Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/3230332e3134322e352e302f32342d3234203d3e203238343437.roa
File:                     3230332e3134322e352e302f32342d3234203d3e203238343437.roa (raw, json)
Hash identifier:          CGDuU4E+OxjXL3UfQ3linen1a2hWDsPxZXxZgQFyMXQ=
Subject key identifier:   D4:65:2C:AB:7E:69:FC:EA:33:40:87:5B:03:5E:43:B6:56:4F:3D:6C
Certificate issuer:       /CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
Certificate serial:       6CA5939872284D1B7151F3DD13342030A15CC0DA
Authority key identifier: E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/3230332e3134322e352e302f32342d3234203d3e203238343437.roa
Signing time:             Mon 29 Jul 2024 19:55:00 +0000
ROA not before:           Mon 29 Jul 2024 19:50:00 +0000
ROA not after:            Mon 28 Jul 2025 19:55:00 +0000
asID:                     28447
IP address blocks:        203.142.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 04:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a5:93:98:72:28:4d:1b:71:51:f3:dd:13:34:20:30:a1:5c:c0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
        Validity
            Not Before: Jul 29 19:50:00 2024 GMT
            Not After : Jul 28 19:55:00 2025 GMT
        Subject: CN=D4652CAB7E69FCEA3340875B035E43B6564F3D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:75:cd:a3:c0:5f:b1:db:b0:b8:52:b5:37:
                    2f:ae:87:a3:27:0b:ea:9f:ce:33:0b:c9:e0:13:83:
                    ab:3b:8a:9e:24:92:2e:97:42:af:2c:d7:ad:43:3e:
                    e7:7a:08:14:d1:d7:dc:6c:a4:da:df:de:57:a8:23:
                    17:57:66:1b:63:96:33:e8:1a:7a:ba:a8:07:c6:e0:
                    59:df:42:02:c5:51:12:85:55:b9:78:49:65:e4:16:
                    71:99:be:17:c5:0e:93:95:1f:a4:4a:47:bb:57:57:
                    ec:62:d6:1e:85:d3:8f:c0:33:95:eb:ae:1d:79:c5:
                    99:5f:70:db:a0:8a:0a:44:e7:83:0f:53:65:6f:c5:
                    7f:ac:bb:12:8f:55:82:95:e9:12:19:45:2f:ce:8c:
                    cb:12:a7:c2:6d:5d:d9:2c:d0:f0:0a:49:fa:5e:d3:
                    ec:b9:a9:60:5a:f2:4a:1b:e4:f1:b6:62:a3:26:82:
                    34:46:3c:0b:db:a4:3d:bd:03:22:64:54:1d:10:f6:
                    fa:c9:50:42:8e:a8:f9:3a:e0:9e:74:06:99:16:cf:
                    82:1d:03:e0:b5:50:88:fe:e9:18:a6:a1:4d:60:bb:
                    3b:cd:d2:1f:1e:bc:91:72:ec:54:15:42:30:c4:49:
                    3c:b7:16:3f:6c:4a:e5:72:f1:df:26:81:61:8c:ce:
                    e2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:65:2C:AB:7E:69:FC:EA:33:40:87:5B:03:5E:43:B6:56:4F:3D:6C
            X509v3 Authority Key Identifier:
                keyid:E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/3230332e3134322e352e302f32342d3234203d3e203238343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:37:7a:8c:5a:29:90:10:02:22:2d:fb:c2:63:d0:5b:26:5e:
         9c:ad:b6:d1:e3:51:d9:66:52:f6:0e:3c:d5:dc:08:9f:4f:18:
         d0:c1:08:34:66:e5:06:d0:06:85:a4:eb:10:ae:85:29:0f:e0:
         a0:48:e9:eb:9b:9d:56:33:1e:9b:38:09:26:fc:8b:0d:11:57:
         02:50:ff:0a:29:85:0e:75:f3:2d:0f:19:1c:66:80:c0:d6:57:
         8b:0e:cb:6b:c2:b0:af:5a:42:f1:4f:63:d8:41:37:bd:c0:4b:
         2b:a1:db:8f:58:be:85:98:a8:a3:6f:22:f6:7e:40:b5:3e:05:
         1a:ba:b6:2c:8d:3c:c2:16:49:b8:99:d4:a1:3c:10:32:ac:2b:
         a9:c0:8c:f4:7a:96:4c:aa:71:97:9c:2d:35:75:58:84:8f:91:
         c2:85:53:29:a1:b6:df:08:bd:6d:0e:dd:f5:0b:6f:04:80:3a:
         cc:42:8f:36:87:e6:b5:60:6e:d3:73:81:6d:4a:b5:ce:5d:a0:
         d0:58:1a:19:50:5c:84:e8:8d:4d:1e:69:b1:5a:c0:14:96:1b:
         4e:17:33:18:22:41:ad:5b:4e:f2:1e:23:b2:66:f8:5e:67:5a:
         02:a8:b3:bf:3e:9c:b6:5f:ae:ac:e3:de:42:e4:e1:05:f0:95:
         e3:7e:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:46 2024 by rpki-client on console-fra.rpki-client.org