Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230322e352e39362e302f32302d3234203d3e20323635353430.roa
File:                     3230322e352e39362e302f32302d3234203d3e20323635353430.roa (raw, json)
Hash identifier:          Dcy4CgGDv5tLwashOR+9oPk8yNbWQ3vfnUM6RTCGo4w=
Subject key identifier:   D7:B0:6D:99:A3:CC:24:24:96:EA:93:70:76:23:0C:45:87:CF:3B:B8
Certificate issuer:       /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial:       6FD44D000A74E30B0BEBA180471402EF7ACC87C6
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230322e352e39362e302f32302d3234203d3e20323635353430.roa
Signing time:             Wed 05 Jun 2024 05:40:00 +0000
ROA not before:           Wed 05 Jun 2024 05:35:00 +0000
ROA not after:            Wed 04 Jun 2025 05:40:00 +0000
asID:                     265540
IP address blocks:        202.5.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d4:4d:00:0a:74:e3:0b:0b:eb:a1:80:47:14:02:ef:7a:cc:87:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
        Validity
            Not Before: Jun  5 05:35:00 2024 GMT
            Not After : Jun  4 05:40:00 2025 GMT
        Subject: CN=D7B06D99A3CC242496EA937076230C4587CF3BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:ae:00:f2:aa:7d:bd:70:37:e1:31:93:a2:
                    82:e2:c4:1b:a0:f6:63:c3:69:f9:01:93:62:4f:48:
                    e1:41:76:91:35:03:67:16:c6:34:80:57:3f:06:e1:
                    92:a6:12:e9:35:e6:1a:ee:b9:20:e8:e5:6c:80:b1:
                    df:f7:54:a3:19:66:f9:5d:94:e7:8e:b3:0d:51:b9:
                    39:2d:93:39:ea:28:63:03:be:84:01:50:75:0b:80:
                    2a:67:a1:ed:7e:7d:77:f0:d6:61:22:ec:dc:76:5d:
                    10:75:58:81:c2:9d:e5:19:6b:f3:46:75:16:5d:ff:
                    57:f8:ce:03:d5:ea:08:99:20:28:28:7a:37:15:88:
                    24:10:63:e8:68:2e:6c:b3:19:ea:87:d2:e2:34:ba:
                    15:8d:ad:c9:22:32:c5:d4:f2:8a:9a:5e:77:d1:23:
                    a8:58:9a:4f:e6:6a:17:e8:6c:25:bf:3a:0a:2f:61:
                    a7:b9:20:03:c7:44:91:92:4f:17:96:73:d1:bd:7b:
                    04:00:d5:a3:c5:5a:df:fd:6e:eb:d0:73:6d:16:ae:
                    70:b6:8b:b1:93:f4:b3:c0:ad:a1:6d:b3:69:56:a3:
                    ee:ff:8f:21:78:4d:ff:24:1c:a1:71:28:65:ef:6d:
                    9d:5a:47:f1:e6:52:2d:09:69:7e:a8:99:a4:51:06:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B0:6D:99:A3:CC:24:24:96:EA:93:70:76:23:0C:45:87:CF:3B:B8
            X509v3 Authority Key Identifier:
                keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230322e352e39362e302f32302d3234203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:4e:04:22:93:c9:8d:d7:1a:7a:2e:eb:a2:fe:78:9f:7f:c3:
         de:9d:0f:1f:9b:4f:77:39:70:38:01:b0:b2:bb:c5:1e:1c:3d:
         64:19:45:8d:4b:88:27:aa:bf:72:44:2c:9c:fd:e4:33:26:a9:
         88:86:c1:65:d3:91:87:db:b4:8c:42:3e:26:70:9b:9b:7c:d4:
         af:43:e6:a9:0f:5e:41:9e:13:b9:f3:f4:90:0f:9e:2b:d4:94:
         09:e5:53:79:51:95:2f:97:aa:b6:b8:eb:57:0d:58:1f:34:38:
         5b:6e:8a:71:d4:33:a6:9c:8e:4e:fe:f3:1d:a3:d7:ab:7b:a4:
         e5:bf:f9:89:df:5f:b3:e7:74:20:15:63:d1:a1:8f:0e:a8:8d:
         2d:ac:4c:86:3d:52:76:a1:04:a0:8f:de:ee:1a:62:2a:5f:09:
         c5:0d:00:98:2d:1d:8a:35:4e:72:58:2a:72:5d:80:65:92:81:
         94:ad:2e:78:03:35:f8:71:23:34:41:a5:ab:37:91:52:24:0d:
         40:ec:12:f8:2f:a4:a9:9c:f2:b5:98:27:ad:09:cc:a0:15:9e:
         30:58:66:d7:d8:92:05:e8:15:ec:e2:9f:80:fb:9d:98:ea:de:
         a8:62:de:fc:3c:73:4d:a9:74:a2:79:6f:f8:b1:4d:9a:e7:b6:
         73:b7:74:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org