Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/3134332e3235352e3135372e302f32342d3234203d3e203630393232.roa
File:                     3134332e3235352e3135372e302f32342d3234203d3e203630393232.roa (raw, json)
Hash identifier:          uUNYscA6XXilcYZWsbJ/vbJVcm/DgQLqtoPjNgvHlaQ=
Subject key identifier:   16:4F:EB:C5:C4:CB:45:F6:AD:73:79:15:8D:E4:C1:6F:37:60:7D:4C
Certificate issuer:       /CN=C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D
Certificate serial:       618F27FF4372134B5F6D9DBE8416B0E3C780CA2D
Authority key identifier: C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/3134332e3235352e3135372e302f32342d3234203d3e203630393232.roa
Signing time:             Tue 05 Mar 2024 18:10:59 +0000
ROA not before:           Tue 05 Mar 2024 18:05:59 +0000
ROA not after:            Tue 04 Mar 2025 18:10:59 +0000
asID:                     60922
IP address blocks:        143.255.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8f:27:ff:43:72:13:4b:5f:6d:9d:be:84:16:b0:e3:c7:80:ca:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D
        Validity
            Not Before: Mar  5 18:05:59 2024 GMT
            Not After : Mar  4 18:10:59 2025 GMT
        Subject: CN=164FEBC5C4CB45F6AD7379158DE4C16F37607D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:5a:0c:ac:b2:0d:e6:de:48:cc:6c:fc:79:
                    79:06:2a:ed:7f:9b:95:23:68:cd:4f:d1:02:3b:06:
                    4d:62:f6:ee:33:10:81:9b:9b:4c:7c:39:a0:48:54:
                    4d:54:fd:a2:c5:3a:3f:ff:ec:eb:f0:6f:1d:c7:3f:
                    f5:cd:66:1a:26:08:dd:41:39:4a:a2:9a:02:ca:07:
                    9c:e3:a7:7e:fd:ae:3d:ed:be:54:5e:3c:0a:b6:6b:
                    68:1a:e3:0a:72:3a:f7:5a:9f:50:e4:a7:8b:68:4e:
                    82:7b:de:77:c2:e4:58:16:83:01:07:8b:85:7d:b2:
                    54:0e:18:ca:4d:4d:36:20:e1:e1:ef:5b:a3:32:6d:
                    fe:00:ca:ae:f2:f0:a3:e2:29:ab:45:3d:49:0c:f5:
                    c7:bf:0c:d9:94:73:bf:f3:35:f1:d6:e9:c0:ab:2e:
                    10:30:e1:13:73:35:c5:a9:cf:0c:72:55:34:fa:9a:
                    b6:f6:1c:59:0a:8f:8a:ca:4d:0e:4b:b6:3a:5f:a9:
                    c7:0e:34:3f:60:9e:23:21:bf:02:45:d9:db:18:5a:
                    71:5e:fa:15:55:ff:83:61:62:82:b7:eb:00:64:e8:
                    23:0a:c3:f6:20:22:bc:47:7e:a6:e2:78:a6:c2:0d:
                    5b:82:da:c9:31:4d:b2:d3:8a:4e:35:59:03:7d:56:
                    b3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4F:EB:C5:C4:CB:45:F6:AD:73:79:15:8D:E4:C1:6F:37:60:7D:4C
            X509v3 Authority Key Identifier:
                keyid:C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/3134332e3235352e3135372e302f32342d3234203d3e203630393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:1a:5f:de:e8:5f:4b:52:e7:05:a6:b9:04:58:8b:06:23:
         59:31:29:92:68:2d:b7:cd:67:be:75:f2:4f:5f:e6:46:22:7a:
         5e:6e:7e:8f:ad:02:03:98:14:88:52:66:e6:76:ee:8d:8f:e8:
         b3:f7:80:6b:aa:f1:45:3e:8c:7b:f2:c2:44:c7:f5:5a:d8:0a:
         a5:1e:5d:52:0c:26:14:8d:84:bc:63:83:09:62:0d:ec:42:e7:
         65:70:56:c5:00:d4:30:8f:b9:a8:25:1e:ed:11:8d:90:61:9f:
         fe:61:3b:8e:e8:a2:9f:57:e2:26:ae:dd:a0:9c:78:36:e8:ae:
         8c:b2:e6:10:8a:cf:70:7c:ea:11:78:d7:56:79:6d:2c:66:cc:
         20:5e:d4:40:88:d1:3d:ee:1f:82:f2:4a:2d:44:59:36:59:2c:
         48:df:ac:dc:d7:93:f1:11:d8:89:57:b0:82:08:3c:5a:f8:cd:
         23:4c:f1:cf:26:cc:8c:43:99:49:83:f5:46:56:7e:23:d6:31:
         b2:b5:06:4e:9d:c4:c5:90:69:5c:ec:f6:ba:17:a2:d0:d2:6a:
         8c:26:d2:76:45:ba:40:a8:38:2e:30:33:87:27:32:f7:2d:c9:
         4c:b6:0c:80:67:94:f1:f1:df:86:a9:d5:69:90:72:38:2f:68:
         f2:b9:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 06:24:47 2024 by rpki-client on console-fra.rpki-client.org