Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e35362e302f32342d3234203d3e203139353531.roa
File:                     3230312e3232302e35362e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          BpZ3g1euvZ1j7cQ9Z1k7HqBTOlz9L1zD5GgJgU8eOek=
Subject key identifier:   10:8C:E1:D6:AD:5C:47:B0:E6:8F:8E:9A:12:FA:24:54:31:F1:23:47
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       715ABF94450873C5FB13B5A0DA073F8810A105B8
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e35362e302f32342d3234203d3e203139353531.roa
Signing time:             Mon 16 Sep 2024 13:40:00 +0000
ROA not before:           Mon 16 Sep 2024 13:35:00 +0000
ROA not after:            Mon 15 Sep 2025 13:40:00 +0000
asID:                     19551
IP address blocks:        201.220.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5a:bf:94:45:08:73:c5:fb:13:b5:a0:da:07:3f:88:10:a1:05:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Sep 16 13:35:00 2024 GMT
            Not After : Sep 15 13:40:00 2025 GMT
        Subject: CN=108CE1D6AD5C47B0E68F8E9A12FA245431F12347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:dd:22:26:a2:cb:1b:46:1c:c3:b3:b6:46:
                    a2:5b:58:dd:8d:45:08:ae:12:78:e5:1d:9a:34:b9:
                    69:4b:9c:90:ae:a1:aa:fe:93:2b:16:da:db:8d:00:
                    d6:2b:cd:0a:75:69:24:71:e6:7c:50:83:1f:88:23:
                    5e:6a:90:36:67:22:d0:f0:25:b4:c0:b8:d9:4a:67:
                    79:0d:b9:30:8b:4a:51:b8:96:0b:7d:56:54:5f:00:
                    19:79:fd:d8:6e:46:a2:d5:49:1f:cb:ec:6b:e0:8e:
                    96:cc:34:6d:dd:06:f9:f7:3d:96:18:a3:97:79:38:
                    8b:e3:75:0d:14:ca:8f:83:27:14:13:9c:8e:9a:e1:
                    e3:0d:16:c1:64:f3:08:fe:ed:69:1d:2a:1f:02:c8:
                    9d:32:56:47:24:6a:3a:55:1c:0e:43:ca:4e:60:aa:
                    be:b5:4c:5f:ad:bb:1b:df:d5:69:e0:33:80:c8:0e:
                    58:c9:22:e4:ad:76:5e:4b:85:83:03:58:83:13:c8:
                    26:83:e9:61:98:2b:01:63:70:5e:17:50:5e:22:c5:
                    96:81:3a:7e:31:61:7c:39:d4:63:cf:7c:92:02:09:
                    06:23:03:c6:36:97:79:e6:13:79:0f:d8:e5:34:3c:
                    25:51:a3:b6:d4:b1:f8:e7:ec:cc:e7:0b:2e:0f:fc:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8C:E1:D6:AD:5C:47:B0:E6:8F:8E:9A:12:FA:24:54:31:F1:23:47
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230312e3232302e35362e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:41:a9:fd:ac:79:ea:fe:2c:c7:00:f0:72:78:53:52:28:5b:
         54:c1:f6:6f:d7:71:71:38:4f:7c:6b:6c:d3:b2:2d:05:ac:e0:
         50:e3:36:6e:ca:64:1a:04:7d:bf:cd:a3:b2:1d:03:e1:2c:7a:
         72:f2:35:2e:df:ad:e9:c3:05:c1:2d:7f:49:3d:98:3f:9a:a4:
         8c:6d:2f:b4:9f:8c:6d:b9:9e:7e:1b:8f:79:50:81:0b:fd:b1:
         9b:bd:d7:48:fe:89:23:e2:84:4e:0b:7e:e2:28:86:f9:dd:47:
         d2:6b:e6:8a:7a:fc:e4:73:cb:38:19:29:0d:7d:8c:57:a4:02:
         04:66:23:95:5f:cc:82:d5:7f:d6:4d:54:0d:86:95:ea:1a:94:
         4e:9c:30:ae:2d:fb:66:4d:1c:25:20:bf:33:67:c4:11:d1:e5:
         f5:dc:f6:1d:15:59:56:71:2e:10:4e:45:33:41:f8:a1:9b:13:
         53:a6:46:64:d0:88:25:36:50:18:35:fd:f7:c2:d3:2f:c9:07:
         a2:63:7e:be:70:07:59:69:a1:e7:66:30:10:52:e4:cb:e5:5b:
         50:2d:03:77:b1:37:1b:33:67:f9:af:2f:3c:75:20:ec:64:e5:
         a4:f8:a8:da:c2:5e:4b:2e:ea:b1:87:2b:55:69:83:cd:85:8c:
         11:e1:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org