Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3135362e302f32342d3234203d3e20323635363135.roa
File:                     3230312e3135312e3135362e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          PRsQY9pl4m+KkXOWKS4e2dR0DQHJV9fhWm1rqGE5+50=
Subject key identifier:   E1:2A:2E:BE:9C:4B:BA:E5:74:9E:13:CF:D0:FE:B3:B4:02:1C:D1:4C
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       79EE817A3CE86A5EAC9BBA0272626D2CF2BBCFA9
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3135362e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 05 Mar 2024 17:54:34 +0000
ROA not before:           Tue 05 Mar 2024 17:49:34 +0000
ROA not after:            Tue 04 Mar 2025 17:54:34 +0000
asID:                     265615
IP address blocks:        201.151.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ee:81:7a:3c:e8:6a:5e:ac:9b:ba:02:72:62:6d:2c:f2:bb:cf:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:34 2024 GMT
            Not After : Mar  4 17:54:34 2025 GMT
        Subject: CN=E12A2EBE9C4BBAE5749E13CFD0FEB3B4021CD14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:93:a5:81:cb:42:ef:ee:95:b5:85:a3:63:
                    0a:09:36:95:c7:a0:bb:44:2c:2e:1f:6a:2f:2d:61:
                    d8:59:99:16:64:9b:fe:e3:b3:ce:e6:56:d4:a3:a4:
                    11:e0:59:f4:76:3e:41:33:e1:48:de:75:e4:81:cf:
                    10:8f:9b:e6:0d:9c:e5:10:61:5d:ac:0d:c0:8b:36:
                    dd:b9:b3:45:44:55:96:22:0a:89:d9:24:19:89:1a:
                    a2:00:b1:03:54:2e:25:be:09:40:47:ed:15:45:d3:
                    e7:11:d2:b8:6e:d4:78:80:04:a7:fa:2a:75:62:f5:
                    9a:1e:ef:fb:47:80:62:5f:fc:b0:0c:93:b5:c0:ef:
                    09:d7:d0:7a:3b:19:25:bd:c7:89:8d:c5:59:da:ea:
                    22:34:ff:30:f6:f3:1f:04:5e:4d:f6:20:b3:73:dc:
                    61:f6:dc:8c:4e:6b:5a:b8:53:92:1d:f7:9b:bb:41:
                    04:34:ae:3e:99:1a:17:11:8e:da:bd:55:6d:25:8e:
                    78:53:d2:f5:0f:0a:58:36:e3:a5:14:22:61:4c:1a:
                    1e:f9:8c:5e:32:26:b7:87:b9:5e:87:ca:69:25:c6:
                    a9:fe:f8:7b:3e:3f:ca:20:72:eb:cb:c0:c1:51:53:
                    22:2f:56:cf:19:42:12:2a:a6:71:e2:79:c9:65:b2:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2A:2E:BE:9C:4B:BA:E5:74:9E:13:CF:D0:FE:B3:B4:02:1C:D1:4C
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3135362e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:3b:00:12:27:42:bb:7e:16:b6:5b:02:53:c5:b4:58:fe:91:
         34:10:8e:e2:a0:16:3d:47:34:ec:bd:e1:2d:c2:21:b2:44:41:
         07:38:91:52:99:8d:7a:02:c7:7f:ae:4f:2e:ba:f2:ee:30:c8:
         85:cf:72:5c:11:9c:33:46:62:c5:68:f5:c7:e9:48:49:f6:5c:
         f5:65:5d:e6:fd:94:d7:46:25:92:0a:12:65:36:52:75:51:48:
         1c:9f:90:54:f0:d6:b2:b4:e2:1d:1e:cb:c4:78:21:24:6c:76:
         c6:52:80:e4:6f:56:1f:dc:5d:e8:dc:a3:90:81:df:0c:68:bb:
         d1:17:49:9b:b8:67:d3:b7:6c:7b:69:eb:be:9c:71:20:e5:42:
         6e:d2:97:db:4f:ae:c9:62:fc:a7:2a:57:55:8d:15:09:79:66:
         65:23:02:f8:a5:7a:33:b1:93:1d:af:b2:6e:36:82:58:44:af:
         db:f5:30:d3:2a:b5:54:1a:6c:94:88:8c:d3:c4:e2:16:8b:a6:
         74:f4:9c:c9:f3:67:d5:4d:da:43:20:48:d6:6a:81:e4:1b:a0:
         a4:5b:4a:a0:b2:ff:b4:51:84:40:28:44:7a:d3:38:fd:19:9b:
         a9:5b:f5:f7:b4:a1:3d:04:d3:65:63:8a:f6:e1:b1:08:45:c2:
         61:61:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org