Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa
File:                     3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa (raw, json)
Hash identifier:          kkiUYKoLwqsqJ9tvINbxhPViXGmFtfEc8PCmddm+no0=
Subject key identifier:   48:1C:1A:7B:5A:8E:C9:40:34:79:EC:E0:6D:3C:2D:D3:F3:3A:6F:05
Certificate issuer:       /CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D
Certificate serial:       44B81ED7D4AC8D3CC08B9FE828365162B4D1A9D7
Authority key identifier: AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa
Signing time:             Tue 15 Oct 2024 18:50:00 +0000
ROA not before:           Tue 15 Oct 2024 18:45:00 +0000
ROA not after:            Tue 14 Oct 2025 18:50:00 +0000
asID:                     263695
IP address blocks:        201.131.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b8:1e:d7:d4:ac:8d:3c:c0:8b:9f:e8:28:36:51:62:b4:d1:a9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D
        Validity
            Not Before: Oct 15 18:45:00 2024 GMT
            Not After : Oct 14 18:50:00 2025 GMT
        Subject: CN=481C1A7B5A8EC9403479ECE06D3C2DD3F33A6F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:d6:8b:9a:2a:21:5e:6e:cf:f1:9d:06:cb:
                    e8:ac:ff:1a:f3:a3:f2:0a:4b:58:0d:9f:67:19:c1:
                    7f:3e:78:66:60:4a:ec:e5:14:f1:7a:c3:1f:36:dd:
                    4c:1a:a6:46:c7:56:16:c7:5c:16:15:86:7a:db:ec:
                    67:ef:49:34:00:a8:4d:0a:a0:ed:3f:89:df:50:62:
                    9a:b5:a0:e5:79:fa:79:dc:57:a2:3d:17:b3:fb:29:
                    e2:a5:70:79:9e:e5:df:b8:12:81:53:84:ec:1b:d2:
                    b7:3d:40:7b:3d:f9:c0:ff:66:bb:87:36:5f:17:53:
                    6e:ec:6e:15:09:67:21:62:41:1a:fb:ae:71:c8:6a:
                    b1:b1:33:ef:9c:78:80:c3:77:ed:71:f9:7a:0d:50:
                    e5:52:16:5b:d3:91:a8:b3:26:0c:0e:8c:f5:59:1c:
                    fe:1a:c4:bb:be:8a:be:c8:0e:91:9f:cd:65:0d:fb:
                    61:c6:56:55:32:11:c6:99:fc:30:84:ff:e1:f7:ac:
                    70:11:22:8e:f2:ee:5d:f0:03:63:93:0b:71:f6:e4:
                    59:05:76:25:d0:f1:a7:63:ef:6f:c3:59:8e:fb:dd:
                    50:ad:95:40:37:e2:a9:95:c8:83:be:83:d9:6a:4a:
                    4d:cf:cc:61:5a:87:43:fd:89:c3:02:4c:b0:dc:a1:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:1A:7B:5A:8E:C9:40:34:79:EC:E0:6D:3C:2D:D3:F3:3A:6F:05
            X509v3 Authority Key Identifier:
                keyid:AF:DB:6E:B0:A5:26:B5:C5:EB:6B:D0:15:66:C3:8D:FB:7F:DD:18:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFDB6EB0A526B5C5EB6BD01566C38DFB7FDD181D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D88BB9FDF17855E64284BB8CF1A5D0DC97D0D6A0402B4656FFA761571E1443FB/0/3230312e3133312e3132322e302f32332d3234203d3e20323633363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:f9:1b:14:be:0b:6d:f0:ad:3c:ae:a4:d6:80:7b:3e:56:84:
         c3:95:5b:50:ae:a7:f9:22:a5:8c:5f:d5:39:88:a6:65:ca:83:
         e1:a7:b2:fc:d0:24:6e:f0:72:f9:b7:45:c1:3b:7a:80:cb:5e:
         13:98:1b:35:c7:67:e4:17:78:4a:f5:c2:e1:89:cb:3b:29:56:
         43:73:58:fc:c1:65:54:24:4d:d3:ed:4a:cf:3e:f6:7d:a8:b6:
         7b:ae:67:1e:6b:a7:22:02:62:b7:77:10:da:75:4f:36:50:d1:
         7c:af:f2:fd:71:ea:7e:b0:34:08:ab:b9:10:77:82:51:fa:88:
         2f:64:1b:70:04:7c:ee:8f:b3:4d:90:c1:c8:cc:3c:35:17:9f:
         2c:af:16:1c:c8:37:30:a9:7b:13:cd:a0:d8:1a:34:2d:04:02:
         f3:de:b6:7a:13:19:76:4e:6a:81:84:57:b8:4b:3f:6e:5e:47:
         58:87:a3:5b:fa:22:b3:16:42:3e:7a:ba:82:5d:32:5f:59:3a:
         ff:d3:b1:1e:0e:03:38:30:3e:7b:8f:bf:08:6d:01:69:8f:be:
         9f:92:a1:77:48:6f:27:ee:52:59:70:f5:42:94:0d:e0:8a:64:
         8e:53:bb:bc:92:91:aa:18:30:72:8f:dd:88:5e:ae:6d:4e:fa:
         7a:18:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:57:20 2024 by rpki-client on console-fra.rpki-client.org