Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/3230312e3133312e3131352e302f32342d3234203d3e203237393939.roa
File:                     3230312e3133312e3131352e302f32342d3234203d3e203237393939.roa (raw, json)
Hash identifier:          bXvs5+g5lOWNPUsa0OxuQIYpU3k4w6r87diLKboaHIU=
Subject key identifier:   95:C7:91:A6:E6:8B:51:92:19:BD:BC:3A:54:49:B7:04:1F:38:EE:3F
Certificate issuer:       /CN=808AC600DE5D9C23D41119CA28DB82C3DB3F6E49
Certificate serial:       79BFCD71E81458F7F604628863942EAADA28FBCF
Authority key identifier: 80:8A:C6:00:DE:5D:9C:23:D4:11:19:CA:28:DB:82:C3:DB:3F:6E:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/3230312e3133312e3131352e302f32342d3234203d3e203237393939.roa
Signing time:             Tue 05 Mar 2024 17:48:18 +0000
ROA not before:           Tue 05 Mar 2024 17:43:18 +0000
ROA not after:            Tue 04 Mar 2025 17:48:18 +0000
asID:                     27999
IP address blocks:        201.131.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bf:cd:71:e8:14:58:f7:f6:04:62:88:63:94:2e:aa:da:28:fb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808AC600DE5D9C23D41119CA28DB82C3DB3F6E49
        Validity
            Not Before: Mar  5 17:43:18 2024 GMT
            Not After : Mar  4 17:48:18 2025 GMT
        Subject: CN=95C791A6E68B519219BDBC3A5449B7041F38EE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:bc:81:e4:01:39:4c:07:e0:06:63:61:77:
                    2d:d6:f3:62:db:d7:a6:87:ed:dc:43:87:66:88:10:
                    33:1f:e9:0f:4e:f2:2c:66:3f:ea:5f:c0:cb:df:d5:
                    46:5d:33:cc:f2:bf:6b:d8:77:67:64:7c:32:09:8a:
                    8b:d0:62:ef:c2:0d:f2:e8:34:fa:fd:7c:39:88:fc:
                    03:e4:6d:3a:03:27:64:75:be:be:92:11:bc:09:8e:
                    c3:ba:c3:e8:49:5a:dc:9b:35:52:d2:4c:a4:b5:26:
                    5e:a9:da:33:80:29:91:8c:32:ca:f6:2d:67:30:82:
                    f6:00:21:d3:3e:7d:bc:bd:d6:3b:31:ce:9e:33:c1:
                    13:6c:2a:60:e2:df:bb:00:86:08:87:1f:d0:c6:ba:
                    15:fd:87:36:94:fb:64:4e:fb:45:a3:b2:24:3d:85:
                    f1:72:4e:3a:d4:15:3d:b1:42:8a:26:09:8e:59:9c:
                    07:fb:1c:9e:82:51:1b:b2:a6:ff:50:c4:d7:11:6d:
                    32:81:d3:7c:6b:15:35:51:54:36:ac:f7:d3:f1:5c:
                    66:1d:48:c3:8b:f6:68:20:b2:bb:25:bb:70:fd:d4:
                    1d:da:5c:76:30:e5:ab:1f:a0:fe:18:2b:f5:4e:af:
                    25:b8:ef:be:10:d9:42:7d:41:ae:47:c3:f5:3a:81:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C7:91:A6:E6:8B:51:92:19:BD:BC:3A:54:49:B7:04:1F:38:EE:3F
            X509v3 Authority Key Identifier:
                keyid:80:8A:C6:00:DE:5D:9C:23:D4:11:19:CA:28:DB:82:C3:DB:3F:6E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/3230312e3133312e3131352e302f32342d3234203d3e203237393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:51:99:ae:d7:37:d9:4c:c5:00:16:ba:c6:1e:ba:f4:80:ed:
         46:ad:cb:8c:4b:57:1f:8e:77:00:db:70:82:fa:7f:b1:80:d1:
         7d:9c:27:4f:22:41:32:c3:5f:05:c1:a1:20:6a:44:c2:bd:47:
         4c:82:fe:57:df:d9:d4:21:f4:3d:50:9a:de:89:22:69:17:1c:
         f7:7c:9e:f4:c9:4c:a8:bd:a3:9f:46:34:2e:22:fe:7f:94:4e:
         c4:99:be:7a:1d:8a:6c:f7:f1:04:21:93:5c:95:c3:0f:74:9b:
         c3:e7:2e:9a:35:ab:8f:1b:55:34:e5:02:33:2d:98:e3:41:72:
         74:fb:ac:15:5e:ea:b4:9d:fb:1a:c7:b0:d6:b8:e1:ef:96:80:
         88:9c:fb:2d:94:55:f5:67:93:db:c1:03:ee:93:ce:f4:7d:5a:
         4c:07:4d:48:c9:a6:7e:83:bc:f7:11:11:87:d0:9e:6d:52:42:
         fa:72:8f:91:0d:ff:ca:87:29:57:0d:3b:c1:15:ac:4b:c8:26:
         76:ab:46:01:c5:10:4f:e1:55:07:b8:6d:a8:ec:ae:51:2c:f4:
         e8:09:df:ce:8d:a4:71:de:f6:75:ea:0a:ed:49:20:66:ab:bb:
         79:0f:4d:80:41:56:5a:3c:4f:95:23:18:59:9f:43:49:87:56:
         98:eb:cc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:18 2024 by rpki-client on console-ams.rpki-client.org