Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32352e302f32342d3234203d3e20323635383131.roa
File:                     3230312e3138322e32352e302f32342d3234203d3e20323635383131.roa (raw, json)
Hash identifier:          n1wgNQcZfDJatS5DNev9sYlqqF3ROd8hz2ZlkijU2ys=
Subject key identifier:   8D:E8:E5:72:27:05:FA:96:89:58:B9:9F:83:B9:48:2F:7C:3C:BB:84
Certificate issuer:       /CN=B905CE8CB484116258141F2BAF5032F468106BF3
Certificate serial:       077EF57A5E0C467FFC36CFAD8FFDADF5939096DB
Authority key identifier: B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32352e302f32342d3234203d3e20323635383131.roa
Signing time:             Tue 05 Mar 2024 17:48:06 +0000
ROA not before:           Tue 05 Mar 2024 17:43:06 +0000
ROA not after:            Tue 04 Mar 2025 17:48:06 +0000
asID:                     265811
IP address blocks:        201.182.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7e:f5:7a:5e:0c:46:7f:fc:36:cf:ad:8f:fd:ad:f5:93:90:96:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B905CE8CB484116258141F2BAF5032F468106BF3
        Validity
            Not Before: Mar  5 17:43:06 2024 GMT
            Not After : Mar  4 17:48:06 2025 GMT
        Subject: CN=8DE8E5722705FA968958B99F83B9482F7C3CBB84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:11:48:e5:9f:d8:e9:e2:be:e5:42:09:fc:
                    cb:1e:98:7a:7a:de:f7:db:59:fb:dd:54:fa:1d:3f:
                    80:97:bd:02:d8:39:42:6d:cb:09:a0:8e:f2:65:c4:
                    45:b9:fa:72:58:4c:93:ac:04:9f:44:b7:e5:82:eb:
                    ff:c6:ef:25:76:9b:10:f2:90:2a:b8:73:ff:74:29:
                    ba:47:00:9e:5d:aa:4d:c1:a9:8f:2d:cd:f4:2d:31:
                    9e:03:d8:d5:7f:ec:3a:01:0d:49:79:b6:b4:99:7b:
                    82:81:ef:d1:de:1f:bf:ed:17:43:fa:4b:22:2b:d0:
                    76:9b:8b:c1:e5:e6:c7:72:10:e3:34:6d:0a:e8:9e:
                    a3:f5:43:99:1f:91:28:0f:12:04:1b:f8:b0:81:ae:
                    ca:96:d4:02:5e:14:33:4e:41:5a:5c:b1:28:02:fd:
                    5c:ae:1e:40:6a:09:e2:6b:19:fa:47:94:ad:6a:45:
                    d1:3e:26:4e:65:64:88:9e:98:19:e6:18:5e:6a:3c:
                    ed:36:a2:68:93:0d:9c:6c:3c:b9:5a:c4:4d:45:95:
                    0d:ad:1d:9c:75:a8:43:f2:23:89:eb:cf:e2:56:a9:
                    1a:4a:61:94:a3:e1:87:26:9c:68:b1:9c:b4:a4:d5:
                    db:eb:12:3c:32:a1:ad:e3:be:36:03:d2:74:05:fa:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E8:E5:72:27:05:FA:96:89:58:B9:9F:83:B9:48:2F:7C:3C:BB:84
            X509v3 Authority Key Identifier:
                keyid:B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32352e302f32342d3234203d3e20323635383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:91:67:3e:09:ca:ac:0f:38:36:19:8d:80:05:b8:23:1b:
         de:8a:4b:17:9c:47:4b:ba:2b:30:a7:ce:53:c4:4d:be:01:00:
         f4:5b:78:5d:3c:80:b0:41:3d:c7:0c:38:ac:ea:55:5b:aa:d1:
         b2:e0:5f:57:83:fd:1a:7b:b5:14:9f:87:29:3d:6a:0d:68:e6:
         9d:2e:f4:cc:79:27:57:eb:f4:a2:a2:df:eb:a7:82:1f:e8:a9:
         41:0a:28:d4:db:73:89:3f:09:ea:47:b9:2a:72:09:4a:a5:aa:
         7a:62:72:06:69:6a:59:67:88:d5:77:2b:83:d8:64:d4:1d:38:
         45:a3:82:fd:3b:98:17:c7:80:82:e1:e5:73:f4:45:cb:7d:2a:
         33:1f:04:73:43:11:b1:b3:91:44:a2:a2:27:0c:fc:c8:f1:77:
         5c:90:9a:94:d1:ce:f2:e0:95:34:52:0f:ed:98:78:b0:95:b3:
         3a:9e:bc:02:0b:08:0b:64:07:80:4b:13:4f:e6:22:7b:22:16:
         c3:fc:ba:86:93:8f:1d:13:29:46:9c:57:a1:d1:d4:ed:12:d1:
         00:6c:40:13:47:44:fa:24:9b:2a:d8:3b:c1:5c:2d:8d:97:db:
         b1:cc:23:d2:2e:9b:df:2b:e8:9a:3e:c0:5f:f1:a2:e1:62:42:
         41:8e:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 07:40:04 2024 by rpki-client on console-ams.rpki-client.org