Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/3230312e3133312e33372e302f32342d3234203d3e203631343634.roa
File:                     3230312e3133312e33372e302f32342d3234203d3e203631343634.roa (raw, json)
Hash identifier:          Ce46DvN/mQIgwR0MQAsQM3uEjf5HfvTVG5qnpoGe3dU=
Subject key identifier:   D3:F1:7C:E2:96:A5:21:34:BD:19:05:94:13:B1:51:37:75:CB:B4:3B
Certificate issuer:       /CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
Certificate serial:       4B12EFAE585A8A3603B8BF618A76837F06A75826
Authority key identifier: D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/3230312e3133312e33372e302f32342d3234203d3e203631343634.roa
Signing time:             Tue 05 Mar 2024 17:48:07 +0000
ROA not before:           Tue 05 Mar 2024 17:43:07 +0000
ROA not after:            Tue 04 Mar 2025 17:48:07 +0000
asID:                     61464
IP address blocks:        201.131.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:12:ef:ae:58:5a:8a:36:03:b8:bf:61:8a:76:83:7f:06:a7:58:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
        Validity
            Not Before: Mar  5 17:43:07 2024 GMT
            Not After : Mar  4 17:48:07 2025 GMT
        Subject: CN=D3F17CE296A52134BD19059413B1513775CBB43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:8a:e7:bf:51:75:d2:15:9e:e4:2d:b3:ff:
                    0d:87:57:4d:52:7c:39:a0:45:59:1f:c8:09:7b:8c:
                    e9:69:56:3e:86:2e:2a:f9:0d:c9:20:ce:d3:16:21:
                    4a:f6:85:b4:bc:5c:eb:58:d3:6d:7b:61:38:bd:0b:
                    f8:34:32:ca:48:d8:e3:75:5d:24:77:8a:e2:1a:29:
                    ae:78:95:b9:70:45:17:66:52:1e:66:36:08:70:73:
                    a1:13:6b:d9:ff:1b:10:fc:5c:c3:be:d1:05:30:2e:
                    10:00:13:5f:de:be:e1:f3:06:0e:28:9f:eb:53:d1:
                    c6:d3:e9:fd:c6:59:45:07:51:89:39:94:6e:e3:e8:
                    5f:ec:d8:ed:83:b7:4e:66:10:06:b8:f1:26:48:f2:
                    35:20:64:75:db:c7:b5:48:7e:c1:ff:eb:4f:f2:56:
                    52:98:3b:50:37:6e:e6:9e:2a:b2:74:63:f2:8d:c6:
                    ff:23:72:1a:b9:40:06:8f:e0:e1:5e:02:91:f2:dd:
                    ce:f2:ab:6a:a9:73:6b:64:03:90:30:48:dc:43:b7:
                    48:10:03:fa:3f:2e:f8:77:83:9e:df:62:11:40:6a:
                    62:a3:ef:c3:fb:33:04:97:63:4e:a4:3c:43:2a:9e:
                    5d:8f:89:46:dc:78:99:78:c7:4b:97:0f:64:73:da:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F1:7C:E2:96:A5:21:34:BD:19:05:94:13:B1:51:37:75:CB:B4:3B
            X509v3 Authority Key Identifier:
                keyid:D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/3230312e3133312e33372e302f32342d3234203d3e203631343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:77:67:a5:67:e1:3a:1a:a9:0c:e7:95:1f:76:7c:21:0e:bd:
         99:9a:d6:fb:8d:a4:f0:a6:48:5c:94:36:52:60:44:08:ff:61:
         90:b7:c1:24:a0:3f:86:89:9d:62:64:f8:ca:c8:ee:d1:fc:ee:
         24:ac:ed:22:a1:76:ef:73:47:d1:b2:1b:54:09:17:89:79:ab:
         be:b0:ae:25:19:c6:9c:95:b0:b8:8d:cc:f4:3f:96:98:25:23:
         74:c9:0f:e5:3b:b9:40:b0:cd:d9:8c:ba:4f:b5:49:b0:22:c4:
         a4:c5:7f:e5:95:67:eb:53:50:b1:4f:56:6f:26:e6:78:59:a5:
         da:3b:2e:41:b1:16:ab:2c:52:dc:0c:8d:f4:45:e3:fe:54:8e:
         19:4d:d6:5c:80:bb:4a:49:71:ce:e6:05:88:d6:ce:d2:56:c4:
         18:17:61:99:04:c1:11:8c:ad:b9:0b:55:3c:22:0a:df:ab:73:
         ec:d8:97:bf:15:8c:e2:27:50:9d:c6:2b:8e:bb:50:cd:bf:71:
         95:11:0b:33:ce:56:e0:de:72:b1:f8:2e:81:5f:8b:16:cc:5b:
         07:99:30:7b:d7:0d:80:22:4d:76:c7:bd:ef:e7:1b:38:36:c7:
         f4:cc:4b:6e:3f:d2:49:65:b4:63:e6:20:03:bf:2e:07:c2:17:
         14:14:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org