Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31342e302f32342d3234203d3e20323634373232.roa
File:                     3230312e3231372e31342e302f32342d3234203d3e20323634373232.roa (raw, json)
Hash identifier:          8PBlDKYiktNY3EUs7DzhQ2wSWgpykBuaJmspTpdL1/4=
Subject key identifier:   68:46:43:FC:5C:B6:6B:9A:95:82:5D:F1:AE:FB:E7:5F:8A:43:82:95
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       708AB60CCCA6DC48BC2BB6F381AB707188967CE5
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31342e302f32342d3234203d3e20323634373232.roa
Signing time:             Tue 05 Mar 2024 18:20:37 +0000
ROA not before:           Tue 05 Mar 2024 18:15:37 +0000
ROA not after:            Tue 04 Mar 2025 18:20:37 +0000
asID:                     264722
IP address blocks:        201.217.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8a:b6:0c:cc:a6:dc:48:bc:2b:b6:f3:81:ab:70:71:88:96:7c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:37 2024 GMT
            Not After : Mar  4 18:20:37 2025 GMT
        Subject: CN=684643FC5CB66B9A95825DF1AEFBE75F8A438295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:36:4a:c5:e8:b7:77:a4:2f:5e:19:f2:11:80:
                    e8:94:80:72:55:25:33:66:7d:c8:d4:6d:79:89:8a:
                    d2:1a:53:8c:44:39:0f:85:60:77:79:ee:b5:0f:8a:
                    9a:c9:8a:09:02:f9:7e:11:ad:94:3a:f9:f2:cc:5e:
                    a7:04:9c:ed:20:c6:7f:a9:b4:b9:86:12:d2:3a:bc:
                    3c:b2:16:80:bd:ee:ec:90:8b:b8:48:f5:8a:ed:67:
                    59:73:42:df:eb:00:c1:f1:0a:dc:e7:71:a5:62:a9:
                    e5:f9:73:f5:68:1d:da:0b:57:f1:e1:9a:a6:c3:b7:
                    e2:c9:49:a7:76:f9:fc:be:50:08:0a:7b:da:2b:e5:
                    85:eb:c8:13:10:85:85:16:8a:15:1c:f6:4e:86:1d:
                    51:f6:75:e8:1b:1d:ed:db:ab:2d:b0:e3:86:15:02:
                    f8:fb:50:db:ce:cd:4b:e1:f5:00:49:24:1e:d4:a0:
                    20:1e:6c:7d:44:a1:da:95:d6:21:0c:fc:3e:00:b8:
                    d8:ec:66:23:26:38:9c:7e:48:f7:29:06:2e:5d:95:
                    14:e1:11:50:2c:54:37:49:b1:44:f4:35:c6:e7:1b:
                    d7:29:51:37:84:d1:60:84:cd:92:9f:99:02:b4:c0:
                    57:83:36:be:46:12:18:77:1e:d8:3f:7f:70:dd:bb:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:46:43:FC:5C:B6:6B:9A:95:82:5D:F1:AE:FB:E7:5F:8A:43:82:95
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31342e302f32342d3234203d3e20323634373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d5:c0:09:f3:5d:a9:91:bf:6c:6a:99:07:b9:10:5f:29:47:
         ce:84:5f:03:fc:17:32:12:a4:45:25:83:a2:4c:7f:07:bb:14:
         dd:0d:6b:f4:0b:4d:33:8f:5f:0f:43:81:66:be:68:8e:4c:98:
         26:e9:b7:44:b5:3b:5a:e5:8d:ea:71:b6:78:fa:f6:6d:60:78:
         80:7b:ad:2e:2b:c8:59:dd:58:fa:5f:00:de:62:01:f4:45:f9:
         54:2a:03:84:e9:3b:b2:57:17:bf:03:5a:c4:94:ea:1c:d8:a6:
         6a:4e:2a:c1:f7:e8:16:e1:46:9d:d5:bf:c9:52:b6:34:18:09:
         51:89:30:bb:30:0c:7e:88:89:a2:0c:b1:2e:fa:9e:72:b3:ec:
         e4:2c:ec:2f:5f:6e:cf:70:fb:fc:38:6b:bf:fa:7b:ba:ee:36:
         e3:61:5d:ed:9b:a4:2e:96:f2:76:05:54:a7:9d:19:36:e1:1d:
         ec:d3:c5:57:5f:33:22:47:88:d7:82:38:4a:9c:53:93:66:61:
         00:37:36:fd:aa:18:96:a9:2d:70:df:d3:e3:d6:b6:e6:a6:fa:
         f9:6f:b6:f8:70:c9:99:2c:41:93:4d:7a:6b:e5:82:2c:3f:1a:
         72:a6:96:e3:47:fc:64:ac:f9:f7:f4:02:bf:72:e5:24:9f:70:
         8a:d9:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org