Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33372e302f32342d3234203d3e203139353531.roa
File:                     3230312e3232302e33372e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          2TE1dzMPhdsw7BSQodmbMyg7hqGxvY8NXCQEqw1Bcws=
Subject key identifier:   80:DE:8E:81:9A:D4:D2:C7:46:E8:0B:42:7E:05:C4:F3:C8:56:CE:50
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       566543060BBC01423B6C629F89F8CDEB293B2F55
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33372e302f32342d3234203d3e203139353531.roa
Signing time:             Mon 20 May 2024 16:50:00 +0000
ROA not before:           Mon 20 May 2024 16:45:00 +0000
ROA not after:            Mon 19 May 2025 16:50:00 +0000
asID:                     19551
IP address blocks:        201.220.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:65:43:06:0b:bc:01:42:3b:6c:62:9f:89:f8:cd:eb:29:3b:2f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: May 20 16:45:00 2024 GMT
            Not After : May 19 16:50:00 2025 GMT
        Subject: CN=80DE8E819AD4D2C746E80B427E05C4F3C856CE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:fd:31:97:43:f6:1d:05:e6:b4:af:13:02:
                    d0:58:9d:31:75:4e:12:01:55:08:8c:14:8c:05:e9:
                    c3:93:e2:8c:c8:69:96:a0:e3:6a:a9:97:c0:1d:93:
                    8a:41:b3:98:1f:fd:cf:72:38:87:24:1c:27:d8:3d:
                    4f:98:88:6b:64:bc:0a:f3:67:b4:03:da:86:d0:23:
                    51:a3:f4:bf:e5:b2:c4:e5:09:94:8b:34:a4:0c:e3:
                    76:e3:6b:35:9d:77:35:12:7f:d2:37:7d:be:2c:ad:
                    06:38:a4:b9:85:50:0f:6e:04:10:30:93:85:dc:87:
                    e2:09:7e:17:c3:d4:b2:4a:fb:23:a0:b6:2f:3b:56:
                    3f:18:26:0d:96:40:34:2c:0b:36:2f:a8:08:9f:bf:
                    7d:3c:a4:22:23:b8:fa:1d:0c:61:53:93:7d:0b:55:
                    a8:8d:8f:7e:d0:1f:4a:a7:35:29:fe:e7:87:43:bc:
                    bd:a2:48:f0:05:02:a4:dd:44:17:e4:2f:96:75:9a:
                    e6:b4:57:98:06:f5:28:ce:41:72:b9:63:7e:83:ac:
                    f4:41:55:4b:d0:b8:e9:25:a0:0e:82:1a:b8:71:03:
                    ea:e5:3f:bb:f3:28:a6:c0:0e:48:85:68:8a:68:f6:
                    15:90:d2:58:2a:4a:af:60:f7:59:c9:ea:9f:e7:d0:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DE:8E:81:9A:D4:D2:C7:46:E8:0B:42:7E:05:C4:F3:C8:56:CE:50
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e33372e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:51:0a:5a:25:8c:98:85:e5:c3:44:ff:8d:d7:6b:28:f7:
         c8:39:11:b5:4c:1b:c5:2d:a8:e6:4d:1d:27:72:ca:0e:b4:4b:
         ac:12:f5:3d:51:b9:b1:be:cb:a5:fe:d4:8f:af:00:a5:48:55:
         30:a7:91:04:5e:92:0d:94:40:f6:e9:c3:22:fd:40:3f:a7:f4:
         9c:e7:61:13:e9:1f:ed:e2:cb:1f:4e:72:d9:24:ce:64:fe:f2:
         41:ee:c9:3d:43:43:c6:c5:6a:45:61:19:05:60:6e:48:55:51:
         0d:ae:18:b6:1d:e6:3b:23:9a:a9:01:46:8f:85:6f:9f:a3:2c:
         5d:ae:1e:83:d2:f5:59:f7:94:48:5c:8b:93:4e:e9:ec:5a:a6:
         32:59:77:cb:4b:4a:0a:23:84:5b:ef:cf:ff:15:ca:30:33:55:
         3e:d0:36:3f:6f:43:8a:a5:53:44:cc:ad:82:8a:69:07:7b:10:
         d7:be:66:a3:0b:b5:70:1c:51:31:cb:cb:3f:02:4b:8f:fc:7d:
         cc:7d:36:5e:aa:f4:0c:10:99:b5:35:cc:55:bf:70:21:63:81:
         a1:51:e9:95:26:ba:46:b9:14:03:e8:3e:bc:b3:b1:43:8e:9a:
         8a:f6:5c:9a:26:59:d8:4e:4d:fc:c3:95:1c:aa:27:39:ed:75:
         25:ec:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org