Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230312e3231372e3139322e302f31392d3234203d3e203138373437.roa
File:                     3230312e3231372e3139322e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          r+CwwQQmbtt8J/1ZXzn/A0BQEG9xipcrd8eZhiHPl54=
Subject key identifier:   E3:43:14:71:F7:46:F5:6B:B8:48:7E:19:5F:CC:14:DA:B8:16:A5:A5
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       36EA2CA84ADF2B66C05A56F6105A928AFC3A5CE0
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230312e3231372e3139322e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:02 +0000
ROA not before:           Tue 05 Mar 2024 17:54:02 +0000
ROA not after:            Tue 04 Mar 2025 17:59:02 +0000
asID:                     18747
IP address blocks:        201.217.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ea:2c:a8:4a:df:2b:66:c0:5a:56:f6:10:5a:92:8a:fc:3a:5c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:02 2024 GMT
            Not After : Mar  4 17:59:02 2025 GMT
        Subject: CN=E3431471F746F56BB8487E195FCC14DAB816A5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4f:3d:9f:54:8c:0c:b5:5e:4b:6a:fd:60:dd:
                    7f:17:7d:38:97:04:19:2e:fb:52:6b:dc:a3:97:bc:
                    a8:fb:51:f5:b6:89:06:52:78:85:4e:76:6a:72:29:
                    48:ed:c2:98:b4:b3:7b:be:9b:bd:ad:11:c8:54:4e:
                    08:ed:1f:5b:d9:48:8a:4c:83:9f:11:9a:8c:63:35:
                    eb:c3:6b:1f:f5:55:40:a1:0b:65:a4:78:85:ad:b5:
                    1c:c6:88:76:e2:bc:0f:b3:68:b3:24:fe:68:20:9d:
                    62:95:ef:aa:a2:06:88:88:f1:04:93:53:1f:dc:21:
                    b4:a7:1c:24:50:4e:f8:f9:dc:01:9f:38:44:4d:a0:
                    fa:8b:d8:ea:b8:f4:b3:46:14:6c:72:cd:62:ef:75:
                    77:ee:99:98:8a:e5:bd:90:c9:61:24:2d:61:15:78:
                    78:0b:23:5e:fb:3f:ed:ba:f7:e9:f8:18:97:d5:ef:
                    23:02:50:53:b4:e7:13:fb:58:ab:2b:7a:be:01:fb:
                    62:c0:70:bb:6d:ef:cc:ab:5b:94:01:8f:2f:ac:e4:
                    e2:a9:c7:cf:15:8f:85:55:63:e7:e9:03:c9:51:fc:
                    11:78:07:f6:40:3c:46:2f:e8:d9:d1:b1:d0:3f:35:
                    9f:6d:67:5c:f6:37:c3:5c:ac:91:20:4f:17:b2:89:
                    f6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:43:14:71:F7:46:F5:6B:B8:48:7E:19:5F:CC:14:DA:B8:16:A5:A5
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230312e3231372e3139322e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:88:d3:5c:2c:4e:44:f0:0d:b7:62:d9:98:91:ef:33:7e:37:
         28:33:a7:b9:c6:4d:ed:67:5f:5c:eb:3e:fe:97:9e:19:71:96:
         19:7c:e2:c0:b9:45:83:a1:fc:36:ed:f7:af:9e:0d:ef:f5:65:
         ca:c6:63:09:2e:2f:64:06:87:83:5a:3d:b6:26:cf:b7:3d:bb:
         9f:28:57:08:8e:4f:65:40:ee:53:7d:c2:1d:e8:e4:8f:07:bb:
         e8:87:4f:7f:b1:f9:7a:ed:6d:c2:9b:dd:58:2c:79:4b:2f:5e:
         2b:1e:04:46:60:1b:d7:f9:95:3a:ab:09:a2:8e:5e:28:00:e5:
         fe:00:fe:98:eb:44:b6:cb:98:b6:0e:37:fc:ec:4f:0c:13:dd:
         38:e6:3b:f9:d1:a0:8a:f7:17:ef:fd:98:1a:44:5f:4c:67:85:
         0e:4b:00:31:f4:c4:a0:26:e6:b6:69:c1:fc:b7:8b:3d:ae:f9:
         10:62:64:0e:71:76:30:04:d5:51:5e:e1:01:9a:47:e1:ba:e0:
         f7:ea:63:49:84:91:c8:3a:b5:11:2b:59:d9:ce:e9:e6:8a:d6:
         6d:9c:61:31:dd:e3:70:b3:64:6d:92:1d:3b:31:75:dc:52:2c:
         ca:36:80:00:a5:14:86:64:38:61:61:89:14:76:8f:ec:d7:fc:
         4f:56:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org