Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa
File:                     3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa (raw, json)
Hash identifier:          6XXlqDp34zswhf7VjL6RrtxXRT/3sOi0buhPbZtYuSE=
Subject key identifier:   DC:49:96:A2:48:96:1C:51:6E:22:18:19:59:2E:0A:8D:79:0B:66:52
Certificate issuer:       /CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
Certificate serial:       16112A299D313F8FF3E27C2A4742BF9DBCF467EB
Authority key identifier: 76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa
Signing time:             Tue 05 Mar 2024 17:40:03 +0000
ROA not before:           Tue 05 Mar 2024 17:35:03 +0000
ROA not after:            Tue 04 Mar 2025 17:40:03 +0000
asID:                     269997
IP address blocks:        181.192.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:11:2a:29:9d:31:3f:8f:f3:e2:7c:2a:47:42:bf:9d:bc:f4:67:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
        Validity
            Not Before: Mar  5 17:35:03 2024 GMT
            Not After : Mar  4 17:40:03 2025 GMT
        Subject: CN=DC4996A248961C516E221819592E0A8D790B6652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:e3:e2:49:ef:fc:e2:62:71:f0:cb:b2:0a:
                    35:b3:42:c8:39:d9:43:09:cc:a0:8b:e4:50:23:84:
                    d5:18:11:a1:49:67:20:f0:eb:31:88:69:83:80:30:
                    33:5b:b9:8b:fd:80:5e:35:3b:df:eb:56:e3:82:89:
                    14:98:fd:17:40:de:4e:c2:ad:01:11:46:1a:08:c0:
                    43:b1:23:24:43:f1:f0:05:56:15:32:f6:c8:57:9d:
                    50:d6:c3:86:72:e8:95:6a:e5:17:c5:17:c6:9d:a7:
                    e7:e2:96:ce:14:46:ca:17:a9:66:92:db:fd:3c:d4:
                    e7:05:b3:b5:2e:50:e5:a4:01:a8:33:13:ae:8f:c7:
                    2e:7b:74:af:50:46:98:d0:62:6c:c3:b4:94:b8:3d:
                    d1:ca:15:bb:51:ac:41:83:83:fe:48:65:11:c7:86:
                    fc:bd:d7:db:7a:5f:3a:2c:91:7c:4d:26:5b:e6:b4:
                    3d:20:ed:a9:69:92:bb:d2:96:96:04:4f:13:48:ae:
                    2a:b1:86:e0:fb:50:35:db:e3:93:7f:1c:df:ed:41:
                    ad:e7:35:10:c9:5c:63:b5:29:60:92:f2:86:53:d8:
                    c8:36:4c:96:f9:b8:dc:85:70:24:8a:6a:40:5a:78:
                    14:22:bd:23:af:74:94:fd:07:db:05:55:8b:9c:9a:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:49:96:A2:48:96:1C:51:6E:22:18:19:59:2E:0A:8D:79:0B:66:52
            X509v3 Authority Key Identifier:
                keyid:76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:31:53:e7:d8:c1:3d:40:0b:07:01:1e:9d:36:d3:dc:3e:6c:
         8d:ec:b6:9f:11:91:40:a2:95:76:a1:40:b1:87:ff:9a:9e:b8:
         7c:c2:8a:cf:e0:eb:30:b3:30:5c:75:7d:47:f2:01:57:db:20:
         34:d1:1d:45:2d:23:95:f3:36:33:6b:68:f4:4a:2e:29:6b:16:
         50:28:c7:88:e3:ec:42:4b:ac:00:dd:40:5e:68:d4:6c:f8:53:
         7c:46:e8:7b:64:89:71:ee:3e:20:46:85:18:68:ed:70:29:b1:
         59:e0:ad:13:54:6a:b4:74:1a:e6:fb:51:c3:31:39:3b:9a:90:
         85:62:2f:4f:cd:14:bd:93:6b:e8:8f:61:d1:b2:61:76:36:71:
         2d:d1:fa:5f:ad:93:d6:d8:f7:21:75:8d:84:c2:47:fb:49:8f:
         78:65:91:6c:72:19:0e:1d:f4:07:4b:ad:f7:99:20:f3:f8:71:
         4e:46:d6:e0:9c:6c:d5:a4:e8:28:26:4e:ea:9d:d0:8a:b2:03:
         2c:13:0a:bc:e3:e1:37:9b:e4:93:c1:ea:35:27:fe:ad:04:7a:
         a5:20:1f:9b:01:86:b2:e5:c9:4d:57:bd:94:e9:77:a0:06:ee:
         97:28:8e:81:d7:d5:74:27:89:cf:b8:72:7e:1c:5b:7c:53:2f:
         5f:29:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org