Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/3134332e3230322e3230382e302f32322d3234203d3e20323634363331.roa
File:                     3134332e3230322e3230382e302f32322d3234203d3e20323634363331.roa (raw, json)
Hash identifier:          ZPRC7WnlEXKZ7c7LrRv4D0zKaiAxTOEbbbcw9iCZtLs=
Subject key identifier:   F9:9D:27:4A:0A:05:AD:BB:07:78:89:AA:97:DE:7F:AE:97:FE:19:9B
Certificate issuer:       /CN=D2A79FA2B820F7AACC9CE0BE099F24A553130FD7
Certificate serial:       4BB77D6F835A36B2BA84068E577FD4BF68821119
Authority key identifier: D2:A7:9F:A2:B8:20:F7:AA:CC:9C:E0:BE:09:9F:24:A5:53:13:0F:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/3134332e3230322e3230382e302f32322d3234203d3e20323634363331.roa
Signing time:             Tue 05 Mar 2024 18:13:49 +0000
ROA not before:           Tue 05 Mar 2024 18:08:49 +0000
ROA not after:            Tue 04 Mar 2025 18:13:49 +0000
asID:                     264631
IP address blocks:        143.202.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b7:7d:6f:83:5a:36:b2:ba:84:06:8e:57:7f:d4:bf:68:82:11:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A79FA2B820F7AACC9CE0BE099F24A553130FD7
        Validity
            Not Before: Mar  5 18:08:49 2024 GMT
            Not After : Mar  4 18:13:49 2025 GMT
        Subject: CN=F99D274A0A05ADBB077889AA97DE7FAE97FE199B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:34:79:b1:36:6f:86:af:eb:71:7c:45:5a:
                    fa:82:c3:ff:b2:f6:d5:3a:57:91:b7:5c:8c:29:6e:
                    9d:70:6d:06:1d:c6:f1:67:f4:0e:f6:1a:6c:3d:4d:
                    55:de:66:76:27:cc:67:c4:4b:78:3b:29:b5:d2:22:
                    ac:e8:2f:9f:fb:1d:58:69:66:9e:e3:12:4c:7e:fd:
                    00:7b:5c:66:86:46:d5:b5:ac:33:73:b5:cc:51:23:
                    15:2e:c2:5a:53:5c:be:67:d7:c4:15:a8:c2:14:76:
                    04:86:c6:91:08:3d:d0:7d:10:c3:65:cf:c6:d4:de:
                    1f:b7:44:11:5f:fa:80:1f:c0:4a:fd:ae:fd:fb:68:
                    c8:68:8a:cd:e5:ae:86:8c:94:a1:57:2d:a3:f6:a9:
                    75:b4:f9:e6:3b:f8:15:19:f9:07:18:cc:e0:d6:0e:
                    ae:2c:91:36:f5:64:bc:f7:39:1b:29:4b:03:05:56:
                    4f:cc:c3:2f:16:dc:d5:0d:86:6c:e5:35:97:a5:27:
                    e7:b8:0c:26:23:7b:ea:3c:6c:85:15:f7:05:41:3c:
                    b4:af:b6:9b:06:77:09:5f:1f:0b:78:d2:96:c6:d1:
                    2c:8d:fa:ec:11:97:6d:cc:d1:ee:0d:76:ce:09:88:
                    36:28:3a:2b:6f:fe:76:3f:ec:c5:00:e8:8a:77:45:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9D:27:4A:0A:05:AD:BB:07:78:89:AA:97:DE:7F:AE:97:FE:19:9B
            X509v3 Authority Key Identifier:
                keyid:D2:A7:9F:A2:B8:20:F7:AA:CC:9C:E0:BE:09:9F:24:A5:53:13:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A79FA2B820F7AACC9CE0BE099F24A553130FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1005151A74331E2681F5A411ED779F0C8D71174D4FD8D3E3A456FF0D37DB0840/0/3134332e3230322e3230382e302f32322d3234203d3e20323634363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:45:17:56:27:41:de:ac:49:61:fa:82:70:de:89:2d:b9:4f:
         65:92:16:de:f0:50:a3:6f:ac:56:c4:bf:c9:ad:87:08:27:d0:
         e5:70:ac:4d:fa:f3:82:e7:d5:b0:7d:a4:6e:ab:0e:2c:aa:54:
         93:41:5d:f0:ff:cb:63:c7:7a:71:df:b3:ef:5c:49:c8:76:67:
         d1:d1:e2:71:d2:f4:e9:e1:9f:70:3e:27:2b:2e:6e:26:7c:b5:
         d0:93:aa:41:8a:8d:52:62:67:cc:1d:a5:60:53:55:bd:00:68:
         d8:82:59:a5:fa:47:de:05:3c:ce:85:36:36:aa:56:1d:c4:0c:
         8e:ce:56:18:6a:4e:66:2b:36:5e:5e:e0:bb:02:27:16:2f:4c:
         43:48:10:98:71:a7:21:36:44:ce:17:7c:59:0f:01:5f:e5:ac:
         ce:ba:0d:2b:67:ed:07:8a:3f:3d:ab:f5:ae:ad:32:80:ce:b6:
         4e:b5:9e:67:4e:9c:de:d9:d6:98:b6:d4:df:ca:da:fb:b0:aa:
         32:63:28:5f:62:7b:39:b0:f9:71:f0:40:3d:81:6a:6c:3d:99:
         39:6f:84:c9:cf:e0:67:4e:fa:95:02:91:a7:9a:4b:f6:49:1b:
         94:d7:54:e5:8e:ef:a8:e5:67:b2:55:36:39:eb:70:de:b3:a8:
         0e:34:52:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org