Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3132382e302f32312d3231203d3e203238303637.roa
File:                     36342e32382e3132382e302f32312d3231203d3e203238303637.roa (raw, json)
Hash identifier:          rn3x9oIGoxhy/8KbKqwVn+SlvGKf9q8SVvrAxci7yyo=
Subject key identifier:   DC:6C:48:36:22:92:10:00:BB:24:E3:4A:A9:0C:C9:81:02:91:DE:3C
Certificate issuer:       /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial:       5853C83355A7C5F128D1EAC3FFEB7892556898F9
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3132382e302f32312d3231203d3e203238303637.roa
Signing time:             Tue 05 Mar 2024 17:48:43 +0000
ROA not before:           Tue 05 Mar 2024 17:43:43 +0000
ROA not after:            Tue 04 Mar 2025 17:48:43 +0000
asID:                     28067
IP address blocks:        64.28.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:53:c8:33:55:a7:c5:f1:28:d1:ea:c3:ff:eb:78:92:55:68:98:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
        Validity
            Not Before: Mar  5 17:43:43 2024 GMT
            Not After : Mar  4 17:48:43 2025 GMT
        Subject: CN=DC6C483622921000BB24E34AA90CC9810291DE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:28:40:63:a9:a4:c3:8e:de:6f:f7:6f:60:
                    9f:ac:33:15:4f:fc:68:66:4a:ef:e3:6e:a8:47:0d:
                    75:85:7f:de:d3:8f:65:a7:b0:52:b8:46:1f:d5:ab:
                    41:fb:03:8c:8c:fe:01:88:1e:55:3c:c0:8f:be:d0:
                    ae:04:3d:4d:73:5a:5c:12:32:08:29:40:da:bb:88:
                    9f:65:7c:57:9c:06:7e:c3:4c:bf:fc:16:20:dd:87:
                    e2:00:7a:45:c7:45:f7:6d:4b:f6:9b:9f:06:f7:cd:
                    b5:be:24:41:b9:a9:d9:16:18:22:2d:06:a3:fd:6b:
                    72:58:08:05:b3:8b:d5:22:2d:b7:34:2e:b8:c5:11:
                    21:10:d3:00:3c:55:c5:2a:82:90:ea:32:6e:2e:82:
                    aa:79:87:bf:cd:eb:68:37:a5:f1:0d:29:e7:77:a1:
                    cf:e3:57:e3:e8:a0:e8:21:c8:97:bf:e9:a9:e9:5d:
                    59:6e:b0:ff:74:c0:d3:62:af:59:35:41:94:4c:87:
                    ac:dd:26:a0:53:28:8d:19:35:8a:8a:72:7e:a9:02:
                    79:8d:6b:a1:69:b5:f1:f4:40:40:39:3c:2d:6a:91:
                    6d:e8:28:92:8d:e3:dc:b4:8f:4d:ff:63:3e:80:08:
                    b3:37:e2:71:60:eb:52:47:bc:a4:73:ea:87:c6:68:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6C:48:36:22:92:10:00:BB:24:E3:4A:A9:0C:C9:81:02:91:DE:3C
            X509v3 Authority Key Identifier:
                keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3132382e302f32312d3231203d3e203238303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:a2:1d:48:f1:21:53:95:22:0e:1f:84:e5:49:d1:86:40:40:
         e3:59:b9:11:16:bf:28:f2:a0:c1:c8:a4:9b:32:3c:2c:54:52:
         e3:2a:c9:e8:a4:b4:3b:f5:f7:f0:5d:e8:c9:db:4d:56:05:76:
         a3:8b:32:34:11:7a:ac:50:98:8f:d6:b7:ed:40:71:99:5d:bc:
         12:8c:c1:0b:71:d0:15:fd:4b:a8:6e:66:96:40:62:83:24:4a:
         25:94:95:0d:18:3d:4b:63:7d:31:d5:42:08:fb:5b:19:29:62:
         58:fc:cd:cc:3c:27:8b:5e:1e:0f:71:db:e0:08:38:32:d3:33:
         e8:a3:32:b6:f8:06:15:4d:5d:86:31:cb:c2:74:2e:e6:fd:5c:
         36:78:3c:6c:34:1a:69:85:55:4a:d8:3f:90:b7:3b:6d:88:46:
         96:bf:f0:c1:45:ba:af:7d:0c:db:bf:11:66:cc:fe:64:2a:92:
         1e:f3:9b:bf:d2:19:f1:3d:07:ca:bb:b5:7d:23:f9:35:2a:3c:
         79:aa:48:60:66:04:48:48:59:94:c3:c5:35:30:b8:cd:83:59:
         55:46:1a:f9:37:9c:43:41:1c:8c:53:48:bf:2b:b1:f4:03:6e:
         ae:ba:c8:86:36:16:99:9d:e8:55:34:86:a1:8e:8e:35:b3:60:
         24:c4:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:33 2024 by rpki-client on console-fra.rpki-client.org