Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e31312e302f32342d3234203d3e20323632323132.roa
File:                     3230312e3231382e31312e302f32342d3234203d3e20323632323132.roa (raw, json)
Hash identifier:          KT9X0nEiM7jDZbvANldQEI92zuFHkpyIEmAEFaSmHEQ=
Subject key identifier:   E2:13:44:1E:F6:57:CC:74:39:CE:CB:8E:EA:58:7C:4E:2D:90:B9:FC
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5CE1659BB849B5394038C629CDDB349697B03FA3
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e31312e302f32342d3234203d3e20323632323132.roa
Signing time:             Tue 05 Mar 2024 18:10:22 +0000
ROA not before:           Tue 05 Mar 2024 18:05:22 +0000
ROA not after:            Tue 04 Mar 2025 18:10:22 +0000
asID:                     262212
IP address blocks:        201.218.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e1:65:9b:b8:49:b5:39:40:38:c6:29:cd:db:34:96:97:b0:3f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:22 2024 GMT
            Not After : Mar  4 18:10:22 2025 GMT
        Subject: CN=E213441EF657CC7439CECB8EEA587C4E2D90B9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:3c:48:99:91:94:2e:cd:5a:79:69:30:86:
                    6d:44:d1:b5:09:80:82:eb:3a:54:bd:bd:ac:f1:53:
                    01:63:0a:68:20:b6:0b:ab:e7:17:13:02:1d:84:00:
                    48:75:c3:fe:72:72:b8:a1:08:fd:44:3f:22:41:a5:
                    6b:09:0a:f1:3a:a0:60:c0:a9:e3:23:29:dc:bc:ae:
                    f5:03:da:64:93:5d:1d:62:be:36:14:ae:69:8c:41:
                    24:c2:f0:8b:e4:6a:d2:7f:94:f9:f8:82:4a:f1:ae:
                    c4:4f:3a:79:45:cf:f1:14:10:25:ee:62:37:a1:1f:
                    f4:66:28:b1:1a:fa:e6:b4:aa:ba:1b:f4:7f:48:b0:
                    9f:e6:3c:7d:fa:98:8f:e9:ba:66:1d:87:61:c9:55:
                    b0:68:ae:5f:de:fe:e3:2a:ac:8c:bf:23:25:2f:36:
                    22:59:2d:20:06:43:17:7a:a4:dc:72:5e:d7:78:ce:
                    f4:be:ba:80:03:5c:4d:a9:7b:c7:18:74:fc:3c:73:
                    91:52:d2:58:31:01:63:d2:44:9f:f4:68:18:78:02:
                    7b:38:ef:69:9d:c5:06:42:9b:c6:2e:7f:b3:e3:3d:
                    de:b3:6e:7c:67:62:6c:94:88:3b:7a:98:12:7f:e1:
                    32:9d:28:dd:58:ee:45:c6:b4:ca:a5:d6:93:5e:72:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:13:44:1E:F6:57:CC:74:39:CE:CB:8E:EA:58:7C:4E:2D:90:B9:FC
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e31312e302f32342d3234203d3e20323632323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:f5:16:14:21:43:13:e6:0b:55:88:a6:14:25:91:c7:69:
         8f:7a:0e:39:7f:af:75:8c:4d:16:25:f9:4f:39:44:c9:ad:82:
         94:41:b3:79:db:7d:e1:de:ba:b4:0f:e5:b2:f7:1e:f2:20:a3:
         57:03:f6:80:67:ac:e6:e7:92:f2:c3:d1:4b:0e:ea:36:2d:7c:
         94:f4:fc:a5:28:f0:6c:f8:a9:80:f9:bb:bd:8b:8b:d2:bf:53:
         6c:ac:b1:91:66:9d:8d:08:e2:7b:85:1f:8a:a1:f6:60:f3:10:
         fe:42:10:14:5a:18:5e:aa:fe:8c:e0:7e:18:5b:76:86:e5:91:
         61:f2:d2:82:1d:1e:b6:13:a1:3e:14:a3:0c:83:31:ab:c8:9c:
         a8:0b:c1:a4:a9:07:31:98:be:47:76:9b:b7:e7:78:dc:75:bd:
         06:10:94:48:c8:2f:5a:b7:ed:a2:98:84:3b:c4:2c:7d:56:32:
         ee:08:4b:6a:92:22:9c:4c:a5:22:5e:f7:8f:3d:da:42:fe:d2:
         94:6a:ba:29:91:1b:28:ac:d9:a0:4b:ef:07:ad:d9:55:b2:25:
         d5:7d:51:28:9c:5c:70:5e:1e:07:6d:be:88:70:d0:f2:a1:19:
         76:75:c6:e4:cb:e1:7f:c0:1c:07:54:f3:a0:a0:e2:79:b8:7c:
         0e:b2:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org