Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa
File:                     3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          qg4zx5bxg5UZ/mJHCvtanEhu3Pq6DFeYk0C5UmbIjL4=
Subject key identifier:   A0:F4:23:2F:C4:0F:9B:AA:F8:03:66:FC:01:D3:AA:79:E1:15:CE:F7
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       3119069998A801B950C22FE0732B4A57A2C6B2DA
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 05 Mar 2024 17:54:33 +0000
ROA not before:           Tue 05 Mar 2024 17:49:33 +0000
ROA not after:            Tue 04 Mar 2025 17:54:33 +0000
asID:                     265615
IP address blocks:        201.151.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:19:06:99:98:a8:01:b9:50:c2:2f:e0:73:2b:4a:57:a2:c6:b2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:33 2024 GMT
            Not After : Mar  4 17:54:33 2025 GMT
        Subject: CN=A0F4232FC40F9BAAF80366FC01D3AA79E115CEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:f7:02:39:b8:ec:38:3d:dd:70:af:5c:a9:
                    a2:5f:96:7f:6b:e1:c7:85:2f:2f:e6:52:d2:29:59:
                    e5:06:e3:4c:31:79:e0:a4:2e:3f:14:7e:37:5a:11:
                    00:23:bf:f3:49:b8:40:5d:e8:a1:3c:4b:a5:30:2b:
                    4b:55:79:6e:5b:cb:44:b8:fe:c4:ec:39:c5:0b:25:
                    c9:35:e9:65:ce:5d:97:d6:79:f9:0d:21:72:e1:97:
                    1b:80:e6:f4:e9:b9:d1:9c:07:24:6a:6f:48:11:fd:
                    f7:d2:72:75:22:53:f5:0a:15:c2:8e:f8:c8:99:b3:
                    e4:d0:5f:80:44:ba:96:10:d3:4c:cb:fe:a0:f1:a3:
                    8a:c7:bf:c2:61:99:35:3a:ae:5a:66:5c:2f:5f:ba:
                    08:b0:07:73:61:06:ce:65:40:b2:89:7d:20:9b:fd:
                    e5:4f:96:91:21:49:84:5a:11:9f:c0:61:03:63:01:
                    3b:c3:e9:9f:d1:5e:df:76:53:29:59:f6:b2:fb:98:
                    53:23:68:c1:ed:38:59:21:2a:9b:9e:01:0e:f8:8d:
                    6f:b9:0f:44:29:00:fe:71:a8:e8:b9:7a:c0:45:4e:
                    82:40:ea:91:44:11:df:29:cd:af:03:20:20:10:f0:
                    1e:49:35:d6:9a:48:76:9c:97:87:df:c5:29:3e:92:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F4:23:2F:C4:0F:9B:AA:F8:03:66:FC:01:D3:AA:79:E1:15:CE:F7
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:f7:c0:fe:21:02:ea:88:a1:96:e5:89:26:91:81:32:c2:97:
         9d:0b:a7:63:47:c0:13:8f:32:0a:a9:cd:82:6e:4a:1d:db:d1:
         68:de:67:aa:a5:ef:05:3f:e3:29:42:57:c1:25:05:3d:ac:68:
         9a:69:9c:dd:46:b5:5b:81:31:2f:36:81:52:41:c6:6a:01:d8:
         32:1b:e7:5a:2e:65:89:38:0c:df:b5:7f:4d:a2:26:23:f6:1e:
         a6:6c:06:31:94:36:a2:17:ec:fc:c8:f6:ec:bd:72:ee:e4:83:
         e8:31:b4:4a:8c:40:de:d5:bf:e8:67:d7:1f:60:26:08:b9:2e:
         71:30:67:5c:d8:f1:f9:ce:89:4d:7e:2c:f3:be:c1:da:f4:50:
         34:ca:6f:a8:63:db:7d:b7:5e:93:d5:22:c9:ca:92:32:89:da:
         69:24:14:31:db:8e:a3:d8:80:99:4c:42:c8:73:28:1e:76:33:
         d7:f7:b4:d1:30:eb:09:ca:ad:be:2e:4c:c7:82:9e:64:69:e0:
         56:43:7a:9e:63:41:2b:2b:01:19:2f:03:bf:0a:25:b3:10:db:
         d0:95:dc:4d:48:eb:86:d7:5b:0f:05:ea:b7:22:92:22:32:64:
         8b:ee:98:c0:65:2d:b4:8d:19:d3:71:ed:65:b4:0b:80:4e:a5:
         0e:c6:6f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org