Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e382e302f32322d3234203d3e203237373638.roa
File:                     3230312e3231372e382e302f32322d3234203d3e203237373638.roa (raw, json)
Hash identifier:          v7xSjhCtv1bSMtF/3G8k2EpCwanU8GkrRwfyNXoYLN4=
Subject key identifier:   02:CD:FA:E1:1B:60:69:96:CB:5F:07:6F:38:23:40:B5:F4:0C:D0:B9
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       6BA3E56F8E59A15339B219D1BD035EFC72D82C9B
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e382e302f32322d3234203d3e203237373638.roa
Signing time:             Tue 05 Mar 2024 18:20:39 +0000
ROA not before:           Tue 05 Mar 2024 18:15:39 +0000
ROA not after:            Tue 04 Mar 2025 18:20:39 +0000
asID:                     27768
IP address blocks:        201.217.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a3:e5:6f:8e:59:a1:53:39:b2:19:d1:bd:03:5e:fc:72:d8:2c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:39 2024 GMT
            Not After : Mar  4 18:20:39 2025 GMT
        Subject: CN=02CDFAE11B606996CB5F076F382340B5F40CD0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:f2:31:46:bb:e7:eb:73:5e:bf:d9:24:a1:
                    ee:26:85:88:2d:b6:35:b9:8e:1f:93:11:c2:dc:62:
                    77:1b:8d:25:44:25:62:dd:c1:0d:c4:17:49:72:0e:
                    94:ee:9d:aa:b3:23:35:37:7f:f5:eb:33:3b:58:35:
                    e7:09:6b:61:a9:30:f1:8a:5d:f4:18:f9:23:a0:97:
                    05:00:74:6b:5f:74:78:35:14:c3:29:f9:cc:34:29:
                    0c:9c:1c:2a:c5:f0:a5:27:e6:a1:67:09:b0:04:18:
                    2f:66:e8:91:37:37:8b:ea:79:8a:2f:72:f9:a7:a6:
                    bd:1c:4c:be:65:75:c8:3b:f4:80:05:f1:b8:ae:d4:
                    d3:e6:5e:d5:07:e0:61:ed:a3:df:bc:0b:a2:af:55:
                    b1:f0:1c:8b:57:f3:e5:d7:84:51:12:7f:c5:88:50:
                    5a:b3:83:87:57:f8:23:d1:b1:21:7e:2c:59:c9:13:
                    0b:86:23:bf:de:19:9c:4c:0c:5e:8a:7c:fc:f5:1d:
                    d1:e5:2c:75:2e:78:20:81:9a:8e:84:55:70:09:a3:
                    84:a6:78:d6:3f:f9:cd:8c:87:d4:88:56:87:09:5b:
                    8d:10:5e:44:8e:2f:e7:33:31:bb:81:f9:61:49:09:
                    26:96:92:20:ca:cc:a6:31:3e:17:9a:cc:c9:60:ed:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CD:FA:E1:1B:60:69:96:CB:5F:07:6F:38:23:40:B5:F4:0C:D0:B9
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e382e302f32322d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:73:12:e8:fc:66:f8:2b:2e:40:d2:97:a0:c5:da:1c:f0:
         ac:78:0a:53:75:82:a6:5b:29:4f:6f:23:33:0a:84:64:22:22:
         f7:bd:cb:99:f6:12:07:c0:d1:9a:27:5e:39:c3:60:ac:f3:7d:
         c3:3e:b4:e3:3f:ae:6b:03:c8:4a:7c:75:5a:e8:d2:ad:65:b8:
         01:02:8b:55:fe:85:79:f1:21:af:d4:20:c2:02:82:3b:7b:68:
         93:f4:26:72:b8:28:d8:41:ad:d1:20:b8:8a:3f:25:6b:59:c7:
         7c:d5:3b:a6:75:2b:39:83:73:d7:fc:39:9f:c4:5c:17:49:6d:
         6a:40:b1:b5:81:b7:74:03:4d:67:c1:45:e1:c1:b5:dd:81:08:
         ee:3c:42:c0:79:cc:8b:24:81:99:a7:f8:96:a6:16:1b:aa:fb:
         51:81:c1:88:ab:92:aa:14:24:4f:35:e0:e6:3b:ba:c5:01:69:
         ae:16:24:0e:27:5e:0f:ab:d2:21:e3:15:80:07:a4:8b:9d:56:
         aa:3d:0e:18:1b:07:0f:8f:4a:2e:19:0b:e2:16:80:ec:a9:18:
         bb:d8:32:75:b6:ad:f6:62:53:c4:3b:27:65:29:ed:85:18:51:
         eb:19:53:27:78:59:ad:36:e0:b5:b2:8a:8e:07:ba:82:40:e9:
         e1:c4:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org