Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230312e3233382e3132382e302f31382d3234203d3e203237363638.roa
File:                     3230312e3233382e3132382e302f31382d3234203d3e203237363638.roa (raw, json)
Hash identifier:          GWtFcK5krXLrO6gpulGZCALsmgdhA59ALBN7J537RjE=
Subject key identifier:   3D:7D:82:66:D4:8F:69:F4:48:70:DE:FC:AC:AE:FE:7D:2A:9E:47:9C
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       14CBDEE674C5C8F0424A8B8DEF227C466DDAB603
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230312e3233382e3132382e302f31382d3234203d3e203237363638.roa
Signing time:             Tue 05 Mar 2024 18:21:39 +0000
ROA not before:           Tue 05 Mar 2024 18:16:39 +0000
ROA not after:            Tue 04 Mar 2025 18:21:39 +0000
asID:                     27668
IP address blocks:        201.238.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cb:de:e6:74:c5:c8:f0:42:4a:8b:8d:ef:22:7c:46:6d:da:b6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Mar  5 18:16:39 2024 GMT
            Not After : Mar  4 18:21:39 2025 GMT
        Subject: CN=3D7D8266D48F69F44870DEFCACAEFE7D2A9E479C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:e2:d4:2a:d2:bf:bb:04:40:0b:44:58:17:
                    d3:0a:96:3d:63:ae:79:cd:08:b8:77:8e:e1:47:36:
                    0d:fa:4f:92:b7:a1:b0:af:48:b5:3c:4e:b0:47:53:
                    04:2d:51:44:d5:95:c6:f5:06:10:68:c1:b3:27:90:
                    d5:74:96:a8:8d:71:6f:80:04:bb:88:2e:a0:fb:12:
                    cf:77:67:27:9e:8a:d0:0d:b3:ee:ee:cf:fa:a6:29:
                    1e:9d:b4:3b:35:50:8b:71:5a:eb:3c:ca:0b:7a:84:
                    9f:bc:1f:a2:e9:38:55:2d:4f:27:0f:67:df:8a:3c:
                    6a:38:d8:31:71:cf:41:38:0f:c7:7b:4e:8e:a2:c0:
                    29:94:a0:85:bd:95:44:30:43:a4:8c:2b:43:88:28:
                    1c:ab:d0:ac:92:ee:d2:51:4f:f4:96:2a:9c:a5:97:
                    3f:8f:f1:60:58:fa:4f:1e:22:68:e7:a7:e3:93:71:
                    87:f4:64:61:dd:84:5d:62:96:71:2d:ec:9e:01:31:
                    b0:78:7b:2b:70:55:4b:5b:77:5c:6c:1e:50:b6:3f:
                    21:ff:77:5e:0c:9f:d9:6a:12:7a:1a:2e:db:2f:87:
                    1c:a2:fb:b1:95:f7:3a:66:88:95:f5:7d:cd:95:10:
                    9d:8d:89:d4:37:ce:62:ff:43:3d:1d:f4:bd:6c:88:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7D:82:66:D4:8F:69:F4:48:70:DE:FC:AC:AE:FE:7D:2A:9E:47:9C
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230312e3233382e3132382e302f31382d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:52:0f:46:46:e0:33:87:43:68:9c:5e:f7:5f:2e:78:c1:
         7d:9f:38:6b:23:79:41:ce:1c:39:34:ad:f6:b3:61:e7:e8:94:
         0e:14:4d:ae:23:9c:6b:32:1e:c7:e5:c1:c4:8a:dd:7c:7d:da:
         92:81:05:b2:23:a6:5b:68:c2:aa:6e:60:32:73:e2:c5:0b:92:
         c9:1d:83:a3:17:7c:7a:38:ff:e8:c5:a5:28:4c:35:45:b0:b2:
         49:d5:45:e8:27:86:fa:59:0e:94:a4:e3:a8:a4:fb:9a:9b:2a:
         d2:11:c1:ca:25:74:c3:cc:54:9b:83:e0:de:a6:8b:c9:5e:af:
         87:c0:2e:68:b5:7a:e4:59:66:fd:76:63:72:37:ee:1f:3c:36:
         d4:d7:4b:13:22:84:06:e3:43:12:34:d3:d5:c7:ea:0a:12:dd:
         7b:5c:bc:d4:2b:5a:68:5d:2e:41:4a:16:b8:32:41:0b:82:2a:
         8b:df:c1:3c:ca:7a:b0:02:b8:37:4e:4c:01:fd:d8:b0:9b:6d:
         bb:cb:a9:cf:ab:4e:27:60:73:53:10:3f:a3:5e:f4:83:56:bd:
         4c:31:ee:57:98:55:53:4b:44:14:88:2d:e3:77:64:fa:89:e6:
         ae:f7:c6:8f:09:f4:b5:25:90:f1:e5:e3:38:59:a2:df:cc:b2:
         35:8c:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org