Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/3230312e3232302e302e302f32302d3234203d3e203237373831.roa
File:                     3230312e3232302e302e302f32302d3234203d3e203237373831.roa (raw, json)
Hash identifier:          GmG6auLLfprbAbdoaXlwlF7wZuSCoTe4z+O8LWhEHPQ=
Subject key identifier:   97:98:DF:F4:AF:11:EB:FB:F7:36:F2:38:48:5A:4A:36:80:91:1C:65
Certificate issuer:       /CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
Certificate serial:       7188986A8F113231AF8CF36F9AF6BAF73D94A512
Authority key identifier: 83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/3230312e3232302e302e302f32302d3234203d3e203237373831.roa
Signing time:             Tue 05 Mar 2024 17:43:47 +0000
ROA not before:           Tue 05 Mar 2024 17:38:47 +0000
ROA not after:            Tue 04 Mar 2025 17:43:47 +0000
asID:                     27781
IP address blocks:        201.220.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:88:98:6a:8f:11:32:31:af:8c:f3:6f:9a:f6:ba:f7:3d:94:a5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
        Validity
            Not Before: Mar  5 17:38:47 2024 GMT
            Not After : Mar  4 17:43:47 2025 GMT
        Subject: CN=9798DFF4AF11EBFBF736F238485A4A3680911C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:1e:13:3b:23:1b:a2:f7:e0:99:d9:e6:5f:
                    77:d1:9d:8e:b7:6e:9a:c5:0c:0d:f6:d1:79:cc:f5:
                    cc:83:6f:61:b1:44:b0:1b:89:40:db:63:59:28:b9:
                    e4:22:a6:a0:bf:3b:33:3c:61:a8:16:b9:d4:7d:74:
                    a1:c4:98:4a:93:11:ea:2e:a3:b9:f7:50:86:3c:6c:
                    cf:b9:8d:58:34:23:e5:dc:c7:26:60:56:70:1d:09:
                    f8:68:a5:33:41:0e:85:8c:08:97:09:9c:cf:dd:74:
                    67:93:a7:fc:9a:23:9f:aa:d9:1c:79:0c:2b:4a:db:
                    cb:a5:27:d9:d0:93:61:e0:bf:4a:40:85:ac:2f:aa:
                    2e:75:7c:ab:fa:6d:ce:1a:18:77:a5:8c:73:b6:f4:
                    ca:ac:3b:92:de:04:76:1d:17:1b:59:aa:ce:b6:93:
                    d7:27:8d:f0:66:66:fb:2e:8b:42:6c:c7:7c:4f:ee:
                    03:b1:67:a0:fb:12:47:72:fd:e8:31:bb:ae:bf:7e:
                    2a:4a:5f:91:dd:35:48:10:a1:e1:e4:0e:05:99:31:
                    36:db:3f:e0:6f:b4:0d:aa:4e:ac:97:58:c6:e9:2a:
                    12:ab:28:9e:4a:cc:d7:f3:33:a7:89:10:7f:ef:70:
                    e3:90:c5:bd:2e:5b:03:85:41:50:20:0a:39:d7:1a:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:98:DF:F4:AF:11:EB:FB:F7:36:F2:38:48:5A:4A:36:80:91:1C:65
            X509v3 Authority Key Identifier:
                keyid:83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/3230312e3232302e302e302f32302d3234203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:39:69:a4:ec:c6:86:ee:60:31:74:5c:29:22:de:de:ce:f9:
         a5:e3:ef:e4:f5:a5:00:23:4a:28:de:34:48:e3:78:20:af:2f:
         fe:11:f9:e7:af:3c:2a:40:e5:56:f5:92:92:10:e8:48:0d:c5:
         33:e9:a3:4b:10:8d:c4:71:a3:97:e0:38:ca:50:ef:df:a2:5e:
         55:33:e7:e5:1e:7c:6b:9e:81:6f:da:f0:64:9e:ef:34:31:ea:
         eb:28:d0:97:71:44:4b:fe:70:ed:d9:c2:26:e7:16:c4:81:2a:
         ab:41:71:34:9c:44:6c:25:b3:97:56:8d:3a:fe:98:18:8c:6a:
         74:a4:c6:b0:e8:f5:1b:c4:d1:ff:dc:07:64:90:43:d3:68:24:
         76:42:71:81:c9:a1:48:e7:74:7d:69:c4:a8:0a:a1:fa:77:5d:
         1d:69:66:95:c0:89:58:6f:4a:28:64:ae:e2:ab:94:69:99:ad:
         51:c3:61:ed:62:bf:e4:78:00:9c:46:a7:05:65:63:1b:05:5f:
         89:6b:79:37:df:b5:5d:7d:6b:9c:71:bc:52:36:1e:77:a9:1f:
         77:b7:9e:33:ad:4d:aa:96:49:cf:8c:ba:71:16:ae:f6:3a:a5:
         16:58:86:a3:b4:2a:20:37:ac:f2:d6:84:88:b8:d5:9c:a4:d3:
         bb:27:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:23 2024 by rpki-client on console-ams.rpki-client.org