Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/3230312e3138322e38342e302f32322d3234203d3e20323635373939.roa
File:                     3230312e3138322e38342e302f32322d3234203d3e20323635373939.roa (raw, json)
Hash identifier:          KMTgG+7wmExcJz1bj7KtTE1iSVzWwWlDRBaFLrbVzvM=
Subject key identifier:   41:58:DD:75:C4:70:C8:E8:CF:DA:C0:36:3F:AD:86:2E:26:18:0C:90
Certificate issuer:       /CN=516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C
Certificate serial:       668A86EA8985ACFE2695E627262E342527F2DBE9
Authority key identifier: 51:6E:4B:36:DE:8A:5C:C8:3B:FE:17:D6:CD:43:77:B7:CC:2B:6F:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/3230312e3138322e38342e302f32322d3234203d3e20323635373939.roa
Signing time:             Tue 05 Mar 2024 17:45:20 +0000
ROA not before:           Tue 05 Mar 2024 17:40:20 +0000
ROA not after:            Tue 04 Mar 2025 17:45:20 +0000
asID:                     265799
IP address blocks:        201.182.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8a:86:ea:89:85:ac:fe:26:95:e6:27:26:2e:34:25:27:f2:db:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C
        Validity
            Not Before: Mar  5 17:40:20 2024 GMT
            Not After : Mar  4 17:45:20 2025 GMT
        Subject: CN=4158DD75C470C8E8CFDAC0363FAD862E26180C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:c1:6c:05:43:eb:1f:b9:11:87:db:68:41:
                    3a:5a:93:41:80:c1:97:0b:92:58:55:e6:2b:6a:bf:
                    ac:93:e9:df:6d:e8:76:e2:ae:d7:02:24:23:d4:a9:
                    5f:e0:f1:02:9f:0e:e9:e8:84:16:5a:cf:ac:59:da:
                    56:33:14:e7:87:6c:19:70:e8:bc:57:bd:1a:78:20:
                    02:0b:7a:c4:1b:86:7f:bc:38:d9:6b:e3:f2:b0:79:
                    06:eb:eb:44:ce:1c:bd:ee:30:aa:96:0f:2a:84:fd:
                    8d:27:d5:27:f9:b8:7b:5f:13:d2:8e:52:3b:9c:2d:
                    77:bd:33:42:56:2e:aa:80:a4:92:35:8c:df:a0:8d:
                    88:1f:c7:18:1b:4a:a7:00:55:e9:fd:1d:89:b9:5f:
                    4b:82:03:72:77:b4:b4:9d:c6:8a:cc:02:91:3a:cc:
                    eb:00:d3:54:53:aa:29:5f:9b:4a:04:a1:c9:68:f9:
                    45:f8:9a:46:ce:c7:04:b4:09:82:32:1a:c3:b1:63:
                    da:f3:48:6f:e5:30:18:09:ab:6f:7a:b1:6d:eb:5a:
                    1a:0b:bb:0e:48:bf:0b:82:f3:4a:18:72:cf:50:43:
                    fe:24:77:3b:91:4e:d2:a0:ed:8e:bb:aa:47:4b:33:
                    ed:b4:1c:95:2b:88:b9:e0:fb:5f:85:3a:4e:8b:8a:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:58:DD:75:C4:70:C8:E8:CF:DA:C0:36:3F:AD:86:2E:26:18:0C:90
            X509v3 Authority Key Identifier:
                keyid:51:6E:4B:36:DE:8A:5C:C8:3B:FE:17:D6:CD:43:77:B7:CC:2B:6F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516E4B36DE8A5CC83BFE17D6CD4377B7CC2B6F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B33AEDAA72312FE86C592AA93FB2C38B1709B2FA781D461F0F659059201DE0A5/0/3230312e3138322e38342e302f32322d3234203d3e20323635373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:ac:f3:26:07:6a:23:11:8c:bb:34:2c:f0:d6:71:37:dd:55:
         c6:4f:9d:33:c7:65:49:f5:4a:9b:5c:75:8c:1a:fc:a3:74:ca:
         82:7f:80:42:9d:41:f5:6d:e8:25:cc:32:79:79:1b:c8:c2:28:
         1b:f7:43:3e:0c:05:61:fc:53:bd:c4:55:76:42:fc:1c:34:ff:
         50:8c:db:95:74:1c:af:d2:41:30:7a:ab:fb:56:26:37:7d:59:
         0d:87:a3:30:b9:4e:00:e8:59:d2:e3:89:77:c7:31:96:75:34:
         7c:85:c3:89:6f:d3:49:97:77:66:24:ad:49:ec:8d:7d:cb:60:
         89:9f:61:a1:4e:b3:92:28:56:fd:40:6d:8d:05:0a:79:ab:cc:
         59:36:27:92:ca:5c:19:85:d5:0e:75:b0:64:d3:75:e1:5e:12:
         4b:f0:8d:1b:cc:02:a2:65:9e:3c:e1:17:f3:f2:11:9b:02:82:
         d4:e5:00:a2:d0:26:c2:63:d2:80:15:8a:e6:c1:8c:b2:de:7f:
         3c:93:9a:56:e5:1f:0a:34:68:27:5a:74:7a:ac:37:2c:3b:70:
         d8:53:66:95:62:63:93:ee:47:ca:fc:64:0e:fb:33:80:10:9f:
         64:2a:da:71:5f:49:3a:07:31:86:e4:dc:20:a9:95:c0:5e:f5:
         01:47:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org