Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/3230312e3231372e3234342e302f32322d3234203d3e203532333733.roa
File:                     3230312e3231372e3234342e302f32322d3234203d3e203532333733.roa (raw, json)
Hash identifier:          MhatTC+bp1Gr77fnOYOtpwYC/Fk3XPdg2nu1Un+UtAA=
Subject key identifier:   F2:04:05:41:66:DF:88:86:D7:5B:20:75:21:D3:24:F3:ED:34:D0:B8
Certificate issuer:       /CN=EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D
Certificate serial:       7D79D2BFE3EAFD221DA2F76EB8D0130CA897F4B9
Authority key identifier: EA:1C:EE:BD:E0:D9:E5:EE:AD:92:FA:F2:24:46:85:80:A4:C6:F1:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/3230312e3231372e3234342e302f32322d3234203d3e203532333733.roa
Signing time:             Tue 05 Mar 2024 18:16:38 +0000
ROA not before:           Tue 05 Mar 2024 18:11:38 +0000
ROA not after:            Tue 04 Mar 2025 18:16:38 +0000
asID:                     52373
IP address blocks:        201.217.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:79:d2:bf:e3:ea:fd:22:1d:a2:f7:6e:b8:d0:13:0c:a8:97:f4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D
        Validity
            Not Before: Mar  5 18:11:38 2024 GMT
            Not After : Mar  4 18:16:38 2025 GMT
        Subject: CN=F204054166DF8886D75B207521D324F3ED34D0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:59:4c:34:b1:1c:5b:4f:10:f1:08:6f:90:
                    91:be:6a:fc:8d:0a:b5:be:2c:bb:b1:70:b2:39:0d:
                    ce:64:8c:bc:c5:57:40:9d:7e:26:6c:6d:39:0f:93:
                    9e:78:5d:61:b2:43:4d:29:e6:8e:19:59:82:a0:b3:
                    87:50:42:62:1a:e8:e8:63:36:72:28:25:75:34:f9:
                    25:36:89:17:bb:89:43:af:07:11:ef:f4:8c:f4:cc:
                    df:cb:8e:09:b8:6b:37:e9:5a:21:53:69:7c:6f:a5:
                    45:da:86:97:50:17:37:c1:8f:48:9f:52:92:c0:6b:
                    11:83:fd:77:02:c9:75:38:04:f5:5e:4c:e0:f5:73:
                    7f:e6:4f:24:f4:00:5d:50:93:20:b5:83:42:fd:76:
                    e6:d4:14:85:95:68:00:99:46:20:e6:ab:b0:95:e2:
                    b3:d9:ee:e9:73:b0:e5:4d:cc:25:a6:15:7b:11:84:
                    00:22:97:af:3b:ae:38:94:83:11:14:c6:7d:1a:81:
                    60:6d:e4:3f:27:76:1e:1e:66:68:f9:1c:be:fb:5a:
                    25:19:cc:92:5c:44:0f:b1:8f:c6:86:48:1e:50:a4:
                    26:8c:a5:db:37:77:60:f7:e8:6a:92:56:1c:97:f9:
                    41:3a:bd:13:69:17:e1:0a:b8:df:98:ed:54:e5:19:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:04:05:41:66:DF:88:86:D7:5B:20:75:21:D3:24:F3:ED:34:D0:B8
            X509v3 Authority Key Identifier:
                keyid:EA:1C:EE:BD:E0:D9:E5:EE:AD:92:FA:F2:24:46:85:80:A4:C6:F1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/3230312e3231372e3234342e302f32322d3234203d3e203532333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:cc:e7:23:c3:22:c7:cf:f1:82:d8:95:0f:51:64:a0:2d:42:
         5f:4a:9a:82:11:f4:57:d0:f8:ee:3d:00:6d:d4:b2:51:58:c2:
         16:8b:e6:71:19:f1:51:3d:e6:e5:f7:15:e7:19:1c:b2:df:77:
         40:eb:6e:ac:35:01:5d:3c:8a:67:16:07:bd:fb:a2:a8:82:6e:
         21:b8:b3:31:32:0f:11:30:27:13:59:23:5d:ad:66:f8:cd:99:
         0a:15:f6:b6:ed:cb:e7:85:9b:7b:15:71:d7:ec:59:65:79:15:
         c1:03:bf:4d:e5:d7:fd:d5:0e:57:04:52:07:5d:6b:d8:b4:45:
         04:ae:e4:7f:64:98:e7:99:13:6d:af:6d:21:6f:96:8c:86:f0:
         82:7f:08:5b:98:52:ad:62:14:49:16:6a:b5:e9:3d:39:74:93:
         d5:e3:e3:06:84:fa:d5:29:bf:a6:6f:e0:2d:43:44:f3:17:c7:
         8b:87:0b:bf:fc:cb:c8:4f:ff:f8:de:4f:dd:15:88:24:b9:f6:
         db:56:74:0d:61:42:53:3f:a9:9b:f6:13:10:34:ce:e3:ad:f0:
         eb:1d:b8:3e:c6:e0:a8:6d:a0:07:11:17:7a:fa:b3:1d:93:b2:
         1c:1b:53:3e:8f:78:53:59:ab:c4:2a:5b:43:3b:d4:d2:85:ca:
         66:e5:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org