Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232322e3132382e302f31382d3234203d3e203136363239.roa
File:                     3230312e3232322e3132382e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          mBKiIK1EZGYjIspXFPd6R4pIcNOaJ3bbn1kRLeHbNmM=
Subject key identifier:   57:24:F3:E8:39:50:CB:13:6A:74:3F:5A:1C:4E:6A:7D:F9:9F:6F:82
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       1B6145E7D2B02B87CDB78902431D4889CD9FD244
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232322e3132382e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:24 +0000
ROA not before:           Tue 05 Mar 2024 17:47:24 +0000
ROA not after:            Tue 04 Mar 2025 17:52:24 +0000
asID:                     16629
IP address blocks:        201.222.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:61:45:e7:d2:b0:2b:87:cd:b7:89:02:43:1d:48:89:cd:9f:d2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:24 2024 GMT
            Not After : Mar  4 17:52:24 2025 GMT
        Subject: CN=5724F3E83950CB136A743F5A1C4E6A7DF99F6F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:fa:8b:10:32:ca:84:67:48:74:4d:d6:1d:
                    e6:9f:bd:ed:54:29:e1:2b:39:87:8a:55:7d:a4:18:
                    00:f5:e4:2a:47:cb:b3:b6:09:79:96:c4:2e:f0:29:
                    cf:22:9c:34:34:fc:81:f0:e2:e9:46:23:c4:d5:52:
                    a5:8a:a3:06:1f:dd:16:a7:29:dd:e7:9e:99:a6:ab:
                    7a:6e:1e:3f:01:fc:31:4e:d5:2d:a1:4a:03:44:9e:
                    80:63:5b:bd:b6:5b:ec:88:62:94:98:24:f0:f9:fe:
                    ce:ea:3f:4a:b9:f4:7f:95:5b:05:d2:0d:e0:95:72:
                    3a:e6:13:f2:0d:e8:ee:93:55:61:96:3a:69:ba:87:
                    42:0a:8d:5a:8b:f7:b6:7f:33:d6:dc:d0:7f:7a:2f:
                    43:ab:11:e8:4b:c4:a1:99:78:ae:3f:88:9e:8e:13:
                    75:32:69:ef:a3:48:2c:05:f2:39:41:f1:51:6c:27:
                    8f:f2:2c:e6:8d:0e:fe:61:b5:b4:bd:63:5b:63:14:
                    2b:88:a8:8c:c6:20:e7:db:9c:54:cf:4d:af:07:f4:
                    3d:ba:88:43:0c:ff:0e:8f:52:a8:97:d3:b0:cd:87:
                    9b:5d:4d:24:a0:ca:0e:a0:fd:59:98:b3:2d:01:42:
                    ba:b7:9c:9b:b4:f7:0a:63:67:63:dc:c4:1c:46:6f:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:24:F3:E8:39:50:CB:13:6A:74:3F:5A:1C:4E:6A:7D:F9:9F:6F:82
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232322e3132382e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:b4:42:c9:4d:53:78:7f:cc:11:eb:eb:8f:63:b3:68:e5:
         c6:48:e7:fc:b3:34:5b:60:a2:f8:5f:7a:38:32:7b:83:0a:15:
         8b:ad:e0:9a:95:c6:0c:e1:67:85:3d:9d:95:ac:55:84:27:07:
         c6:e6:af:a5:a0:94:04:84:af:99:9a:84:b4:ba:e1:7a:72:77:
         f1:bd:dd:c5:ef:6c:62:0a:1c:89:7c:51:7d:f4:29:03:94:04:
         c5:20:bd:bf:64:d9:9c:ca:6e:d8:65:4c:a6:37:c5:c9:32:75:
         ab:93:85:c3:7a:bd:e8:80:18:d1:70:9f:83:5c:48:3e:2f:04:
         72:5e:66:c7:f1:bc:59:5d:ce:76:de:c3:e7:4b:2b:e2:28:37:
         19:68:af:04:de:b2:53:09:9e:b0:1f:9a:af:fe:3f:01:5a:f4:
         a1:94:81:8d:36:db:bc:b6:93:d6:a9:ba:47:f1:59:58:39:13:
         3c:6e:9a:9c:6f:3d:19:6a:6f:b5:27:e1:93:da:5b:61:15:8e:
         31:6f:28:88:c4:60:47:d3:a5:fe:b7:5d:72:6c:87:83:83:0f:
         ed:84:44:12:78:fd:e8:6f:4a:1d:b6:b3:f5:ac:eb:26:ff:bf:
         19:d7:f0:92:04:2f:ad:5e:c4:e5:9d:45:9e:9e:9a:0a:43:f3:
         11:36:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org