Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35322e302f32332d3234203d3e203237373638.roa
File:                     3230312e3231372e35322e302f32332d3234203d3e203237373638.roa (raw, json)
Hash identifier:          1wCGd9vQeLjJWx03eD2ElC4vMv1yWRPK3BoZkJYtzKA=
Subject key identifier:   12:FE:78:72:15:CA:2D:34:36:C5:53:02:F8:F3:6A:32:28:9E:FB:70
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       3FAEEAF2E29A9D0645D5A2C7154E75E936939049
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35322e302f32332d3234203d3e203237373638.roa
Signing time:             Tue 05 Mar 2024 18:20:36 +0000
ROA not before:           Tue 05 Mar 2024 18:15:36 +0000
ROA not after:            Tue 04 Mar 2025 18:20:36 +0000
asID:                     27768
IP address blocks:        201.217.52.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ae:ea:f2:e2:9a:9d:06:45:d5:a2:c7:15:4e:75:e9:36:93:90:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:36 2024 GMT
            Not After : Mar  4 18:20:36 2025 GMT
        Subject: CN=12FE787215CA2D3436C55302F8F36A32289EFB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:72:e3:1a:96:2d:ec:70:83:02:2b:64:f4:
                    9f:27:c6:4b:70:25:14:97:49:d0:f9:0a:41:75:e3:
                    3d:d6:07:c1:b2:17:1c:fb:ec:f9:a0:c5:24:24:8c:
                    0d:0e:86:8d:ac:ba:f5:01:76:c1:07:c4:5d:c6:bc:
                    c7:a7:56:73:9d:7f:06:86:27:e2:dc:28:38:15:13:
                    97:54:a7:2f:3a:d1:26:6f:d4:e4:6a:94:71:a6:12:
                    ac:81:ec:6f:5e:d4:24:7c:fa:41:5a:4a:91:e9:a8:
                    ea:45:52:96:0a:fb:22:fc:64:21:1b:92:3f:80:8c:
                    c1:53:4f:cc:ea:ac:04:6e:62:a9:1a:ae:16:53:29:
                    ea:33:dd:be:07:a5:7c:73:ff:c1:03:f8:82:27:dc:
                    6b:60:0a:4a:ad:0a:5b:72:56:dd:da:f4:f6:33:67:
                    53:0f:2b:7f:c1:a4:55:e3:9d:3d:30:02:0d:e6:58:
                    88:e4:4c:04:65:c3:ba:9f:04:aa:26:3c:af:53:7d:
                    4a:15:1a:0a:01:34:90:ab:f1:cd:dd:04:e3:ba:42:
                    2a:00:de:37:da:82:38:42:d2:93:01:7f:25:e9:38:
                    85:ee:4e:c7:47:29:61:ff:39:0e:24:79:4a:bd:de:
                    1c:9e:00:ef:66:29:60:fd:ed:fc:fc:99:51:4b:cf:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FE:78:72:15:CA:2D:34:36:C5:53:02:F8:F3:6A:32:28:9E:FB:70
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35322e302f32332d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:2e:b5:10:80:9a:f8:fc:c7:48:01:f6:67:a5:d6:be:cb:15:
         e5:b7:21:b9:ac:6d:20:4b:e3:3d:6e:39:b2:e7:a1:e2:bb:65:
         fd:08:71:ad:e5:08:39:c5:d8:9f:e2:e0:c5:5f:bb:c4:4e:27:
         78:5a:19:76:c5:0b:c6:e7:47:0e:80:0b:e8:e6:4d:21:fe:3e:
         8d:59:25:23:21:95:c5:d8:b1:69:d8:70:a4:51:49:3c:bb:a2:
         e5:57:a0:e4:93:4d:a7:51:68:3b:20:b9:b7:68:a2:43:31:bd:
         8b:91:21:3e:cb:76:e1:df:9b:1c:da:6c:98:0b:5b:ee:38:4b:
         5d:05:2b:7c:3d:63:94:fa:b7:f6:8c:5e:07:de:d4:f1:ac:47:
         4c:ab:b1:18:91:e3:94:ae:39:2a:12:36:cd:ed:fb:0b:10:31:
         66:a0:92:cd:fa:2c:97:70:70:44:2b:69:30:ac:c6:4b:21:b3:
         6f:d3:f1:c6:47:14:44:eb:76:7f:8a:29:ef:d5:34:87:a6:0c:
         c9:74:44:24:94:ca:aa:b6:07:d2:1e:98:bd:25:64:55:35:f8:
         b8:7f:70:7c:59:25:59:ac:45:e8:8b:6c:08:0b:72:45:d7:d0:
         1a:3b:c6:11:9e:82:af:3f:b3:f6:28:e5:43:af:15:84:ac:82:
         8f:1f:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org