Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3230312e3232342e302e302f31342d3234203d3e203131353536.roa
File:                     3230312e3232342e302e302f31342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          ksl6WbhfVzU9+urBEPDMREqPXkhqw9SZ/F0OpS6Agpc=
Subject key identifier:   91:73:25:3B:EC:E3:56:CB:64:4B:AD:4E:72:C2:F0:34:7E:A6:E2:89
Certificate issuer:       /CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
Certificate serial:       73325A062BC874A2ECF4096463A778DEA5C44568
Authority key identifier: 78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3230312e3232342e302e302f31342d3234203d3e203131353536.roa
Signing time:             Tue 05 Mar 2024 17:42:12 +0000
ROA not before:           Tue 05 Mar 2024 17:37:12 +0000
ROA not after:            Tue 04 Mar 2025 17:42:12 +0000
asID:                     11556
IP address blocks:        201.224.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:32:5a:06:2b:c8:74:a2:ec:f4:09:64:63:a7:78:de:a5:c4:45:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875A88BF2213772A3637B8BD1F775EC98F2275F
        Validity
            Not Before: Mar  5 17:37:12 2024 GMT
            Not After : Mar  4 17:42:12 2025 GMT
        Subject: CN=9173253BECE356CB644BAD4E72C2F0347EA6E289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f0:ed:e5:5f:07:9f:53:94:35:61:aa:08:51:
                    a5:24:0d:e5:e3:71:8a:6d:9f:bd:ca:8d:31:f8:73:
                    0e:4f:31:3d:af:4c:5f:31:79:fd:64:8a:8e:97:bf:
                    45:10:84:50:c0:03:41:2e:55:11:dc:e7:d6:22:f7:
                    fc:5a:f9:dc:ff:43:4e:5f:d0:ed:6c:41:a7:e3:99:
                    52:45:77:3e:f4:e6:c6:2f:d5:be:cc:c6:37:a5:08:
                    c1:b7:4e:06:37:ac:fa:65:b8:cf:08:4e:23:ff:a4:
                    65:91:25:5b:b3:5f:81:0a:d0:4e:a7:25:b0:dc:ab:
                    ad:ed:dd:56:e3:2f:84:d0:2a:fb:75:85:dc:9b:34:
                    ed:b7:d0:2f:79:5e:0c:33:94:c3:9b:c6:97:51:6c:
                    b3:9c:af:ff:01:12:25:de:1e:11:7f:09:1d:63:5c:
                    3d:2c:be:98:ca:1b:50:c1:18:91:da:36:a8:b6:d3:
                    7b:61:fd:e7:18:53:bd:5f:87:5e:0a:d4:3d:9e:20:
                    24:07:f0:13:93:4d:bc:98:99:6d:44:ad:8d:55:38:
                    c9:01:de:e4:27:8e:90:3d:db:88:3c:27:9d:8f:d7:
                    b5:78:e7:cb:3d:80:21:c7:11:65:70:d6:3e:c9:d8:
                    e0:86:a1:10:f0:53:e4:1f:d3:3d:c4:85:c4:77:9e:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:25:3B:EC:E3:56:CB:64:4B:AD:4E:72:C2:F0:34:7E:A6:E2:89
            X509v3 Authority Key Identifier:
                keyid:78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/3230312e3232342e302e302f31342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.224.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3a:10:b4:a6:cf:69:2f:16:b9:20:2c:2a:c9:02:8f:01:a3:f9:
         33:f4:4d:1b:4b:c3:9d:2b:38:7a:9d:aa:0c:6e:a0:4b:3c:c9:
         e8:40:0b:b5:de:37:8f:92:20:fc:7a:f5:25:25:fa:64:8e:fe:
         94:e3:58:10:43:db:58:9f:49:98:8b:15:75:9f:39:e5:a3:db:
         b1:c5:ec:5f:5b:17:07:08:eb:68:53:3e:3c:1a:55:c3:5d:e9:
         ac:a9:3a:81:2a:16:1f:98:08:38:c6:a1:c7:14:a7:38:b5:eb:
         7c:0f:50:28:b8:5b:f9:bf:e6:88:c2:e6:7e:3c:f8:e7:dc:22:
         44:a0:40:7b:cf:ed:01:87:5d:17:9a:cb:06:ad:9c:16:21:e8:
         82:12:7f:e6:3d:07:ca:38:17:1c:6d:08:1a:90:f8:7f:7c:a5:
         3e:09:ab:a7:00:42:b1:09:2b:03:6f:58:02:f9:9d:2b:65:ea:
         ed:a9:93:68:63:ef:a3:bf:19:bb:ee:d4:26:fb:4c:7a:b2:71:
         b6:94:dd:29:4d:25:a8:09:60:5f:89:83:f6:a4:1f:ca:3b:fe:
         86:b6:ab:0f:79:2f:ca:9f:0a:c0:0e:fc:2a:60:72:e5:f7:45:
         12:38:f5:b5:38:bf:5f:bd:98:39:4b:c4:a5:53:b8:2d:7e:e5:
         80:1c:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org