Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/3134332e302e39362e302f32322d3232203d3e20323633373031.roa
File:                     3134332e302e39362e302f32322d3232203d3e20323633373031.roa (raw, json)
Hash identifier:          14gfo0SG/nFzVph+IRIHEArDoJYRH11235BvDWQwMag=
Subject key identifier:   C2:5A:EF:EC:2A:DD:E3:53:9A:F6:CA:72:6A:A6:5A:0C:5A:A2:6C:5F
Certificate issuer:       /CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
Certificate serial:       530A6BF40EA3E87DAC06199A3F106496243FFA34
Authority key identifier: 2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/3134332e302e39362e302f32322d3232203d3e20323633373031.roa
Signing time:             Tue 05 Mar 2024 17:57:30 +0000
ROA not before:           Tue 05 Mar 2024 17:52:30 +0000
ROA not after:            Tue 04 Mar 2025 17:57:30 +0000
asID:                     263701
IP address blocks:        143.0.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0a:6b:f4:0e:a3:e8:7d:ac:06:19:9a:3f:10:64:96:24:3f:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8AB2848654D51664AC6F45A44E5407C6B35912
        Validity
            Not Before: Mar  5 17:52:30 2024 GMT
            Not After : Mar  4 17:57:30 2025 GMT
        Subject: CN=C25AEFEC2ADDE3539AF6CA726AA65A0C5AA26C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:e7:7f:18:1e:f9:f0:d1:de:8a:72:33:12:
                    9c:6d:ab:33:fc:e3:b8:5c:8c:13:f7:f0:57:05:96:
                    de:90:d5:d9:84:88:a0:bc:da:b5:56:95:0b:c7:aa:
                    38:be:3e:aa:d6:1c:35:3b:4e:c6:1b:13:47:7f:71:
                    83:90:a5:ca:bb:de:d8:11:65:37:f0:2f:b1:51:d5:
                    40:a3:1a:dc:c1:6a:90:0e:f2:88:f6:47:f2:29:03:
                    0c:2c:ac:1e:87:68:78:35:fe:06:7d:6c:47:da:a1:
                    61:de:be:7b:91:1b:25:ec:14:4e:96:a3:b5:5e:35:
                    6f:3e:1a:7d:00:ef:3e:82:c1:d8:60:66:5a:f3:23:
                    0a:c1:34:ed:f6:4e:a7:d0:1a:e7:a0:04:29:2b:d1:
                    d6:9e:e2:b2:c2:cc:cd:ae:c6:63:bb:e3:d6:64:bc:
                    42:ac:8a:72:63:f4:7c:bf:da:7b:70:d5:99:cb:b0:
                    4a:07:ca:ac:a8:88:b5:7b:1b:3c:17:0d:f2:a4:fb:
                    ad:00:35:76:f6:73:f2:2f:32:cd:33:eb:7e:d9:3d:
                    2f:00:53:bd:51:82:87:e0:1d:18:e2:6e:b7:9f:3d:
                    9a:b7:a2:d0:fa:29:1d:a5:e4:28:ca:07:20:95:34:
                    df:1c:97:95:6e:f2:df:f2:ad:60:08:46:2e:66:f9:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:EF:EC:2A:DD:E3:53:9A:F6:CA:72:6A:A6:5A:0C:5A:A2:6C:5F
            X509v3 Authority Key Identifier:
                keyid:2D:8A:B2:84:86:54:D5:16:64:AC:6F:45:A4:4E:54:07:C6:B3:59:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8AB2848654D51664AC6F45A44E5407C6B35912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0261522A7D1B1599601F0A1AAB8391A7D6EA0A5BDF95B045ABA001E79DD4B632/0/3134332e302e39362e302f32322d3232203d3e20323633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:8b:4c:06:11:f0:5b:df:42:30:ac:37:66:ce:23:de:7b:e9:
         0e:c9:05:a4:6e:77:0f:8c:4f:83:e4:a4:a5:e3:c1:44:a7:e5:
         34:52:d3:13:98:22:54:19:38:84:43:99:05:26:cd:59:bc:f8:
         28:22:94:f3:1d:bf:7d:30:78:f9:61:3d:c5:4b:bf:1f:cc:79:
         11:30:f7:3e:4d:e3:e7:cc:85:87:2a:05:21:c3:55:42:7e:48:
         09:93:ad:cf:86:3a:ac:90:a9:34:ef:42:e8:a3:bc:48:9e:13:
         bb:09:ab:c3:03:8b:10:a5:11:d8:6c:db:d2:23:e7:e5:b4:18:
         32:b0:0d:ac:63:17:8f:50:9d:58:24:5a:e6:be:5e:ac:40:5f:
         b0:4a:27:37:2e:50:0d:37:9a:df:61:54:b8:73:55:8c:c5:26:
         d0:af:fa:46:0a:7d:5d:4b:5f:43:e2:28:b9:ba:a6:be:bf:03:
         74:db:c2:b6:ee:d8:f6:15:fe:aa:5e:c9:1a:51:d9:36:9f:8c:
         3d:f1:d3:bc:15:29:1c:09:15:96:cd:a0:9a:fa:72:c4:b9:d0:
         9c:f7:4d:41:34:15:53:47:68:a5:a3:9c:d5:24:72:aa:d3:2f:
         97:9f:8f:eb:7d:5e:74:43:93:97:73:22:66:da:d7:0b:a8:48:
         7a:04:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org