Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa
File:                     3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa (raw, json)
Hash identifier:          odOLtIHNClku0MtLhZoFoh+Qw1QJfaZlUxkI0uulu6E=
Subject key identifier:   4C:E8:4B:D8:4C:7C:12:EC:57:14:5F:1A:E7:B4:A2:8F:B3:40:8E:93
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       734631CB28C8BE90446F34D5BDFD6D4BEF78CB22
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa
Signing time:             Tue 05 Mar 2024 18:11:46 +0000
ROA not before:           Tue 05 Mar 2024 18:06:46 +0000
ROA not after:            Tue 04 Mar 2025 18:11:46 +0000
asID:                     28015
IP address blocks:        201.217.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:46:31:cb:28:c8:be:90:44:6f:34:d5:bd:fd:6d:4b:ef:78:cb:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Mar  5 18:06:46 2024 GMT
            Not After : Mar  4 18:11:46 2025 GMT
        Subject: CN=4CE84BD84C7C12EC57145F1AE7B4A28FB3408E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:65:97:45:b8:61:d6:68:8b:da:6a:44:75:
                    3b:15:b9:cb:cc:55:a0:59:3c:ac:da:e6:79:08:df:
                    bb:03:c5:3d:5c:86:fb:4a:77:3a:57:b8:e0:b5:f3:
                    b6:6c:b3:a3:86:b3:38:1c:c6:1f:53:b1:d3:c3:ce:
                    f1:3d:5f:27:92:82:59:e8:91:1f:31:83:26:81:81:
                    5e:30:d8:da:24:45:64:8d:20:ab:de:3d:0f:7d:50:
                    4d:a7:69:19:cb:71:31:54:dd:31:e7:43:41:94:e4:
                    bd:8f:50:4c:f0:06:b6:9b:b8:ef:74:35:59:fb:ac:
                    58:fa:bd:12:20:71:bd:14:51:2b:61:af:2d:36:ff:
                    5c:3d:5a:6f:8f:76:8f:e2:39:bc:17:e4:e6:1e:96:
                    71:cd:71:a1:16:8c:c9:d5:8f:03:71:48:4e:69:62:
                    61:71:e2:c9:46:14:71:96:e8:c7:85:3d:b1:d1:06:
                    15:64:d3:5e:ff:39:b1:33:33:9a:7b:2e:a5:75:5f:
                    24:b9:dc:a6:42:36:05:ea:f5:69:2f:14:11:6a:7d:
                    26:ff:eb:0d:dd:5e:7e:59:d2:4b:c5:18:5b:23:35:
                    81:8d:c3:3c:c6:20:b5:f4:4c:60:5b:8a:ed:a0:6a:
                    16:a7:bf:ed:d7:1d:1f:82:11:35:e5:0d:6d:e4:8f:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E8:4B:D8:4C:7C:12:EC:57:14:5F:1A:E7:B4:A2:8F:B3:40:8E:93
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:8c:cc:eb:a2:1b:9f:24:b3:e2:13:3e:28:f5:0c:56:ad:
         ac:e9:24:14:17:be:12:45:b1:3b:27:9d:55:be:96:e3:ac:b1:
         56:5f:74:42:7a:33:de:2e:ca:68:d2:6a:2c:bd:5e:b0:64:ec:
         82:86:55:18:3f:f5:ef:42:af:aa:d4:96:40:6e:30:40:57:ef:
         25:8b:1c:9f:e0:40:a1:2c:fd:c8:26:53:21:c8:c3:e5:58:12:
         84:4d:4c:73:d0:97:ee:9a:5b:c2:52:db:de:51:fb:eb:87:c8:
         83:3f:30:f9:40:54:66:61:e6:03:ca:8d:dd:80:50:99:e7:22:
         f5:ca:6e:00:6c:d0:08:9b:68:b1:39:c4:06:83:ab:4e:35:ed:
         39:d6:44:c3:2e:ab:eb:a1:b2:a5:85:81:a3:47:28:cf:06:86:
         92:12:72:03:d1:13:fa:e1:08:92:81:68:96:f9:a1:b6:db:3f:
         7c:8d:68:1e:00:6a:c6:e7:60:50:c7:23:d4:8e:f2:b2:77:12:
         df:71:64:a0:66:cf:05:2b:21:05:91:50:ab:8f:f7:3b:d7:3b:
         0a:ce:15:af:e1:90:cd:cb:d9:fe:94:bb:da:55:bb:9c:c6:99:
         2f:a4:a0:26:21:6f:6c:37:1a:13:02:a8:03:7f:34:0d:19:00:
         92:6b:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org