Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31332e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e31332e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          AvN0jX2b6mYdu6DNn2A6sM+c/UK94xntlnlhdoj+J8Y=
Subject key identifier:   9E:AC:E1:35:42:F4:71:A8:D2:E5:7C:AE:61:90:E2:FE:81:97:6D:86
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       7B7F96B310F3924FCE66A390D3C5D2741B441F59
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31332e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 12 Nov 2024 14:15:00 +0000
ROA not before:           Tue 12 Nov 2024 14:10:00 +0000
ROA not after:            Tue 11 Nov 2025 14:15:00 +0000
asID:                     27768
IP address blocks:        201.217.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7f:96:b3:10:f3:92:4f:ce:66:a3:90:d3:c5:d2:74:1b:44:1f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Nov 12 14:10:00 2024 GMT
            Not After : Nov 11 14:15:00 2025 GMT
        Subject: CN=9EACE13542F471A8D2E57CAE6190E2FE81976D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:a0:56:a3:db:cd:f5:0e:b0:d1:cb:a4:8d:
                    2b:43:a2:2a:b0:4f:2a:81:c0:c2:26:f8:e6:87:ae:
                    5e:f9:20:8b:24:2e:7b:09:77:fa:43:5a:ef:7d:45:
                    c1:d2:55:26:bc:68:40:a2:57:29:f0:04:b7:63:0c:
                    27:0f:29:bd:4d:e5:d0:5c:e7:48:d8:4b:53:4d:68:
                    b6:14:36:39:c6:a7:f3:76:d5:c8:da:90:19:5e:bb:
                    a9:f9:30:c5:30:2f:f2:69:45:c9:96:62:b6:3e:f9:
                    8d:b3:86:96:53:ef:70:95:95:5f:c0:26:09:e4:2c:
                    3e:a5:f2:af:09:86:f3:12:36:0e:d8:05:b5:12:0d:
                    be:f3:0f:9f:64:d6:8d:06:fc:f9:16:ba:0b:ff:ae:
                    7c:4f:0b:bd:89:2f:8f:e5:46:c1:5e:dd:e3:1f:0c:
                    cc:2e:57:6f:1a:e2:66:45:21:93:4f:80:5f:1b:a9:
                    e1:d0:bc:56:de:ad:99:c3:56:f2:0f:ce:51:90:1d:
                    e6:b3:f6:ff:94:42:df:e3:f9:ec:21:5e:e8:40:6b:
                    cf:5a:72:c7:82:58:02:02:ae:3e:9d:f4:03:0f:9f:
                    aa:9f:4e:bf:77:ab:fd:92:23:d3:0a:7b:67:74:f9:
                    15:91:5c:61:ed:21:2d:26:c1:93:db:dc:4d:9f:a6:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:E1:35:42:F4:71:A8:D2:E5:7C:AE:61:90:E2:FE:81:97:6D:86
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31332e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:41:bc:37:7f:82:d9:f7:21:60:6d:3c:ca:8c:5a:4e:80:98:
         f1:5f:dc:1a:f1:c5:78:38:8b:2e:a3:6e:da:4a:2f:90:22:a0:
         e0:0b:9a:19:f5:20:24:a5:d0:7b:58:69:1a:78:b5:01:fc:fa:
         2c:eb:75:20:e5:e1:39:4f:f1:e9:34:d8:0c:a1:70:aa:fa:f9:
         d8:b2:57:74:5b:52:b6:0e:1d:22:8e:9e:a4:e8:0b:69:c5:ba:
         25:14:b6:df:a4:ca:d2:e9:39:e8:4e:56:d4:1b:2f:04:13:12:
         65:87:48:5f:78:6e:1f:29:30:90:54:b4:21:fe:7d:32:6b:a4:
         4b:e7:82:86:18:b3:d0:e1:3e:ed:39:80:49:63:ab:b7:68:04:
         01:5e:97:70:a1:c1:b7:d3:78:f9:59:d4:c5:97:0d:cc:7e:52:
         3c:08:c9:23:db:40:a4:39:24:9d:11:fa:cb:ac:bc:be:56:72:
         9a:f8:6b:5b:2e:87:d3:38:14:7a:a9:e6:61:c0:94:e6:9b:a8:
         6c:67:c2:80:e2:72:37:7d:67:99:db:7c:65:f6:86:35:d4:38:
         cf:9a:9f:73:9b:f5:3f:a0:d6:00:b2:23:dd:9d:5b:39:bf:ac:
         d9:4b:ae:ca:4d:da:c9:6f:05:8d:6b:1d:bc:d6:44:3f:a4:00:
         f4:a4:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org