Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3230312e3232312e302e302f31392d3234203d3e203230323535.roa
File:                     3230312e3232312e302e302f31392d3234203d3e203230323535.roa (raw, json)
Hash identifier:          54mzWJrZoxC/sWImsGPv+1qqDT9ruWAAQE7eRpdhVlE=
Subject key identifier:   05:D6:FA:DF:EB:90:74:29:5B:C3:3C:B1:78:08:1B:7D:54:C8:F1:06
Certificate issuer:       /CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
Certificate serial:       39B67E364A9A6030C424392FA6CD334201C7B62D
Authority key identifier: 63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3230312e3232312e302e302f31392d3234203d3e203230323535.roa
Signing time:             Tue 05 Mar 2024 17:45:16 +0000
ROA not before:           Tue 05 Mar 2024 17:40:16 +0000
ROA not after:            Tue 04 Mar 2025 17:45:16 +0000
asID:                     20255
IP address blocks:        201.221.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b6:7e:36:4a:9a:60:30:c4:24:39:2f:a6:cd:33:42:01:c7:b6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6356DD151F9758D7C94E8D79EE84C65352BF10D1
        Validity
            Not Before: Mar  5 17:40:16 2024 GMT
            Not After : Mar  4 17:45:16 2025 GMT
        Subject: CN=05D6FADFEB9074295BC33CB178081B7D54C8F106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:eb:b5:07:dd:ea:57:d7:37:a6:6a:f2:8d:
                    b7:45:1a:62:68:79:96:34:36:0c:8e:fb:46:1a:ff:
                    f1:43:ba:fb:08:e9:90:14:a2:bf:22:17:78:e2:fb:
                    c8:f4:d9:a9:a7:c4:40:04:c8:91:c5:36:09:8e:df:
                    c7:24:d0:36:2d:97:a3:ee:5e:4d:24:b2:ec:b2:5f:
                    0a:b8:5c:ca:64:12:55:34:b7:5f:3d:cc:81:b4:5e:
                    8b:14:43:cf:7d:44:77:9d:aa:bc:2b:b9:6f:e1:74:
                    ed:bd:17:7a:cc:d6:12:0d:3c:b5:55:95:f3:6d:06:
                    a5:56:11:8b:f7:6e:ee:1c:1d:1a:84:e6:6a:02:2d:
                    1d:90:11:91:91:47:fc:76:2d:1d:61:96:8b:92:2a:
                    5c:cc:e9:f9:7b:01:05:75:6f:cd:e3:d5:b4:f8:2c:
                    d2:8e:aa:c6:5a:09:a8:eb:dc:03:51:8d:b8:1c:42:
                    80:0b:0f:e6:22:f4:e3:13:ad:3e:5d:76:1a:14:30:
                    b8:96:a2:d2:1c:88:6b:45:cf:55:a0:4e:68:94:a2:
                    f9:0d:12:bc:d7:c4:02:46:c8:c0:2d:0b:6e:ba:57:
                    09:88:e3:c4:bd:78:ac:49:d4:ec:1c:ec:67:38:94:
                    c8:cc:67:17:5d:ae:52:39:f0:b0:ee:9e:86:d4:05:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D6:FA:DF:EB:90:74:29:5B:C3:3C:B1:78:08:1B:7D:54:C8:F1:06
            X509v3 Authority Key Identifier:
                keyid:63:56:DD:15:1F:97:58:D7:C9:4E:8D:79:EE:84:C6:53:52:BF:10:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6356DD151F9758D7C94E8D79EE84C65352BF10D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3C33E53E8DD36FFDB0B0DE536D0A71ED8152EFD26967C0011855899D2863138/0/3230312e3232312e302e302f31392d3234203d3e203230323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:f2:62:10:17:79:9e:bc:6e:60:c7:7b:dc:9a:9a:74:28:
         47:82:ec:2f:8b:f3:c6:3d:ca:9b:52:65:0c:f4:c5:a3:a4:02:
         68:79:04:26:c7:ef:10:31:dc:9c:6e:80:09:61:7c:99:6f:50:
         a8:57:a6:06:52:7f:cb:86:40:9b:4d:0a:e6:cb:e6:2e:19:cd:
         42:9f:ce:f5:82:70:98:a2:cc:58:c5:b3:09:a3:b6:f6:a0:26:
         71:da:4b:14:ff:51:98:58:3f:bc:ca:f6:52:d1:2c:e7:1f:38:
         29:d8:74:ec:93:8b:9f:e9:f9:af:d5:cf:72:5b:7a:83:fc:31:
         ea:e3:c5:1d:04:bf:95:4a:27:a6:9c:60:bf:e8:44:89:50:14:
         53:da:12:15:74:9b:99:94:db:61:d0:ab:16:d9:3a:33:d8:45:
         71:84:09:ab:24:fc:16:7e:8d:3b:08:9c:11:e6:a5:47:70:41:
         05:36:46:a4:69:5c:d6:92:7d:07:96:b7:0e:91:39:18:91:64:
         33:bd:41:9c:b1:72:df:d9:62:d4:a8:15:98:a7:e3:0f:3e:29:
         7c:33:22:97:06:77:15:11:ca:1f:87:69:d7:86:c9:1f:d3:ef:
         41:40:af:a9:29:fe:b8:a3:e2:48:32:97:4d:5f:bd:67:6e:f6:
         9b:c2:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:58 2024 by rpki-client on console-ams.rpki-client.org