Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa
File:                     3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          s4tq4XVgPEIPx6g1gCTZvvcL2p+cjb1cdfSqAB0wJrQ=
Subject key identifier:   27:E9:2D:4D:8B:D3:00:99:FE:FF:EA:18:4B:13:D5:6F:8E:99:7C:9F
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       71195396CFAAB03B272DFA4C4E272F01CFA9F6C8
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 05 Mar 2024 17:54:35 +0000
ROA not before:           Tue 05 Mar 2024 17:49:35 +0000
ROA not after:            Tue 04 Mar 2025 17:54:35 +0000
asID:                     265615
IP address blocks:        201.163.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:19:53:96:cf:aa:b0:3b:27:2d:fa:4c:4e:27:2f:01:cf:a9:f6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:35 2024 GMT
            Not After : Mar  4 17:54:35 2025 GMT
        Subject: CN=27E92D4D8BD30099FEFFEA184B13D56F8E997C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:3b:03:cb:76:92:1b:57:e8:c2:c4:a4:e1:
                    ee:c9:de:74:93:3e:d8:76:fe:46:9c:05:9e:4d:01:
                    96:b4:1e:f3:33:4b:8c:df:0b:66:b9:91:d1:c9:61:
                    70:c0:98:a1:37:3c:c6:27:96:ad:60:4a:e0:62:28:
                    f0:c5:06:38:f3:9d:fa:bd:60:56:0f:3a:92:5e:f7:
                    21:18:b7:76:ef:e6:ca:0c:de:fd:d3:38:29:3f:ee:
                    6f:3b:be:82:9e:91:28:70:2f:b9:e6:06:36:30:81:
                    64:81:f8:66:90:21:90:f4:41:a6:d6:77:79:86:f3:
                    42:2b:14:75:11:46:67:8e:0d:b3:c1:94:ac:05:7a:
                    31:21:dd:52:00:a8:8f:b6:c4:ab:12:9e:b7:d7:fa:
                    fd:71:ec:ca:8a:19:dd:5f:01:ec:89:a6:0b:ff:32:
                    ad:66:fa:c7:63:af:a4:e9:af:e9:2c:c2:51:2b:49:
                    22:35:7a:46:19:9a:e1:aa:06:e8:d6:f7:79:fd:8d:
                    b3:95:22:75:a7:7b:76:7e:dd:66:22:14:61:8b:e4:
                    97:ee:7a:d1:c7:7b:03:ca:e7:7d:2f:c5:db:ce:94:
                    ab:01:4c:83:66:f1:ac:2f:0f:12:95:14:7a:e6:aa:
                    b7:32:48:61:cd:58:7b:ce:5e:f2:f7:a2:4e:81:0f:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E9:2D:4D:8B:D3:00:99:FE:FF:EA:18:4B:13:D5:6F:8E:99:7C:9F
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.163.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:00:4e:93:9b:0e:6f:ec:f1:fa:3f:ad:9b:07:a9:b7:0c:18:
         93:67:5f:48:ed:6e:d4:8a:e0:73:36:ec:bf:04:39:bf:f7:d1:
         88:2e:4f:e0:30:7c:0e:98:f3:8d:26:c6:77:3a:8d:76:77:50:
         85:34:a5:a2:28:e3:29:d8:bf:6f:97:f4:df:66:1a:97:e2:ee:
         70:f1:8c:0d:ad:b0:0c:fa:97:1d:bf:5a:df:10:39:70:8c:8b:
         94:f9:56:6e:7d:58:a6:59:bc:12:bb:06:dc:1d:98:a8:76:d9:
         69:99:dd:79:f3:31:c2:db:a1:95:a6:1e:f2:b8:b4:ba:f4:41:
         df:1e:56:79:87:f9:2c:25:27:33:0e:dd:0e:e2:4b:7b:22:0a:
         78:96:8e:80:d9:68:8d:82:80:1f:7a:b7:06:94:39:af:4f:fb:
         af:3b:ed:3e:df:0a:77:d2:29:09:8e:3e:f4:0c:1d:e7:04:22:
         3c:d0:1e:3c:0b:94:3e:a2:b2:5f:14:9c:e0:4d:7d:b5:d4:cb:
         aa:e1:f8:b4:ce:28:5b:78:f9:1c:56:1e:aa:b1:a9:db:9d:d8:
         cb:49:bc:32:3f:3d:d2:7d:ae:5f:42:0f:e6:0e:c6:48:87:8d:
         b1:d1:55:ae:bc:4e:3d:0e:2e:18:c6:91:7a:61:e9:06:2e:d9:
         31:56:0a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org