Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e203131313732.roa
File:                     3230312e3136332e302e302f31362d3234203d3e203131313732.roa (raw, json)
Hash identifier:          yirPkUeYS3Vd3klZY5nhMan/7Cx4KoxGzC9MLqNYygQ=
Subject key identifier:   66:4E:BA:19:A7:39:C6:BB:82:10:28:02:C7:A8:A6:29:5D:77:16:5E
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       4B8DA989F3D0117748EA817FEEEC5EFFC41019F8
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:34 +0000
ROA not before:           Tue 05 Mar 2024 17:49:34 +0000
ROA not after:            Tue 04 Mar 2025 17:54:34 +0000
asID:                     11172
IP address blocks:        201.163.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8d:a9:89:f3:d0:11:77:48:ea:81:7f:ee:ec:5e:ff:c4:10:19:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:34 2024 GMT
            Not After : Mar  4 17:54:34 2025 GMT
        Subject: CN=664EBA19A739C6BB82102802C7A8A6295D77165E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:aa:28:9f:61:45:e0:63:b6:02:fb:c5:05:
                    04:d5:58:f2:d4:3e:5c:b8:50:0f:3f:52:d5:c8:25:
                    a4:3f:7d:99:32:26:ec:c9:2b:e9:84:13:ab:4a:9b:
                    78:6f:c4:8e:1e:ef:1c:94:00:a0:35:10:50:2d:47:
                    d5:cb:6d:a7:78:c1:8b:42:0b:80:6a:5a:99:ab:04:
                    96:cf:f9:97:41:53:5f:78:69:36:62:e4:9d:18:02:
                    a2:2f:c6:58:d8:09:3c:ee:de:4a:69:aa:ba:94:b3:
                    66:62:2a:85:f8:ef:ae:df:1a:4c:00:e3:1f:23:0d:
                    3b:cc:81:14:5e:87:e3:f7:c6:50:5f:62:9e:08:5e:
                    78:7d:bb:9f:95:64:b7:c5:a2:95:6c:d6:cd:3b:ea:
                    9b:c1:51:4d:1b:b8:ae:01:d1:a0:26:97:a5:ea:ed:
                    bc:9c:5f:4f:46:39:e4:df:ec:56:96:8c:f5:d0:b2:
                    78:ca:7d:b3:c5:9f:a8:b2:ef:2b:d9:8a:73:cd:83:
                    cd:60:7a:50:cc:d3:36:d0:11:41:8f:df:5e:2e:b4:
                    ff:b3:41:e3:ab:29:02:32:17:4d:d0:94:58:e1:b7:
                    3f:46:26:a8:56:29:3c:33:3b:8f:50:16:c1:aa:18:
                    76:2c:fa:8e:e2:9f:be:ee:99:77:06:a2:56:23:94:
                    af:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4E:BA:19:A7:39:C6:BB:82:10:28:02:C7:A8:A6:29:5D:77:16:5E
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.163.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:47:67:bb:52:3e:69:7f:01:0a:92:80:a4:05:2b:1d:54:1d:
         d2:6f:89:c3:22:4f:21:4e:fc:ad:db:bd:0e:94:a1:ca:cd:3c:
         02:da:7f:34:f4:aa:88:a2:40:88:20:cc:84:f4:89:8b:73:f0:
         55:70:a5:f2:73:12:a6:e3:81:5d:02:9c:0b:68:20:92:27:79:
         4b:6b:f9:c1:53:fe:ad:fe:f9:2f:c3:33:b1:6e:aa:cc:d7:42:
         c4:aa:38:85:0f:aa:5a:59:a4:22:87:55:51:df:5c:87:cc:d0:
         3c:75:0d:8c:9d:9e:2c:dc:28:e6:83:4a:5c:b8:63:af:36:1a:
         50:27:0c:6a:d8:bc:d8:84:46:f6:63:bc:5f:e5:60:a0:da:2c:
         de:06:c8:01:51:09:9e:52:bb:a4:43:3b:93:c7:54:92:40:8c:
         6e:af:c5:86:5f:99:fe:15:ed:94:41:04:0c:c2:11:c8:ea:1c:
         29:4e:e0:d4:8c:59:29:3e:7d:76:29:22:2b:62:38:1e:ca:cf:
         cc:53:3e:c9:34:9f:f1:6c:de:04:a0:8a:47:01:a9:4f:e6:db:
         b8:84:f5:63:1d:24:7d:93:9f:5b:da:21:5b:a0:ab:72:72:2c:
         f2:c1:b8:ee:b7:1e:a8:c1:ca:44:84:e4:25:e3:9d:11:57:63:
         aa:c3:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org