Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e3132382e302f31382d3234203d3e203136363239.roa
File:                     3230312e3234362e3132382e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          QWP/rSPlQMW1uXVNDUi0MT9jIzfmmo2u8961Z6xOzQ4=
Subject key identifier:   72:98:9D:41:81:5C:B0:AD:BB:B3:C7:4B:28:8D:79:D7:44:46:5C:C6
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       78D2E724497FC1965EE5DC47B02E99B9A48CB910
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e3132382e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:20 +0000
ROA not before:           Tue 05 Mar 2024 17:47:20 +0000
ROA not after:            Tue 04 Mar 2025 17:52:20 +0000
asID:                     16629
IP address blocks:        201.246.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d2:e7:24:49:7f:c1:96:5e:e5:dc:47:b0:2e:99:b9:a4:8c:b9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:20 2024 GMT
            Not After : Mar  4 17:52:20 2025 GMT
        Subject: CN=72989D41815CB0ADBBB3C74B288D79D744465CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:02:0b:8c:e4:d5:62:1e:72:f2:ab:8b:3a:
                    03:ad:c0:54:43:a1:76:3c:e8:9e:9f:df:ce:21:4c:
                    35:b5:14:8f:5b:53:24:2e:4b:e0:3e:21:b6:18:1d:
                    f1:e3:9c:75:dd:18:04:9e:0f:43:01:b0:87:88:f7:
                    f9:7f:48:bf:d3:05:83:c0:62:19:18:48:77:0c:a7:
                    1e:59:a3:d8:04:76:26:8c:2a:c0:ed:66:36:47:97:
                    c2:1b:ba:0c:6f:34:61:89:84:02:ce:d7:c0:4f:27:
                    a6:90:1d:e6:9f:99:ca:c2:93:41:73:6e:e2:67:b9:
                    5a:c1:55:89:ae:43:c6:33:e5:aa:76:ef:96:98:9a:
                    4e:a7:7a:61:3f:fd:8b:cd:a6:78:42:db:3e:29:70:
                    9d:37:2f:7f:b7:fe:8e:13:ce:dd:f4:16:5e:2b:b4:
                    0b:9a:0d:86:e2:42:78:71:2b:ef:d9:7b:59:a0:9a:
                    42:3c:de:a4:48:03:6c:5f:3a:b9:7b:c9:11:c6:6d:
                    fa:32:f7:ac:5c:3a:55:e2:ff:56:4a:1c:af:22:1f:
                    3b:50:39:bf:12:2f:01:3f:0c:aa:80:99:97:b5:d0:
                    8c:02:93:61:14:19:d4:5e:16:1d:cc:a6:74:b7:8b:
                    02:d7:a7:19:f5:f7:9a:34:94:b7:7a:d9:c1:e5:5a:
                    34:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:98:9D:41:81:5C:B0:AD:BB:B3:C7:4B:28:8D:79:D7:44:46:5C:C6
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e3132382e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bd:29:e1:48:b4:66:47:fd:69:35:0d:b1:a0:c2:34:45:a5:b7:
         70:0a:a5:47:7b:34:89:a2:7a:43:63:ef:ab:60:8b:81:6c:dd:
         51:3f:37:7d:b8:b7:44:66:13:53:8e:3e:b1:f1:e3:6b:0c:d4:
         66:d5:27:fd:65:b4:1b:a0:af:6c:b6:fb:5c:cf:4e:0c:38:c1:
         1f:7d:eb:8f:b0:f7:50:b9:12:b2:ec:c0:0a:ea:82:fd:dd:23:
         c0:1b:7c:ca:38:5b:37:15:ac:50:fd:0c:0e:aa:f1:f4:c5:42:
         38:9a:5a:b2:25:86:f6:dd:d7:2b:16:62:9f:61:29:2b:71:40:
         21:0d:21:7e:1c:25:f6:13:a6:d2:30:11:ab:8d:25:58:73:99:
         cf:cf:c3:1d:6e:1c:03:2b:5a:08:02:de:8e:ac:c9:e7:03:92:
         9a:77:3c:b9:7b:cd:02:c4:c0:3c:f1:4b:b5:b4:17:12:09:51:
         23:b7:c8:4b:5c:0b:18:ea:d8:7a:c9:20:69:00:c2:16:77:27:
         bf:c8:4c:db:ab:0b:be:7e:77:55:91:91:0c:4e:8e:39:3f:06:
         7a:ad:bb:3f:8b:05:53:5f:66:59:98:d4:1c:8d:4f:f4:c4:6b:
         3d:c2:cf:6c:e2:15:c3:ad:5a:fd:d1:f0:ba:67:90:61:57:34:
         d8:50:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org