Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32312e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e32312e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          MqRR6qghuGHkyFIZiPnChJ/tNhSPWmZwQoPsyCmyqmA=
Subject key identifier:   DB:55:1C:40:F8:7A:DB:F7:06:31:E0:EB:52:7F:2E:D7:EC:7F:40:3D
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       6BA0979CA235CFFD98293257D892F3D704B56552
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32312e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 05 Mar 2024 18:20:36 +0000
ROA not before:           Tue 05 Mar 2024 18:15:36 +0000
ROA not after:            Tue 04 Mar 2025 18:20:36 +0000
asID:                     27768
IP address blocks:        201.217.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a0:97:9c:a2:35:cf:fd:98:29:32:57:d8:92:f3:d7:04:b5:65:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:36 2024 GMT
            Not After : Mar  4 18:20:36 2025 GMT
        Subject: CN=DB551C40F87ADBF70631E0EB527F2ED7EC7F403D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:b4:c4:92:ad:1c:cc:ef:e1:0f:54:5c:0e:
                    74:b0:96:4d:84:bf:cd:b3:48:51:88:1c:ca:3b:43:
                    75:46:0e:b1:e5:95:cf:97:80:ce:20:ad:c8:c0:95:
                    8e:b6:03:05:8a:fa:f2:c5:42:20:ad:12:ef:84:74:
                    1b:ea:10:88:aa:3a:93:aa:f8:d7:e0:bc:ab:8b:59:
                    ac:cb:e2:ff:c7:54:ad:91:44:29:7c:8e:06:7e:6d:
                    e3:c1:04:fa:c9:a0:21:db:d5:9e:14:25:48:fe:85:
                    19:74:ca:93:8d:15:31:88:bf:72:d2:0d:a9:2b:ac:
                    ff:a0:62:25:64:1c:7d:5e:2e:84:9f:1e:a3:ce:b0:
                    ab:4e:36:18:4d:21:7a:ec:e7:77:6a:63:72:68:54:
                    3f:99:6d:56:5b:dd:27:42:4c:10:e0:37:a1:4c:54:
                    88:d4:51:b2:85:9e:c2:c3:4b:3e:37:17:65:8f:0b:
                    20:c2:77:5f:ba:57:d9:3a:12:3b:6f:18:9f:6d:20:
                    f9:09:8d:97:4a:52:83:f5:f1:21:4c:74:73:2a:6a:
                    05:1f:dc:2e:bd:ff:3e:db:89:94:47:07:cf:72:7a:
                    56:4d:39:7c:fd:b8:a5:5e:ce:78:4f:c6:10:0c:ed:
                    2e:d3:60:b6:b9:d9:06:a0:09:5d:70:98:ea:50:ca:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:55:1C:40:F8:7A:DB:F7:06:31:E0:EB:52:7F:2E:D7:EC:7F:40:3D
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32312e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:e8:79:d0:93:c1:b5:ba:c9:82:1d:2d:6e:2d:7b:82:ea:
         c6:de:2d:d4:04:52:34:9f:9d:3a:78:f6:d5:38:22:47:59:39:
         cf:08:e8:e3:0e:56:95:a2:7d:78:ae:7c:c0:c8:e7:3c:fa:44:
         25:fc:fc:29:b9:c7:34:73:1a:04:9d:6a:31:5b:75:43:3e:29:
         b6:e8:e0:a9:42:59:fa:d0:90:ba:7f:77:1a:82:f5:0f:33:bb:
         82:91:5a:70:72:f3:70:5a:87:cd:77:97:44:28:fc:35:49:85:
         01:ba:c3:b0:9a:42:3c:a9:84:30:45:8a:d3:52:fb:40:56:56:
         12:f9:89:e1:b3:65:6c:4f:3c:29:33:a6:9e:25:07:dc:c8:23:
         88:59:ed:bf:6a:6f:ca:1e:ff:ab:36:eb:11:ba:cb:d0:75:01:
         70:e4:d6:f9:a2:a8:37:92:7a:37:ff:ea:f6:8b:05:e9:32:fd:
         f9:d3:19:55:d8:9c:bc:19:9d:f0:6f:f7:74:d4:33:82:e0:23:
         f2:f5:f5:e4:c5:eb:a2:3e:26:48:c8:8c:91:d8:f2:94:bb:c8:
         a9:47:7d:2f:a4:5c:f1:be:0d:dc:52:af:f5:8c:19:65:da:42:
         63:7a:65:d8:50:a5:07:ff:dc:12:0e:d4:b4:6d:d1:e8:3c:22:
         2b:73:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org