Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3232302e3234352e302f32342d3234203d3e2037343138.roa
File:                     3230312e3232302e3234352e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          zXzJdgpyhD2jFkLfnzHcSbLvMd07cEtQpXTf1h8SlkU=
Subject key identifier:   81:3E:A5:7C:FB:90:6F:81:14:6C:52:C6:FF:19:09:36:F3:63:E3:7B
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       60DA06A7573E113BB0957C0EC5BFA79343E0F80E
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3232302e3234352e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:44:51 +0000
ROA not before:           Tue 05 Mar 2024 17:39:51 +0000
ROA not after:            Tue 04 Mar 2025 17:44:51 +0000
asID:                     7418
IP address blocks:        201.220.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:da:06:a7:57:3e:11:3b:b0:95:7c:0e:c5:bf:a7:93:43:e0:f8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:51 2024 GMT
            Not After : Mar  4 17:44:51 2025 GMT
        Subject: CN=813EA57CFB906F81146C52C6FF190936F363E37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:58:f0:73:4f:18:af:62:40:0c:62:11:3c:
                    c3:cb:46:df:62:78:c7:f0:fd:8e:c4:80:b9:86:93:
                    6f:c3:8f:16:a8:d7:08:69:0f:d7:99:1f:15:bc:cc:
                    9f:9a:e3:34:59:16:8f:c9:ea:db:ce:0d:8b:5d:94:
                    2f:75:91:2f:d3:8a:0c:45:f2:67:9b:50:e6:98:3c:
                    26:e5:e5:66:a6:98:a1:8e:1a:a1:5a:67:10:4c:d3:
                    30:9d:22:68:47:ab:4a:dd:29:7d:7d:17:a4:5a:93:
                    03:93:07:04:b1:55:bb:87:04:20:a8:4c:80:54:bb:
                    ee:4c:4a:81:fd:59:b8:69:d9:08:4b:9a:e7:c3:e9:
                    ac:45:3c:8a:13:34:aa:57:8f:16:d5:6d:6a:2a:78:
                    4e:0a:17:b3:bd:c0:35:e3:46:c3:dc:ae:d0:87:c7:
                    e7:52:df:49:1f:94:d4:45:7a:e8:dd:fa:06:d8:db:
                    5f:cf:a9:a8:94:d5:33:f8:1d:e8:2d:90:77:18:a4:
                    97:83:e4:f6:3c:42:2f:66:1d:69:05:f2:c7:03:47:
                    4d:b8:8c:56:9a:96:39:e7:e1:0a:7c:d8:67:22:3e:
                    ba:60:c2:20:e7:0b:85:04:19:ae:76:85:5c:95:84:
                    25:66:b8:6b:aa:77:84:17:f0:78:94:61:4d:8d:82:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3E:A5:7C:FB:90:6F:81:14:6C:52:C6:FF:19:09:36:F3:63:E3:7B
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3232302e3234352e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:c0:1b:2d:bb:5c:79:b7:36:1e:fd:b7:c7:2c:d8:a5:ab:c6:
         32:a4:97:00:52:27:79:39:14:bf:88:ff:9f:0d:cb:56:1a:34:
         d8:62:8c:fb:2b:0f:8e:5f:ad:c7:57:1f:d2:98:99:30:17:8e:
         4f:52:bb:e7:8a:71:39:53:e1:2b:5a:63:3f:0a:58:45:77:67:
         82:1c:48:1e:70:0b:d9:a5:a8:d0:49:b3:bc:ae:e7:31:8b:6c:
         54:44:1a:39:e7:d1:95:c3:95:4f:40:34:c7:8b:bf:37:45:9b:
         b4:05:a8:5e:6b:82:a8:0b:81:9a:02:27:01:52:50:94:44:25:
         eb:4a:de:19:e2:d3:b4:cb:19:be:c1:ef:12:32:41:5e:5e:3f:
         9b:96:0c:00:f8:f5:ff:34:36:51:ce:e0:c9:28:0e:33:58:d0:
         ca:17:ae:70:86:b8:2f:82:af:6c:5e:61:08:e3:4b:7d:1a:71:
         c6:d7:92:5a:6f:6d:54:3a:dd:ef:2d:e7:41:3b:f5:e9:81:23:
         35:02:e9:12:be:2a:2d:93:f2:4b:10:6c:5a:bf:84:fd:39:a6:
         a4:b7:f4:e6:a2:3f:02:70:d5:60:d7:69:04:2a:df:fc:67:60:
         2f:1d:ee:42:8e:84:4e:9f:8b:f7:21:9d:39:1c:06:db:14:fa:
         d9:22:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:20 2024 by rpki-client on console-fra.rpki-client.org