Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa
File:                     3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa (raw, json)
Hash identifier:          KVUWbzLSskV+brDsGLTe8iBxmay0lD4ZX3jsedFgqG4=
Subject key identifier:   47:65:51:C2:A9:95:1B:41:60:4C:94:8C:8B:36:C1:50:72:CA:AD:5E
Certificate issuer:       /CN=C2D04859D3EA57A74F033391AF63270299AC79E5
Certificate serial:       4244DC4950ECFB09C8BA74EDEBCEFE51C7620B45
Authority key identifier: C2:D0:48:59:D3:EA:57:A7:4F:03:33:91:AF:63:27:02:99:AC:79:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D04859D3EA57A74F033391AF63270299AC79E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa
Signing time:             Tue 05 Mar 2024 18:21:43 +0000
ROA not before:           Tue 05 Mar 2024 18:16:43 +0000
ROA not after:            Tue 04 Mar 2025 18:21:43 +0000
asID:                     27928
IP address blocks:        201.221.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/C2D04859D3EA57A74F033391AF63270299AC79E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/C2D04859D3EA57A74F033391AF63270299AC79E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D04859D3EA57A74F033391AF63270299AC79E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:44:dc:49:50:ec:fb:09:c8:ba:74:ed:eb:ce:fe:51:c7:62:0b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D04859D3EA57A74F033391AF63270299AC79E5
        Validity
            Not Before: Mar  5 18:16:43 2024 GMT
            Not After : Mar  4 18:21:43 2025 GMT
        Subject: CN=476551C2A9951B41604C948C8B36C15072CAAD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:fa:a9:a6:3b:d3:14:39:f5:7e:34:b2:0d:
                    e2:32:36:9f:01:d6:6c:82:5b:6b:b5:3c:4a:c7:3a:
                    c6:79:9d:f6:d8:34:fc:db:09:5f:01:bf:2a:17:fd:
                    52:3b:cc:18:e8:1a:cb:08:9c:11:9d:c1:47:d8:bc:
                    1b:ce:46:ad:cc:0a:26:80:87:89:2d:4b:99:80:74:
                    e1:97:d7:31:48:3d:f6:56:5f:88:17:30:f4:a4:de:
                    29:ae:b6:27:bf:6d:ba:09:dd:6b:a4:cc:8e:42:36:
                    db:e3:20:f6:27:5d:84:cf:d1:cb:c9:dc:36:5b:5c:
                    51:59:4a:40:29:52:77:b2:68:33:a6:4a:1c:67:8d:
                    89:ad:b0:3b:e6:c3:be:4f:ed:6b:40:6d:af:c8:ea:
                    75:a9:d0:15:9b:3b:c3:27:6b:18:5a:f4:63:5c:07:
                    f1:07:0c:0d:46:f7:38:7a:73:eb:90:04:60:67:13:
                    af:39:ed:ff:03:74:43:74:2f:62:e8:ad:43:40:c4:
                    47:df:18:3e:4f:1a:e2:1a:74:10:12:bf:cd:a2:6a:
                    ee:11:be:22:15:af:c6:53:d6:e2:2b:48:75:7f:55:
                    df:f1:ee:b9:0f:eb:6e:80:b6:e6:83:8e:e7:97:fd:
                    ae:6c:5c:60:d2:0f:8e:db:31:67:57:31:a6:da:90:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:65:51:C2:A9:95:1B:41:60:4C:94:8C:8B:36:C1:50:72:CA:AD:5E
            X509v3 Authority Key Identifier:
                keyid:C2:D0:48:59:D3:EA:57:A7:4F:03:33:91:AF:63:27:02:99:AC:79:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/C2D04859D3EA57A74F033391AF63270299AC79E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D04859D3EA57A74F033391AF63270299AC79E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:0a:8c:89:ff:ab:85:77:89:3b:59:3e:c0:8b:ff:23:25:86:
         83:45:42:1f:ef:e3:76:13:c3:82:14:3b:7f:5b:5c:09:cc:8c:
         20:30:7f:fc:47:40:e5:f7:d7:b8:82:e9:1a:0a:f3:52:e5:0d:
         85:5d:45:42:87:d0:ca:e9:e6:87:1d:1e:0c:10:ec:e6:4c:61:
         93:bd:16:66:2a:cc:ef:ca:d1:f5:d8:d2:40:b2:cf:c6:f9:a0:
         7e:d0:f2:27:64:1b:6e:32:da:8c:8c:0a:c8:ef:0e:cc:44:94:
         a4:67:5c:0a:68:60:63:9a:4b:fb:41:9e:0f:cd:64:d6:c7:b1:
         ca:77:52:06:5c:e8:8e:9f:8a:2e:eb:a0:1c:d3:5b:3a:38:52:
         70:90:9e:cd:04:b9:ea:30:0e:4f:fe:b2:8d:22:da:c4:ba:f7:
         77:c7:35:3d:ca:e5:d4:dc:f4:1b:f4:73:5f:04:af:43:40:fd:
         fc:90:2c:c1:42:de:77:18:4d:9b:f9:2c:69:5a:ad:dc:f8:38:
         ca:0d:a8:06:ce:14:ac:d1:cf:7e:55:4b:b4:c5:ab:03:70:89:
         23:82:20:a9:7a:72:ee:97:49:e8:16:66:a5:02:39:4d:fd:2f:
         f5:60:5e:1e:48:9d:e6:46:47:e6:7b:e9:0a:7a:a9:24:e4:36:
         b5:06:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org