Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137372e302f32342d3234203d3e20323635363135.roa
File:                     3230312e3135312e3137372e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          /0JU3eipKOpe0aQEmd4OMwjzuooZdfqkpoggiu9X/bM=
Subject key identifier:   B4:CD:03:01:58:A5:09:3F:5D:21:D6:01:EA:46:88:22:B2:8B:2E:29
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       1E6562C338094D5DE8D59509EB50719177ED2DC2
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137372e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 05 Mar 2024 17:54:36 +0000
ROA not before:           Tue 05 Mar 2024 17:49:36 +0000
ROA not after:            Tue 04 Mar 2025 17:54:36 +0000
asID:                     265615
IP address blocks:        201.151.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:65:62:c3:38:09:4d:5d:e8:d5:95:09:eb:50:71:91:77:ed:2d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:36 2024 GMT
            Not After : Mar  4 17:54:36 2025 GMT
        Subject: CN=B4CD030158A5093F5D21D601EA468822B28B2E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:10:69:a6:3f:d2:c0:76:31:86:fd:7f:3a:
                    2d:da:0f:2e:bb:70:2b:b8:fc:2b:14:30:31:d3:57:
                    ae:1a:4b:1e:3b:6c:52:e1:70:fe:28:3d:c9:8d:a5:
                    05:62:fb:59:14:fd:4f:bd:4f:be:99:b0:ff:4e:a5:
                    37:e9:64:aa:0b:3d:f0:34:d7:17:de:2e:b9:c3:e1:
                    9a:51:c0:26:39:53:e2:d6:84:d8:1a:93:ee:95:7d:
                    94:2d:1b:3b:e2:50:93:e6:6a:9c:55:3e:cc:16:f7:
                    d0:13:b9:12:85:7a:f6:9b:62:ff:21:cc:06:ff:c4:
                    3b:c6:86:ea:3e:25:0a:7f:99:03:04:23:29:27:ba:
                    59:e6:69:cb:ce:71:5e:f3:d4:c5:2b:4b:af:5f:b0:
                    64:76:08:95:d8:bc:04:bd:ae:61:67:97:cd:49:7b:
                    c7:7e:27:fd:3f:89:6a:33:d3:75:84:9c:0f:31:60:
                    54:1d:a4:f3:2b:71:63:c8:82:e7:9d:84:b6:1d:3d:
                    15:96:76:df:cb:59:99:84:42:0c:3c:63:37:bd:35:
                    41:92:c5:fb:3d:9e:a0:ad:34:64:47:21:b9:ef:27:
                    43:89:8b:97:f7:c5:85:8d:fe:29:af:11:ea:e5:c2:
                    58:71:54:0e:8b:57:03:b7:d1:4e:03:14:8b:25:fe:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:03:01:58:A5:09:3F:5D:21:D6:01:EA:46:88:22:B2:8B:2E:29
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137372e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:74:1f:e7:ee:e7:e8:27:da:57:9e:6e:65:a4:15:83:85:14:
         1a:cc:69:4c:59:59:45:9c:2a:73:8c:16:d3:c1:2b:0c:51:62:
         e0:1e:a0:75:41:37:58:36:d3:44:c5:f0:c1:ac:38:6f:26:72:
         4d:b9:c1:68:f8:af:94:7d:74:0b:3e:5e:e8:9c:c5:8f:68:a4:
         79:76:ec:f4:d4:96:9a:20:ec:2c:90:40:92:4d:32:68:fe:87:
         b4:07:ac:73:db:1a:be:11:02:b9:bb:39:35:1b:b2:ba:c3:b5:
         e5:f5:c3:7e:05:7d:2c:c7:ed:8c:92:c2:24:ea:9f:23:a9:78:
         b5:ad:83:b2:dd:f4:4d:ab:3d:6c:c3:a4:56:84:44:de:ce:89:
         0d:64:90:46:ce:8b:78:c8:06:31:3c:ce:54:2f:7b:1e:00:53:
         21:32:6b:d8:34:8c:a5:d3:24:5c:49:a0:db:82:36:43:84:25:
         00:fe:42:e5:f4:fd:4e:d6:ad:91:fe:5a:6d:62:a5:bb:f2:b7:
         c4:00:0c:71:9a:93:f5:3b:ae:a8:af:c2:34:f3:d6:4c:45:71:
         c5:b7:62:d8:f2:28:14:86:3a:b3:db:b5:0a:3b:df:fc:b2:10:
         6a:f6:77:1a:46:08:79:62:2f:9b:77:fc:9f:85:26:7b:03:4f:
         ef:a0:e0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org