Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/3230312e3138322e38342e302f32322d3234203d3e20323634363638.roa
File:                     3230312e3138322e38342e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          iid3E9d0xz2ik2ZED6zmABVMNUy/KxbwvwayhYwe88A=
Subject key identifier:   0E:52:45:DE:1D:D7:E4:63:C1:53:73:97:0E:CF:4E:A1:1A:9C:3B:35
Certificate issuer:       /CN=516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C
Certificate serial:       737A0788713E19A029322E731825B737B2F998B9
Authority key identifier: 51:6E:4B:36:DE:8A:5C:C8:3B:FE:17:D6:CD:43:77:B7:CC:2B:6F:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/3230312e3138322e38342e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:45:20 +0000
ROA not before:           Tue 05 Mar 2024 17:40:20 +0000
ROA not after:            Tue 04 Mar 2025 17:45:20 +0000
asID:                     264668
IP address blocks:        201.182.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 16:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7a:07:88:71:3e:19:a0:29:32:2e:73:18:25:b7:37:b2:f9:98:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C
        Validity
            Not Before: Mar  5 17:40:20 2024 GMT
            Not After : Mar  4 17:45:20 2025 GMT
        Subject: CN=0E5245DE1DD7E463C15373970ECF4EA11A9C3B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:fc:e2:52:94:56:a0:fd:0c:66:4c:7a:35:
                    d7:63:84:5e:e4:3d:55:bb:87:14:9f:6b:e7:b6:5c:
                    04:a9:67:4b:67:a2:82:af:62:f1:f9:86:3e:18:4e:
                    98:4d:9c:48:12:46:52:51:7c:36:ae:60:70:84:25:
                    ad:ee:0c:75:ce:b9:1f:85:b2:14:f7:d3:99:3a:10:
                    c7:c1:ed:ab:9d:ca:26:3a:67:3a:c9:dc:bc:87:f7:
                    b7:7f:1a:60:16:3e:04:6f:c5:0e:62:e0:ac:9f:3f:
                    d5:8d:5b:b8:2a:f1:19:a2:d8:dc:b3:d0:26:92:c5:
                    ce:96:6e:0f:ae:ee:5e:d2:1c:7f:b0:48:45:3d:62:
                    cf:91:50:73:43:41:bd:e4:b0:be:da:1f:96:aa:db:
                    23:cf:f7:b0:e3:46:39:63:cb:aa:c7:ba:7f:70:74:
                    42:96:13:e9:c7:9d:51:90:5e:07:c0:6d:7f:ad:34:
                    b3:d4:d7:c8:40:9c:50:60:18:90:3c:8d:a2:f5:ce:
                    96:1d:3c:a5:4e:08:ae:dd:01:8c:ad:9f:9e:ce:da:
                    b4:3e:ba:36:56:f3:49:c2:f6:94:99:70:33:20:44:
                    f7:98:c4:08:14:01:79:44:a6:90:b1:5a:61:5a:0a:
                    72:7e:4f:9d:06:7f:aa:77:81:fb:a2:2c:1b:7c:09:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:52:45:DE:1D:D7:E4:63:C1:53:73:97:0E:CF:4E:A1:1A:9C:3B:35
            X509v3 Authority Key Identifier:
                keyid:51:6E:4B:36:DE:8A:5C:C8:3B:FE:17:D6:CD:43:77:B7:CC:2B:6F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/3230312e3138322e38342e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:12:42:ce:24:ca:6f:56:4c:86:e9:ac:1a:d3:be:4f:f4:24:
         21:d3:bd:d6:6f:09:ef:6f:cb:e0:29:14:59:22:bc:4f:7a:db:
         b7:74:ad:72:75:98:a5:1e:a8:34:15:f1:40:b8:2e:7c:86:f5:
         73:68:64:42:4c:ee:8a:9f:23:04:23:d9:46:b8:d6:ad:b1:d5:
         7e:55:5c:d9:a2:4c:96:96:a4:bd:80:8b:01:2c:01:5f:a9:18:
         2d:eb:6d:bc:19:43:cf:b1:ca:5f:b1:14:41:ac:b0:61:ac:39:
         18:fc:91:d7:49:15:23:31:a9:67:fe:a3:06:01:7b:b1:7b:7c:
         1c:1e:f7:f2:60:ad:80:a3:6d:3f:52:20:e8:b3:5d:4f:4f:8d:
         05:7a:0e:cf:b8:08:7f:f0:c4:98:d7:06:4a:56:8f:37:b4:aa:
         9e:30:c9:f4:79:db:01:b7:f0:1f:65:84:ac:55:10:da:ef:4d:
         9c:d4:83:db:74:f5:25:03:b3:2f:58:80:a1:d4:89:c0:09:55:
         8d:40:65:53:69:73:6c:4e:34:92:99:cc:99:62:c0:72:87:43:
         38:db:49:7a:c8:bf:82:ae:e8:40:b6:d6:cb:fe:26:9f:6e:16:
         01:d6:8b:ab:48:41:94:63:84:08:0b:fe:11:1c:6a:a4:fa:52:
         e8:13:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:13 2024 by rpki-client on console-ams.rpki-client.org