Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa
File:                     3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          eqPrevEMwhUrT/FF+gfaLWaD+0KG2oaoLIzJH2pLPdA=
Subject key identifier:   16:65:51:C0:0D:1E:1D:8C:CC:2D:7B:BD:E3:1F:3D:2B:B3:61:8F:EF
Certificate issuer:       /CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
Certificate serial:       44B91D3614BEE2B2FF30779801C90CBDE73F6813
Authority key identifier: 03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:23:25 +0000
ROA not before:           Tue 05 Mar 2024 18:18:25 +0000
ROA not after:            Tue 04 Mar 2025 18:23:25 +0000
asID:                     264668
IP address blocks:        201.182.150.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b9:1d:36:14:be:e2:b2:ff:30:77:98:01:c9:0c:bd:e7:3f:68:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253
        Validity
            Not Before: Mar  5 18:18:25 2024 GMT
            Not After : Mar  4 18:23:25 2025 GMT
        Subject: CN=166551C00D1E1D8CCC2D7BBDE31F3D2BB3618FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:62:bf:36:a4:2a:60:08:b8:c8:0b:7b:e8:3c:
                    17:95:0e:e9:2a:e1:b4:3f:8b:35:8b:51:fa:23:4b:
                    31:70:86:93:f3:84:ea:5b:fd:f5:02:4f:22:75:ea:
                    3b:b5:8b:c1:5f:fc:de:8f:9c:ea:ab:bd:09:0b:da:
                    a1:6a:86:e2:85:cf:43:78:55:29:d6:cb:49:3f:71:
                    b2:29:33:e7:10:b3:c7:a8:06:f3:37:fb:80:6d:b2:
                    ee:23:a2:c4:f5:6a:05:bb:77:0c:43:a4:24:0e:e8:
                    38:96:35:a4:f3:4a:d9:02:b5:60:b7:9e:22:2f:b8:
                    27:43:0a:7e:8c:14:2a:fa:b7:ef:21:e9:3a:fc:97:
                    09:6f:68:9f:70:85:c0:5f:7c:4c:4c:64:13:05:c3:
                    21:86:bd:2b:1a:96:a3:a7:1c:4c:cc:6d:14:5c:62:
                    89:16:b5:d0:65:17:cf:bb:85:2c:ff:7c:17:99:8c:
                    52:a7:34:22:e5:f5:e7:19:9b:b1:31:fa:cb:5e:3c:
                    f9:f9:33:ac:5f:ef:99:54:3e:03:a3:e6:2a:fb:38:
                    39:3d:9f:11:5c:af:89:bc:61:87:ae:b3:ee:20:a7:
                    8c:04:b9:08:b8:e8:c8:bb:cd:9e:f5:df:82:c7:5c:
                    22:11:4e:4f:47:1d:ec:38:a2:c6:83:08:a8:36:01:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:65:51:C0:0D:1E:1D:8C:CC:2D:7B:BD:E3:1F:3D:2B:B3:61:8F:EF
            X509v3 Authority Key Identifier:
                keyid:03:86:2A:9B:FC:B9:7E:E6:B6:2C:E1:DB:07:7E:3B:6E:AD:5F:E2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03862A9BFCB97EE6B62CE1DB077E3B6EAD5FE253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C89D43169664B9B0F42779749B8E27184BE1079D57C7A76A76D5D88108F80C/0/3230312e3138322e3135302e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:48:54:df:dc:e1:89:44:ea:de:f7:b1:0c:f6:35:10:a5:
         e8:f1:50:8e:79:ab:82:1d:ba:70:7b:e1:35:36:e6:41:ff:05:
         57:3a:85:7a:bd:a2:a1:39:27:56:ba:06:0a:2c:7e:9f:9f:89:
         d7:d6:c6:97:be:fe:35:31:12:34:ad:b0:84:05:6f:01:dd:bf:
         f3:6b:3f:25:2c:c1:7c:33:a9:72:be:c3:a0:98:51:ee:4b:0d:
         42:02:d3:c0:d5:4a:3c:06:90:e4:2d:e4:10:bb:28:55:83:5f:
         8c:d0:f6:b9:0b:0d:42:51:37:9e:92:3a:52:20:7d:13:3d:d7:
         d4:1d:41:c3:ad:fc:44:89:ad:e4:a6:14:ae:3c:ce:88:6b:ac:
         ed:11:ff:f3:e9:29:f3:46:95:44:6d:9a:5c:c5:5d:97:ac:27:
         6e:6f:0c:4e:60:cc:ba:a9:ae:b9:a3:18:04:4d:6f:61:3d:90:
         27:39:91:f7:dd:b9:37:05:e0:b5:b1:e4:44:b9:1f:c2:f1:0b:
         4c:39:fa:eb:4d:ec:81:34:87:af:c5:2e:2e:bf:33:3a:17:f1:
         cf:42:62:2a:74:09:76:ed:59:ce:60:72:ea:2c:23:98:70:fd:
         29:41:4a:5d:6b:b4:80:55:8c:54:04:7c:ab:c0:97:6d:f0:4c:
         01:2c:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org