:35:b3:af:27:20:10:0e:39:37:05:df:5e:6c:4d:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CD:E6:A6:07:D8:E1:6A:31:61:A3:77:2F:C8:BE:56:A9:FE:36:B3
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230312e3232322e34392e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:6c:1f:68:39:75:d3:d4:7e:e0:d5:20:25:08:36:1d:18:b7:
         79:26:c1:16:a6:55:c2:4b:12:20:09:50:d0:8d:48:6b:5f:c7:
         90:30:33:85:ed:0f:f1:12:60:b1:df:2a:84:bc:84:0e:16:41:
         45:bc:8e:09:79:b8:10:44:bf:5c:d3:8a:df:e3:7d:c7:c5:0b:
         77:b6:7d:41:9f:13:2e:e0:23:06:e2:93:ae:72:23:70:2d:79:
         3e:4b:e5:77:14:d0:00:9d:a1:51:21:46:7c:00:a1:58:e6:fe:
         6c:5a:47:ce:5b:a1:9f:7b:63:05:1f:82:7b:73:ac:37:01:51:
         a9:b2:ba:eb:83:40:6d:39:c3:04:d6:a8:37:90:ad:06:5a:d1:
         d1:c2:6a:02:4f:52:a3:1e:20:34:68:58:77:7d:13:be:47:9f:
         e2:bd:aa:10:d5:66:12:75:7e:e6:f1:c1:1a:79:80:da:2e:ba:
         42:a4:98:3a:54:bf:24:92:56:11:90:eb:b4:7d:6b:e0:b3:89:
         7a:51:9e:b1:af:d1:ff:07:62:be:25:3b:75:70:a6:8b:72:32:
         7f:12:9b:39:86:b9:d9:a8:7a:7d:c9:65:a9:ea:73:15:d8:c8:
         56:78:22:34:8c:7b:92:f5:f2:4a:94:6a:2f:e7:29:f2:f3:72:
         42:3c:c2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org