Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e342e302f32322d3234203d3e203230303135.roa
File:                     3231362e3234312e342e302f32322d3234203d3e203230303135.roa (raw, json)
Hash identifier:          NQMxUTPYB3ADBmqSoKrydcE15U/qVQAT9n7DkdA28nY=
Subject key identifier:   76:5F:BE:71:DA:4A:44:C2:F1:C6:5A:0D:4D:CB:51:5E:F3:D5:42:84
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       74C0F36FDD4C9E3EF939DD231DB6FF30A1CBDEC0
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e342e302f32322d3234203d3e203230303135.roa
Signing time:             Wed 05 Jun 2024 16:30:03 +0000
ROA not before:           Wed 05 Jun 2024 16:25:03 +0000
ROA not after:            Wed 04 Jun 2025 16:30:03 +0000
asID:                     20015
IP address blocks:        216.241.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c0:f3:6f:dd:4c:9e:3e:f9:39:dd:23:1d:b6:ff:30:a1:cb:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Jun  5 16:25:03 2024 GMT
            Not After : Jun  4 16:30:03 2025 GMT
        Subject: CN=765FBE71DA4A44C2F1C65A0D4DCB515EF3D54284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:93:47:26:e3:89:6b:5d:07:70:64:82:70:
                    4a:0a:b0:7f:31:ce:eb:8c:62:cd:5f:83:00:7a:22:
                    67:f7:7e:3c:c4:9c:74:8e:a3:03:df:a7:97:bc:c8:
                    bd:b9:f0:d0:a5:a9:3d:7b:81:7a:70:16:94:51:cc:
                    61:bd:36:cc:37:e0:df:10:7d:3d:e0:ea:3e:5d:85:
                    93:4a:68:8a:ba:73:b5:95:79:01:f2:8e:20:82:74:
                    35:5e:8d:e8:78:37:f1:eb:71:b3:18:7e:d7:e4:ba:
                    a4:a6:ab:98:e2:e4:8e:c1:b5:6f:38:82:cc:72:de:
                    7e:0f:03:09:4d:21:1a:a9:68:88:1f:18:0f:32:c6:
                    44:ec:07:a4:77:43:3c:47:7e:5b:c7:ad:89:a2:2b:
                    03:0e:a0:7a:a9:15:ff:e0:28:f9:51:f2:a8:04:2c:
                    f7:fb:80:82:bb:c7:28:54:d2:25:3b:31:8f:5a:fd:
                    32:23:bf:86:9f:0c:9b:39:ad:b8:59:d0:d7:31:b5:
                    08:b6:e6:d8:8a:f3:aa:58:5c:b3:ad:4f:d6:d9:4f:
                    ba:7c:95:f7:9b:b8:56:65:c1:27:99:f0:5c:d0:34:
                    f2:3c:6d:35:ef:4a:e4:03:b1:e3:d4:12:88:4d:9e:
                    02:82:50:a7:99:fe:8a:04:e7:78:80:57:22:60:d1:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5F:BE:71:DA:4A:44:C2:F1:C6:5A:0D:4D:CB:51:5E:F3:D5:42:84
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e342e302f32322d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:bf:43:8b:ba:3b:fb:36:cd:5e:f9:dc:b0:36:03:25:b1:ce:
         14:42:eb:e6:59:1d:d5:bb:54:6d:c8:0a:4a:b1:b8:aa:48:26:
         4e:3d:ae:18:8b:1b:ec:03:59:0a:c9:0d:55:dc:49:60:f6:a6:
         3f:67:b9:95:4d:9f:24:30:80:48:f3:92:6b:cf:62:0c:94:ea:
         1d:9d:9f:69:dd:db:50:eb:89:e6:19:f5:60:28:61:2e:6b:22:
         24:db:4f:7f:5f:ca:e5:86:b5:bd:b4:1a:b6:69:84:59:e3:f0:
         ce:22:90:2c:0b:25:aa:fa:76:dd:b4:51:f9:74:d3:6d:78:d4:
         c9:db:61:28:ad:e4:9b:2e:d4:45:bd:b9:2e:5e:d7:c4:c6:3a:
         6a:df:6c:f1:5c:1a:5c:e7:dd:0d:8f:8f:e0:2b:bc:a2:a1:42:
         23:3f:f5:a8:77:ea:dd:f3:49:c4:88:bc:a2:d3:2d:89:84:f2:
         f3:1a:6e:be:63:b1:5d:13:e7:be:67:8e:4e:74:57:65:7b:9a:
         2f:bf:d7:ad:ff:36:b9:12:80:86:b6:84:85:0e:05:a3:ca:e7:
         e5:b7:42:65:4b:bc:85:7a:db:7d:1e:71:ba:d5:42:a2:23:3b:
         b5:dc:0b:85:ac:41:e6:11:f7:61:ef:4e:e3:bc:1c:22:f9:59:
         38:48:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 14:05:00 2024 by rpki-client on console-ams.rpki-client.org