Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133392e302f32342d3234203d3e203238303637.roa
File:                     36342e32382e3133392e302f32342d3234203d3e203238303637.roa (raw, json)
Hash identifier:          d68as/5vKM87KavYq5KZP2Btiq0WxR9z2b4Ohe4giiU=
Subject key identifier:   2C:FD:9B:D1:F6:91:64:AC:71:C2:4B:25:52:94:04:9D:D1:3E:A1:7D
Certificate issuer:       /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial:       46076198391A053A43B9632EC247B1F7CAF0B3AB
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133392e302f32342d3234203d3e203238303637.roa
Signing time:             Tue 05 Mar 2024 17:48:42 +0000
ROA not before:           Tue 05 Mar 2024 17:43:42 +0000
ROA not after:            Tue 04 Mar 2025 17:48:42 +0000
asID:                     28067
IP address blocks:        64.28.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:07:61:98:39:1a:05:3a:43:b9:63:2e:c2:47:b1:f7:ca:f0:b3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
        Validity
            Not Before: Mar  5 17:43:42 2024 GMT
            Not After : Mar  4 17:48:42 2025 GMT
        Subject: CN=2CFD9BD1F69164AC71C24B255294049DD13EA17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:50:93:15:fe:96:46:36:ae:89:27:13:30:d7:
                    ce:f6:5a:71:dd:3d:7d:c6:0a:6a:20:4c:fa:be:cc:
                    d3:96:fa:0a:c2:3e:c6:6f:27:a6:9f:f0:93:51:98:
                    67:38:a3:c4:08:1c:03:21:53:21:9d:f6:4b:a3:3b:
                    a3:38:4d:79:ee:46:ef:e2:4d:a2:5c:be:ac:5d:b1:
                    2e:8e:1d:ec:dc:10:7d:6b:cf:1a:c8:43:fb:ef:38:
                    f0:9d:cb:93:cc:1a:fa:24:31:10:07:71:ae:fc:9b:
                    1e:75:2b:09:7d:97:35:dc:da:c5:56:37:42:58:73:
                    86:51:e4:b7:f5:b3:ef:cf:f4:53:1b:1f:93:68:c3:
                    bd:91:c4:3b:28:72:ab:65:73:9c:5e:94:b9:e3:46:
                    c3:0f:ed:36:fc:5d:63:99:26:49:a5:d9:1d:d8:1e:
                    82:e3:df:d0:7e:a7:f9:e5:65:22:ee:dc:08:02:c3:
                    10:ee:9c:ec:8d:d1:1d:1b:d2:e5:f0:d2:19:b5:4c:
                    19:94:d2:4b:47:ff:50:67:df:74:7d:7c:2a:d3:f7:
                    ff:b3:8b:3b:aa:ff:33:8a:17:28:09:8e:05:85:d8:
                    95:27:f3:dc:84:cf:29:b1:6b:70:c7:4d:a8:88:44:
                    f9:6b:74:1c:f2:6e:58:fc:72:97:32:ed:24:f1:8f:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FD:9B:D1:F6:91:64:AC:71:C2:4B:25:52:94:04:9D:D1:3E:A1:7D
            X509v3 Authority Key Identifier:
                keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133392e302f32342d3234203d3e203238303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:6b:0d:6c:e3:60:5f:15:5a:a6:d4:1f:94:d3:ec:7e:e5:4f:
         f9:8d:21:0b:66:e4:70:a0:71:fb:8a:26:06:3b:3c:ca:63:4d:
         d9:63:ea:9e:85:80:db:32:99:8e:f7:cf:f0:c4:73:d3:d2:88:
         31:ee:e1:7b:d7:37:bf:0f:d0:12:6a:1c:98:b0:9f:94:38:a5:
         1b:1b:11:12:60:26:66:f0:fd:38:f1:75:b2:14:3f:99:ac:71:
         76:ee:f2:be:18:90:f6:16:91:c0:85:17:4d:9f:59:14:ee:66:
         ec:a4:f4:ce:6b:1e:fa:40:cf:d5:8b:ab:7e:f2:dd:02:ab:9b:
         6c:aa:93:f3:96:96:5c:a7:ab:90:2c:0c:88:d7:24:6d:b0:dc:
         bc:b4:fc:69:bb:d0:71:5f:79:4a:45:3f:9d:20:d0:80:76:eb:
         03:41:c4:fd:5b:d4:96:04:ce:6e:f2:2a:c0:f9:1e:97:a8:81:
         53:15:5d:9f:c7:3e:4d:32:1d:e3:89:a5:ee:da:ae:50:ff:6c:
         0e:61:e1:d4:23:cd:9f:4e:1a:17:26:2e:6a:50:cd:fc:1d:3a:
         d4:8c:49:5b:de:15:c6:3a:cd:34:5d:01:d3:94:17:67:67:df:
         28:2e:cd:65:a0:a0:eb:15:04:16:ad:ab:5e:f8:0c:3a:2f:ab:
         e7:16:eb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org