Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e203131313732.roa
File:                     3230312e3135312e302e302f31362d3234203d3e203131313732.roa (raw, json)
Hash identifier:          8WZam8BqSjp2pEO/CCT/dM5cBxi9W6vrpYLvA7tBaV0=
Subject key identifier:   9C:86:44:02:7B:C4:AA:0C:E5:16:7F:76:9B:84:35:2A:46:DB:5D:A1
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       69FA7B30018075E20592D1A59CBE951364219586
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:36 +0000
ROA not before:           Tue 05 Mar 2024 17:49:36 +0000
ROA not after:            Tue 04 Mar 2025 17:54:36 +0000
asID:                     11172
IP address blocks:        201.151.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fa:7b:30:01:80:75:e2:05:92:d1:a5:9c:be:95:13:64:21:95:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:36 2024 GMT
            Not After : Mar  4 17:54:36 2025 GMT
        Subject: CN=9C8644027BC4AA0CE5167F769B84352A46DB5DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:ea:fe:bb:67:d7:d9:b2:29:b1:4c:ca:d9:
                    ef:f9:21:0b:f5:e9:8d:e9:fd:f6:61:2e:90:21:10:
                    5e:f7:b6:23:03:7c:75:ec:60:2b:27:4e:9d:62:6b:
                    33:8a:09:21:70:6d:a8:42:b4:62:ec:fb:46:c7:16:
                    da:ad:c7:95:98:c4:1d:33:22:dc:92:32:8c:d9:14:
                    4d:87:a2:7a:79:c0:06:62:8c:00:a6:93:1f:c7:bf:
                    3d:7e:f7:4a:cb:59:15:0d:39:6c:be:95:f0:2d:8e:
                    f1:29:c4:a4:f8:c4:d2:1f:14:1a:b1:62:a6:22:b2:
                    be:c2:72:5c:79:73:be:04:a1:bf:e1:23:54:cc:fd:
                    96:ec:9c:c3:35:e5:9a:ec:f3:36:31:7f:30:41:e6:
                    b9:7a:6d:0f:97:f3:a9:74:ba:ca:e6:11:7c:ca:81:
                    f1:a0:b9:a7:f5:df:4f:a1:47:b0:c7:39:90:90:04:
                    03:ed:be:1c:7d:df:5a:d1:41:a9:8a:06:ac:77:5b:
                    9d:3d:1f:e0:ac:7f:5b:c5:ac:78:36:f4:46:74:cc:
                    b5:22:1c:62:fe:3e:af:24:d7:a7:de:18:bc:b1:34:
                    33:dc:ef:ee:c3:c7:78:e3:7b:2e:d2:2f:e1:8a:dd:
                    dc:55:1e:35:da:cc:37:3d:2f:4f:6d:2c:08:9d:a6:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:86:44:02:7B:C4:AA:0C:E5:16:7F:76:9B:84:35:2A:46:DB:5D:A1
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:9b:f5:4d:08:28:ca:21:59:92:0e:f9:9e:bf:55:5a:75:
         66:67:fc:a8:01:19:28:fd:d7:15:af:48:8e:5a:af:f2:c5:1a:
         fe:5a:bc:71:d4:2d:a4:7a:ec:ba:c5:ad:c5:31:27:2b:02:94:
         47:86:94:e2:e5:c6:80:c3:24:d4:2c:7e:a7:d8:3b:38:d1:80:
         2f:1b:e0:9e:ec:97:7c:b0:95:66:ac:15:62:a9:cd:fc:ba:ba:
         9e:41:23:8a:1d:85:63:b5:40:3d:5e:d4:64:e0:13:2a:76:6f:
         74:fa:45:58:26:49:2a:23:f4:a9:c6:a5:cb:24:8e:f0:8f:cb:
         aa:52:ff:b0:fe:0a:04:54:be:70:8d:de:ac:1a:13:bb:b1:47:
         f8:8e:bf:f3:1e:8b:77:32:66:c7:a6:29:a2:7a:76:31:70:9e:
         c2:5a:a5:c8:72:19:b8:8e:e5:98:0d:65:d2:f5:e4:9f:fe:9c:
         78:54:d0:ba:02:ca:0f:e8:bc:ff:8f:b5:03:2f:a0:ae:e7:f2:
         da:23:02:a7:e5:83:39:f2:9a:30:1e:0f:c5:d4:bd:f8:fe:7c:
         ef:45:bd:6a:3e:f0:ef:b6:94:04:e9:97:08:29:4e:3d:a2:15:
         0f:c2:73:44:86:11:13:4e:c0:c1:ff:aa:48:a4:b0:89:e1:79:
         95:24:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:49:59 2024 by rpki-client on console-fra.rpki-client.org