Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232322e3139322e302f31382d3234203d3e2037343138.roa
File:                     3230312e3232322e3139322e302f31382d3234203d3e2037343138.roa (raw, json)
Hash identifier:          2SZ4gXYE/RWKPst3sbGtxlnl0enKK80SQFYGky7eL2M=
Subject key identifier:   9D:2E:51:E6:A2:2D:EC:86:02:7D:05:CD:0B:9E:2A:02:7D:32:CD:08
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       6DAB51E3E81AB43C934ED467C393F95F9CBCFCD0
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232322e3139322e302f31382d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:17 +0000
ROA not before:           Tue 05 Mar 2024 17:47:17 +0000
ROA not after:            Tue 04 Mar 2025 17:52:17 +0000
asID:                     7418
IP address blocks:        201.222.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ab:51:e3:e8:1a:b4:3c:93:4e:d4:67:c3:93:f9:5f:9c:bc:fc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:17 2024 GMT
            Not After : Mar  4 17:52:17 2025 GMT
        Subject: CN=9D2E51E6A22DEC86027D05CD0B9E2A027D32CD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:e5:ea:1d:7d:14:fe:ba:f7:4d:08:de:2e:
                    3e:40:f6:f0:0d:57:ed:7d:32:a5:1c:6d:00:fb:e4:
                    8a:36:46:d0:3f:2f:c7:d4:d0:93:0b:93:74:17:c2:
                    44:65:39:2f:2b:94:f1:35:7d:76:66:43:6f:08:5e:
                    d0:6e:d5:53:f4:e2:af:b0:c9:cb:10:bb:de:7d:fd:
                    6e:57:03:b7:fb:1e:5e:f7:e8:f3:e9:80:31:a3:45:
                    8f:a8:44:f1:16:3e:1c:23:22:dd:d5:f2:c6:3b:af:
                    46:24:33:7f:12:37:6b:5b:ee:21:ac:3c:b2:6f:2b:
                    fd:de:e3:f9:b6:e1:a3:58:8b:8d:84:0c:ce:92:bd:
                    31:4f:74:98:fb:43:76:c2:0d:b4:8f:cd:52:4b:4b:
                    54:42:50:e3:9e:b0:c7:a0:ca:e1:36:96:7d:cf:26:
                    26:7d:07:65:52:11:57:2f:5b:6c:8c:da:d4:33:a6:
                    46:a9:a0:a7:54:ce:69:bb:37:3e:4c:1f:93:d9:e6:
                    f0:0d:b5:b8:3a:01:31:57:c4:78:f6:b8:2a:b2:00:
                    63:08:f7:36:28:a1:87:f0:ec:bc:e6:81:16:5b:f8:
                    51:8a:ab:8f:8e:55:90:e1:dc:1c:7a:3d:1e:c3:14:
                    72:ea:0c:33:f9:6c:1c:43:7a:71:16:95:68:b9:db:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2E:51:E6:A2:2D:EC:86:02:7D:05:CD:0B:9E:2A:02:7D:32:CD:08
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232322e3139322e302f31382d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:9b:3f:fa:1a:23:b3:37:ff:59:a6:4a:89:01:5c:9b:17:d1:
         08:eb:e5:e5:0b:c1:73:d3:85:d5:2a:08:13:9d:e8:5b:bd:ec:
         f3:54:ea:82:ef:90:01:aa:cf:8d:a6:2f:ef:8c:69:a7:cb:3d:
         24:57:44:b7:03:d6:7a:00:4f:05:c9:84:98:9c:c0:8e:8b:8b:
         71:d4:e7:44:56:ca:28:3e:0a:b6:12:e4:de:24:aa:3d:2d:b0:
         24:45:bc:a0:70:8e:fa:3a:17:6d:4b:ab:bd:f6:e7:61:65:ec:
         0d:f8:f8:63:3e:af:c2:6d:fa:3a:a4:26:7c:45:67:e2:6e:e3:
         ad:9e:02:ec:44:93:ed:cd:3a:5a:9a:ea:5e:98:a0:6a:6b:79:
         0d:3e:e8:03:cd:40:ec:18:1b:3a:d5:3a:80:e8:f6:12:3a:21:
         c7:6d:b1:48:22:00:78:02:59:d4:e5:fb:6c:e2:93:17:38:00:
         9f:f6:94:ed:b0:73:63:2d:21:d4:35:91:aa:f1:f1:1b:e0:85:
         50:54:f0:d7:7e:57:54:0e:d4:7e:f7:e7:ad:f0:de:66:67:fe:
         b6:ae:0d:12:2a:82:08:32:c1:6a:b4:8f:0a:79:8f:d3:e2:bc:
         93:2a:68:7a:d2:d2:d0:98:ee:61:19:44:08:45:c8:98:7c:78:
         4d:11:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org