Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/3139322e3130302e3137312e302f32342d3234203d3e20323633323334.roa
File:                     3139322e3130302e3137312e302f32342d3234203d3e20323633323334.roa (raw, json)
Hash identifier:          nqfYfEAyEQSjlp5K0dv6IA/BD+lo+Zsn5JP9GM8y0Tw=
Subject key identifier:   1B:CA:05:3D:6A:A5:F1:4D:75:94:FF:53:43:39:FE:67:14:AD:CC:6D
Certificate issuer:       /CN=AAA6C176BDCB93B8E5D70769829BC3646C03A46D
Certificate serial:       3793BA142F118FFE0A20737E2B3E837FC7EEF9EC
Authority key identifier: AA:A6:C1:76:BD:CB:93:B8:E5:D7:07:69:82:9B:C3:64:6C:03:A4:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/3139322e3130302e3137312e302f32342d3234203d3e20323633323334.roa
Signing time:             Tue 05 Mar 2024 18:09:40 +0000
ROA not before:           Tue 05 Mar 2024 18:04:40 +0000
ROA not after:            Tue 04 Mar 2025 18:09:40 +0000
asID:                     263234
IP address blocks:        192.100.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:ba:14:2f:11:8f:fe:0a:20:73:7e:2b:3e:83:7f:c7:ee:f9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAA6C176BDCB93B8E5D70769829BC3646C03A46D
        Validity
            Not Before: Mar  5 18:04:40 2024 GMT
            Not After : Mar  4 18:09:40 2025 GMT
        Subject: CN=1BCA053D6AA5F14D7594FF534339FE6714ADCC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:55:17:5f:57:75:9a:b5:66:4e:f4:e3:1c:
                    82:4a:3d:b2:1e:3e:94:62:e0:08:5b:10:35:82:27:
                    98:b6:65:88:7c:d0:34:b4:d3:d6:72:5a:f1:7b:3d:
                    40:63:2f:ea:06:99:5c:56:31:f2:5a:51:ac:f4:7e:
                    e7:ca:b8:47:79:cb:9c:52:08:c7:d5:44:54:e9:ff:
                    46:10:b8:d3:93:98:7d:a8:2f:ba:fe:ec:b0:7b:a4:
                    cf:d4:d5:f2:e5:5b:51:af:f1:0f:ee:e1:3f:0a:37:
                    dc:6e:48:c1:8d:08:9a:86:dc:9d:2f:59:b7:9d:d6:
                    5a:f5:80:5a:8f:49:fa:5b:61:a9:f8:ce:f3:be:cd:
                    02:bc:10:47:fc:4d:d6:2c:2a:d0:d3:9b:33:9e:44:
                    cf:0d:f6:c7:22:5c:c2:28:68:aa:e6:d8:3f:19:81:
                    37:6b:0c:b5:d9:34:50:c5:c4:cc:cf:bd:1c:2b:1b:
                    98:26:ef:77:76:98:2b:f9:18:a9:1a:6c:e7:aa:e6:
                    f7:8d:e8:06:12:77:6f:8b:a7:70:eb:da:b4:dc:e9:
                    9a:b7:d5:d8:7a:1e:d7:0d:a7:cd:93:82:e6:37:4f:
                    0f:7e:83:4d:dc:3a:e1:ae:7c:a9:3b:73:26:70:f0:
                    d7:bc:3e:d2:05:dc:9f:8f:47:18:a4:96:40:55:b6:
                    02:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CA:05:3D:6A:A5:F1:4D:75:94:FF:53:43:39:FE:67:14:AD:CC:6D
            X509v3 Authority Key Identifier:
                keyid:AA:A6:C1:76:BD:CB:93:B8:E5:D7:07:69:82:9B:C3:64:6C:03:A4:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/3139322e3130302e3137312e302f32342d3234203d3e20323633323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:25:62:db:a5:c9:ca:09:b9:bb:a4:f1:49:32:a8:95:b9:
         21:75:17:ac:97:28:ee:2b:58:3a:bc:34:6d:e3:b8:43:e4:48:
         e2:d4:b1:69:2b:fe:e2:ee:ef:cb:61:82:b7:e1:2b:4e:ab:50:
         c9:30:5b:06:4b:38:c8:77:c1:34:2e:6e:86:1d:b4:6d:0f:e1:
         ae:be:ce:ec:71:07:7d:96:63:2b:cc:6e:e6:c5:3b:2b:a3:69:
         c9:14:3a:1c:d8:c4:2f:a2:63:6e:bf:ba:72:50:26:72:59:f4:
         dc:f7:f1:87:bf:0e:c8:c9:22:57:8e:59:f3:2e:bf:57:ea:98:
         37:26:98:6c:ab:1b:fc:b0:38:5e:f5:e1:dc:15:f5:ee:08:aa:
         cb:2f:23:45:9c:79:99:d9:af:44:bb:59:6d:1d:25:4b:77:7a:
         94:31:57:30:ef:82:a8:1e:85:a6:5d:32:67:fe:68:1f:2d:2d:
         c3:bd:d9:84:ae:a1:38:82:6c:55:b1:9f:5a:b8:aa:0a:87:64:
         9a:78:6d:59:00:3a:d1:b3:b0:20:ab:7f:7e:19:9d:ec:bd:a5:
         33:26:e8:26:03:55:12:73:12:1c:d7:a7:28:67:95:ef:47:33:
         ad:d3:e3:25:43:4f:39:3d:6b:94:f1:3c:40:00:e8:1b:1a:ba:
         d0:45:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org