Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230312e3231362e3139322e302f31382d3234203d3e203136383134.roa
File:                     3230312e3231362e3139322e302f31382d3234203d3e203136383134.roa (raw, json)
Hash identifier:          hqOIMInPZa7pzeIiam3Wf9kU+7/YmZH1drbAI0QbBBc=
Subject key identifier:   7B:A0:F5:E9:98:D3:AF:C1:64:FB:A3:00:A9:9E:9A:70:F8:6E:41:8F
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       3899FB97C1CFBC96B93F6863929F9BA4F5BF261B
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230312e3231362e3139322e302f31382d3234203d3e203136383134.roa
Signing time:             Tue 05 Mar 2024 18:12:04 +0000
ROA not before:           Tue 05 Mar 2024 18:07:04 +0000
ROA not after:            Tue 04 Mar 2025 18:12:04 +0000
asID:                     16814
IP address blocks:        201.216.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:99:fb:97:c1:cf:bc:96:b9:3f:68:63:92:9f:9b:a4:f5:bf:26:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:04 2024 GMT
            Not After : Mar  4 18:12:04 2025 GMT
        Subject: CN=7BA0F5E998D3AFC164FBA300A99E9A70F86E418F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:b2:e8:11:b8:b5:ed:a0:a6:0f:69:dd:ea:
                    27:ec:38:09:09:52:5f:ec:de:19:46:b1:9a:78:2a:
                    3e:ba:9c:79:de:bc:52:ff:ec:68:b0:35:2c:88:76:
                    c6:29:d8:fd:31:64:f3:7d:f2:16:35:47:7a:08:bf:
                    ec:7f:df:82:63:1a:39:46:bb:dd:76:38:3c:b2:6e:
                    52:68:5b:87:3e:69:0a:f2:50:ae:79:b2:24:f3:16:
                    5a:c8:7f:7f:f7:bc:0d:53:2e:66:86:81:5a:09:ae:
                    59:27:37:2c:cb:d2:83:4e:5e:3f:80:cc:f8:58:f0:
                    16:2d:7d:ad:33:e0:58:5e:ca:6a:36:ad:b1:70:14:
                    6c:5f:ee:8e:54:c0:2c:9e:72:3d:fd:5d:bc:58:f4:
                    dc:b7:c4:c6:b6:8d:8a:18:d1:cb:70:fb:dd:9d:a7:
                    f0:50:b7:dc:b0:d1:f2:81:d2:18:c5:28:1a:48:a2:
                    2f:7d:e2:51:63:08:ce:18:59:c2:fb:b8:d0:f5:80:
                    bf:2e:1b:47:ea:ab:8e:2b:95:90:a9:7a:cf:1f:66:
                    d8:ce:60:3d:20:0d:ed:e9:e1:7e:0a:eb:e3:f2:95:
                    df:06:1a:54:10:3d:e3:bd:fd:2b:7a:c7:02:ea:39:
                    ad:a8:2b:01:47:7f:0d:93:4e:61:32:04:6b:55:75:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A0:F5:E9:98:D3:AF:C1:64:FB:A3:00:A9:9E:9A:70:F8:6E:41:8F
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230312e3231362e3139322e302f31382d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:65:76:d3:15:39:3b:bc:48:80:48:d3:e8:cb:0c:41:c6:
         4f:79:92:d9:50:ba:60:a0:a7:46:d1:df:e6:0b:51:53:d7:67:
         09:57:44:03:07:da:18:db:cb:44:60:cb:90:7b:a3:38:ce:57:
         0b:52:b9:b0:3b:b2:e8:38:67:7b:1c:65:58:18:15:ae:23:c0:
         cf:43:02:42:84:31:7d:ec:ad:b6:a0:3c:6f:d4:ab:a0:69:1e:
         8c:4b:09:d6:ee:47:97:47:32:86:d5:11:ab:e8:48:b2:99:6b:
         02:c1:c2:3e:51:75:73:7d:6e:46:b7:bb:6f:4a:01:81:10:52:
         93:ce:cb:85:1c:65:a3:ab:70:38:2e:31:a6:19:2a:0a:29:b4:
         95:89:82:de:9b:62:aa:09:5d:b9:fb:4b:95:f5:c6:1f:b3:bc:
         35:19:ce:f2:e7:1d:f3:da:e0:22:04:51:34:de:63:29:e8:72:
         5b:30:f9:0e:83:d6:1c:a4:17:2f:a8:00:8f:d9:2c:20:36:15:
         8c:b4:7b:99:69:59:a3:b3:c1:4f:15:df:78:9f:fa:44:c6:07:
         c3:d1:8d:92:f3:86:83:7c:19:0b:b7:4b:90:16:2e:07:a7:8a:
         b0:7b:ae:1f:0b:a5:56:ee:88:4e:7b:65:64:3b:c1:97:b9:e7:
         68:6d:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org