Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3233322e302f32312d3234203d3e203238353532.roa
File:                     3230312e3135392e3233322e302f32312d3234203d3e203238353532.roa (raw, json)
Hash identifier:          zbDvXdvLfUO349SFbo7pct+PLlGuRQDX2/d6vEINJYw=
Subject key identifier:   DE:51:23:D0:71:D5:65:42:1D:DF:29:C9:DD:A9:B5:6D:D4:36:0B:D2
Certificate issuer:       /CN=BD43B3A76583426984FFC51B907F3FD29E2F3BB0
Certificate serial:       76835C3D5232908BFCF3F1DAC1AF9D0384EF713F
Authority key identifier: BD:43:B3:A7:65:83:42:69:84:FF:C5:1B:90:7F:3F:D2:9E:2F:3B:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3233322e302f32312d3234203d3e203238353532.roa
Signing time:             Fri 09 Aug 2024 07:10:00 +0000
ROA not before:           Fri 09 Aug 2024 07:05:00 +0000
ROA not after:            Fri 08 Aug 2025 07:10:00 +0000
asID:                     28552
IP address blocks:        201.159.232.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:83:5c:3d:52:32:90:8b:fc:f3:f1:da:c1:af:9d:03:84:ef:71:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD43B3A76583426984FFC51B907F3FD29E2F3BB0
        Validity
            Not Before: Aug  9 07:05:00 2024 GMT
            Not After : Aug  8 07:10:00 2025 GMT
        Subject: CN=DE5123D071D565421DDF29C9DDA9B56DD4360BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:8d:08:f7:a4:50:91:3c:7f:29:63:d5:31:
                    b3:1b:bc:9e:d6:f5:63:6a:79:2f:b1:cf:6c:f0:35:
                    2d:a9:2e:93:f4:57:79:75:7f:67:66:ac:de:02:f2:
                    60:6d:39:20:a1:97:4a:5e:b0:af:ac:c6:03:a5:7f:
                    8f:78:b2:8c:df:02:d0:96:fa:3a:fa:21:81:a3:54:
                    45:26:2b:a8:a7:28:11:a5:1b:2f:5f:43:9b:89:88:
                    0d:26:a5:cd:04:b1:91:24:7b:73:09:37:d3:90:b3:
                    15:8a:9d:4f:51:bb:18:46:24:50:91:58:9d:07:04:
                    c4:fe:e8:95:cc:1c:d4:eb:f3:07:6a:f0:9c:b2:03:
                    29:b3:8d:1d:96:b7:58:e4:75:b6:84:e6:2b:c6:8c:
                    ef:48:5e:fd:f3:fd:ce:49:5a:74:c6:20:47:be:db:
                    1c:4a:3a:16:2f:f0:84:34:6f:de:f0:23:02:88:e2:
                    0e:32:4b:0a:8d:db:6a:03:68:f0:bd:b9:35:09:a5:
                    b3:c4:80:47:a8:05:4c:ec:07:8d:be:50:8c:5a:91:
                    23:85:25:09:95:b3:7b:7e:91:37:90:7f:ea:13:6f:
                    ab:f8:bd:01:a7:b7:6b:9b:3a:fe:b0:8f:1c:71:e1:
                    40:c8:82:4e:d6:14:00:04:1c:89:d7:9f:69:ac:dd:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:51:23:D0:71:D5:65:42:1D:DF:29:C9:DD:A9:B5:6D:D4:36:0B:D2
            X509v3 Authority Key Identifier:
                keyid:BD:43:B3:A7:65:83:42:69:84:FF:C5:1B:90:7F:3F:D2:9E:2F:3B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3233322e302f32312d3234203d3e203238353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:eb:1e:7d:26:5a:42:02:73:0c:6e:b3:ae:c0:8b:56:6c:
         bd:2c:e6:4f:e2:c0:ad:0b:4e:a8:98:34:0b:00:c6:f4:7d:95:
         b4:af:58:0b:81:b8:18:b7:99:52:47:43:dd:d0:1e:a4:09:4d:
         76:fa:17:1a:24:b0:76:21:dd:9f:7b:5d:e3:0b:65:83:3e:b4:
         5e:0e:73:3a:d2:f4:35:fc:10:23:d3:7d:bd:46:61:30:f5:fa:
         28:44:d3:86:d4:3b:ce:ad:cd:67:a5:58:c9:18:2d:83:59:a3:
         0a:f6:ba:d6:64:0d:81:33:31:9b:c6:61:c8:af:a0:03:f0:e1:
         ec:96:2d:1d:ef:f1:72:59:ad:87:d8:6e:07:e2:1f:ec:00:76:
         c0:c6:a3:8d:9a:8c:aa:12:92:ba:9e:b7:2a:f0:bf:7e:2b:40:
         50:0d:60:10:17:62:0a:01:ee:81:eb:77:49:2c:93:7e:96:da:
         90:38:05:a4:4b:fd:a7:e6:e5:e1:04:d3:c5:e0:1b:44:be:36:
         40:4f:6f:42:a2:ed:13:17:95:77:2c:b1:e3:d4:5b:82:f5:c3:
         aa:16:03:7a:ee:c3:1f:a7:35:50:b0:4d:89:e9:40:06:89:d8:
         c8:e9:fc:ee:0a:e1:86:09:c8:b3:dd:81:85:bd:b5:ae:73:5c:
         5c:c5:43:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org