Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35312e302f32342d3234203d3e203237383636.roa
File:                     3230312e3231372e35312e302f32342d3234203d3e203237383636.roa (raw, json)
Hash identifier:          Fg7obT/illhZUm/LS6O9hw84LEbjq5DGpJjovBm9ebc=
Subject key identifier:   2F:5F:A3:82:47:D4:9A:B8:1B:1F:63:D6:09:F5:A7:B9:A6:1C:C2:82
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       1A96543D2422CC344DDE2D0DE98936D792ED98D5
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35312e302f32342d3234203d3e203237383636.roa
Signing time:             Tue 05 Mar 2024 18:20:38 +0000
ROA not before:           Tue 05 Mar 2024 18:15:38 +0000
ROA not after:            Tue 04 Mar 2025 18:20:38 +0000
asID:                     27866
IP address blocks:        201.217.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:96:54:3d:24:22:cc:34:4d:de:2d:0d:e9:89:36:d7:92:ed:98:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:38 2024 GMT
            Not After : Mar  4 18:20:38 2025 GMT
        Subject: CN=2F5FA38247D49AB81B1F63D609F5A7B9A61CC282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:5a:6c:0b:3f:24:96:13:04:5c:5b:5a:a6:
                    ea:51:df:3d:a2:6a:f8:06:b9:e4:d5:d3:2c:80:4a:
                    91:ac:2a:e7:a7:f1:b7:d6:94:22:a5:97:c0:d2:86:
                    32:c2:1d:22:a9:da:24:34:2e:8f:71:34:da:69:c5:
                    1e:1e:e8:16:80:aa:85:79:18:08:fc:cb:73:77:28:
                    6b:6f:74:b6:33:b7:bb:50:a5:ac:41:0e:ce:df:8d:
                    eb:d4:7d:a6:68:e4:88:18:20:a7:12:b1:e3:32:75:
                    aa:a4:4e:23:75:18:98:7a:cd:0a:b7:9e:dc:89:b1:
                    46:af:b6:85:ae:23:ba:c8:f8:5b:63:f4:bc:34:82:
                    95:3f:79:99:cc:44:d4:aa:bd:f9:76:92:bd:f1:5b:
                    dd:ab:d3:95:44:5a:78:df:d3:8b:e0:1a:a1:db:8c:
                    49:97:4b:70:7e:67:b0:f0:f5:53:4c:12:2a:d8:d1:
                    d6:5c:53:9e:d5:0c:0a:0e:20:1e:77:1b:6e:12:4a:
                    34:b3:80:3b:04:6e:c5:e4:d4:1d:0f:73:5f:3c:af:
                    29:80:55:00:2c:29:e2:95:eb:fd:c7:18:c0:9f:d7:
                    f8:74:88:cf:3d:ac:e3:22:4a:3d:d1:3d:7e:11:72:
                    eb:fd:ca:95:74:8a:05:3c:22:ea:33:47:a6:d5:eb:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5F:A3:82:47:D4:9A:B8:1B:1F:63:D6:09:F5:A7:B9:A6:1C:C2:82
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35312e302f32342d3234203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:df:87:cb:33:1f:37:a5:74:dc:11:1e:83:d2:27:85:85:
         41:27:9a:c6:8e:82:09:95:cf:80:1a:9c:7f:ab:52:8f:7f:e3:
         87:45:fb:9f:6e:ea:f3:6b:ac:8d:c4:d0:4d:0e:7d:84:c4:93:
         37:75:3e:de:d9:28:bf:fe:77:32:91:4d:f8:61:ae:64:41:ea:
         f4:2b:25:25:30:fa:1b:d9:ac:c5:4f:74:9f:86:7c:31:d3:20:
         73:99:3f:cd:c4:8d:95:8b:83:ae:ff:9c:05:32:88:fd:53:9c:
         e4:17:fd:3a:6f:d8:9e:83:54:6e:80:19:c4:00:7b:42:fc:43:
         1b:7b:10:e2:dd:77:81:06:85:40:d1:b7:54:cd:08:56:1f:60:
         4b:da:6c:71:c8:19:32:62:76:6b:a4:4e:7e:f7:13:4d:06:54:
         88:a1:a2:ca:aa:b5:44:3f:9d:46:90:7b:e5:af:5b:41:f5:38:
         48:0b:30:ce:cf:23:3c:61:87:88:61:e8:cc:5d:b4:28:7e:0d:
         98:44:8d:38:b3:02:45:01:e5:4f:05:88:08:08:c0:62:23:71:
         72:fd:9a:59:7e:b8:59:0b:35:22:7f:2c:bc:78:06:d3:62:11:
         fc:d9:3a:9f:b1:3f:25:26:d6:17:55:3f:87:eb:1a:53:bc:79:
         bc:6c:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:08:07 2024 by rpki-client on console-ams.rpki-client.org