Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32382e302f32342d3234203d3e203237383636.roa
File:                     3230312e3231372e32382e302f32342d3234203d3e203237383636.roa (raw, json)
Hash identifier:          S0DW6WKWBYzKBeiIsex/iIXj3GvsWMJrqmVbQu84tjQ=
Subject key identifier:   E7:06:3F:A9:7B:77:40:53:DF:13:E3:2A:A7:6B:1D:3F:75:94:12:A8
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       31220976163B19191BE2BAA9DB585DC62B10BA42
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32382e302f32342d3234203d3e203237383636.roa
Signing time:             Tue 05 Mar 2024 18:20:37 +0000
ROA not before:           Tue 05 Mar 2024 18:15:37 +0000
ROA not after:            Tue 04 Mar 2025 18:20:37 +0000
asID:                     27866
IP address blocks:        201.217.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:22:09:76:16:3b:19:19:1b:e2:ba:a9:db:58:5d:c6:2b:10:ba:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:37 2024 GMT
            Not After : Mar  4 18:20:37 2025 GMT
        Subject: CN=E7063FA97B774053DF13E32AA76B1D3F759412A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:43:06:9d:db:66:02:f0:26:1e:14:08:ed:
                    2c:fd:bc:c8:c6:5d:00:0e:f8:42:62:00:16:f7:07:
                    65:09:51:3f:64:ef:51:0e:ef:35:1c:84:ff:20:7e:
                    ad:21:18:e1:a6:88:ef:12:5c:6b:6b:85:05:b2:62:
                    c4:8b:f2:f6:7e:e5:ce:b8:99:09:e7:55:41:8b:78:
                    df:b2:57:9a:8e:3a:19:46:43:56:f1:8f:27:ac:70:
                    da:9b:94:10:b2:c9:85:d1:e6:da:36:a7:c1:f2:87:
                    cd:67:1d:4e:6c:6f:02:75:4b:d7:35:37:3b:c5:5b:
                    20:de:e7:ea:38:1f:2f:d0:9e:26:52:e5:53:47:6f:
                    d5:a6:ca:94:19:57:1a:66:17:27:fc:76:a9:0e:a8:
                    e8:64:cc:da:dd:6f:63:58:6e:18:2f:d8:64:7d:33:
                    15:a5:df:3f:c4:37:b5:bb:a8:77:66:f0:6c:56:10:
                    de:31:19:b9:67:07:f8:43:e1:28:0f:f4:fe:32:f8:
                    07:c5:28:ab:c7:3d:7b:5a:2d:b0:a9:06:d1:77:d6:
                    11:79:d0:30:53:99:a8:ef:f0:23:0c:7c:5c:96:e1:
                    03:71:78:92:cf:7f:fc:69:5d:d7:49:a8:10:42:8f:
                    3b:6e:73:91:1c:5a:52:9f:35:ec:23:d9:51:28:8b:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:06:3F:A9:7B:77:40:53:DF:13:E3:2A:A7:6B:1D:3F:75:94:12:A8
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32382e302f32342d3234203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:57:20:02:5d:43:05:29:49:cc:0e:1f:da:16:29:6c:fd:41:
         20:7a:cd:1a:d3:56:3f:90:f8:45:65:ee:f3:0f:e0:92:14:77:
         20:4c:9e:6f:7d:ee:a6:9a:4a:08:cb:d5:15:b9:ad:d3:39:ae:
         ef:0b:eb:5e:57:7d:fd:d7:c8:c5:b7:f7:91:b3:62:a7:6c:51:
         3d:4a:ff:0f:18:d4:1a:f2:a9:bc:c1:89:00:35:25:0e:ab:8f:
         6d:f7:75:44:0f:7f:11:19:e5:47:99:c6:b8:71:a6:f9:53:04:
         8c:df:c2:17:7f:d8:6c:9e:39:c2:5d:30:2c:fe:9a:d7:c5:f8:
         be:56:56:de:30:96:45:e6:0d:97:3f:58:1f:b1:c1:fd:63:47:
         be:c4:ad:16:31:5f:c3:6c:b8:bc:f6:ec:22:96:3f:06:59:5b:
         62:a4:1c:1c:1f:47:bc:0d:f7:33:ba:b9:7a:02:93:20:33:11:
         b3:be:f4:8e:ab:b3:cc:54:7e:dd:66:e1:b0:ef:65:08:78:04:
         59:db:2d:91:14:c3:11:e5:86:30:1b:a6:0c:e9:87:1d:bd:ab:
         8e:58:7a:59:23:ba:85:77:87:8e:c2:dd:a9:bc:22:79:ba:97:
         ff:3f:51:53:8a:5a:3b:a6:fd:69:1b:45:74:98:13:bd:47:71:
         e3:69:fd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:08:07 2024 by rpki-client on console-ams.rpki-client.org