Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa
File:                     3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa (raw, json)
Hash identifier:          hrMJMTN3jhcCFxvJU+uLBE1t1nl/nSX9LQ6c6NjLpyE=
Subject key identifier:   A6:AD:10:EB:62:00:42:D4:B0:A6:DD:07:3E:B1:16:D2:3D:93:B5:F6
Certificate issuer:       /CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
Certificate serial:       11CFC1EFCF652CFE1BFEF2E42DA5D9CECC622CAE
Authority key identifier: 51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa
Signing time:             Mon 17 Jun 2024 19:55:00 +0000
ROA not before:           Mon 17 Jun 2024 19:50:00 +0000
ROA not after:            Mon 16 Jun 2025 19:55:00 +0000
asID:                     28539
IP address blocks:        201.159.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jul 2024 10:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cf:c1:ef:cf:65:2c:fe:1b:fe:f2:e4:2d:a5:d9:ce:cc:62:2c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
        Validity
            Not Before: Jun 17 19:50:00 2024 GMT
            Not After : Jun 16 19:55:00 2025 GMT
        Subject: CN=A6AD10EB620042D4B0A6DD073EB116D23D93B5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:95:9a:96:d1:1c:ec:b5:f9:be:e9:46:7c:
                    33:74:e1:1f:37:fb:aa:46:8e:cf:36:52:4a:73:61:
                    90:cf:8e:be:b6:78:db:d6:77:55:87:99:03:ba:d5:
                    9a:e9:e8:91:0e:a8:4c:65:53:0e:1e:9c:5c:f0:e6:
                    e4:d7:4b:d0:15:40:1c:48:b2:f7:a7:a8:38:7d:77:
                    b8:65:f2:c7:df:84:e7:5f:95:08:3c:f0:fa:65:8d:
                    f1:75:9d:e3:51:d0:97:c2:75:b6:37:24:49:5f:66:
                    0f:8c:47:f7:38:de:72:7a:1a:79:fb:46:4d:2e:c6:
                    68:0b:e9:4d:04:c0:cc:51:cf:c3:20:a2:0a:16:b2:
                    2a:6f:55:60:f1:fb:cb:58:e9:2b:23:6c:bb:27:9f:
                    b9:3e:ef:81:87:11:e0:3c:c5:11:23:8b:9d:d1:1e:
                    e6:f4:d9:e8:69:bd:59:96:06:a6:10:e3:84:e2:4e:
                    f7:32:bb:40:ff:d3:59:72:60:cb:a6:09:97:fd:71:
                    fc:64:ac:e6:d8:12:0c:f8:14:87:10:b8:46:a0:62:
                    be:a7:80:26:37:fa:e0:d1:72:11:55:90:ab:b9:7e:
                    fe:15:e5:9d:9f:58:f8:4d:48:5a:77:17:4a:dc:4e:
                    d4:86:86:09:e6:03:cc:e7:c4:8a:3a:8b:d1:29:57:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AD:10:EB:62:00:42:D4:B0:A6:DD:07:3E:B1:16:D2:3D:93:B5:F6
            X509v3 Authority Key Identifier:
                keyid:51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:a4:25:99:cd:bd:86:45:25:a4:b2:4d:88:ba:73:53:2b:
         a1:00:36:d4:ae:a6:ef:b9:1d:65:8b:07:fc:24:bd:cf:48:1f:
         d5:db:1d:d9:6e:98:4d:9e:77:87:2f:7e:63:4f:a0:59:c5:a6:
         10:10:75:19:9e:72:6d:ec:7a:51:75:e6:e4:7d:44:dd:25:7e:
         eb:f5:1e:44:26:0c:fb:3b:5f:ba:b1:61:02:91:ff:dd:d8:d3:
         df:f0:32:51:f3:6e:2e:4c:c2:57:20:e2:6d:85:a2:f0:c0:ce:
         db:66:78:ea:18:89:63:b9:b6:ee:6f:54:df:94:c9:71:f4:a4:
         ca:5e:56:fd:d1:94:e2:e8:10:d2:1d:7c:d2:1c:68:6d:ec:29:
         49:f6:34:1a:6e:88:91:d8:ae:df:5c:0a:39:a8:fa:e9:61:df:
         79:ce:a8:88:1f:2d:f0:9e:c8:55:5c:7b:04:76:44:4c:5d:0c:
         8d:6c:c6:e3:a3:c4:19:37:92:14:e1:89:d7:aa:89:30:bd:23:
         f0:7a:f2:2e:ff:b7:89:d6:45:de:fb:11:44:c1:0f:72:ee:27:
         ac:3c:89:9e:c2:d4:f2:56:53:60:59:34:5c:49:5f:a4:75:ff:
         80:34:51:d5:88:f6:1d:05:2e:03:a8:39:54:f1:11:5a:91:e3:
         89:0e:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 23:44:01 2024 by rpki-client on console-fra.rpki-client.org