Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3134332e302f32342d3234203d3e203238303637.roa
File:                     36342e32382e3134332e302f32342d3234203d3e203238303637.roa (raw, json)
Hash identifier:          vnLf5YA/V10zeh1WGFFVf/Is7hp40rT5Ke7T4ZzQc90=
Subject key identifier:   B5:66:C4:46:8F:00:E9:8B:D4:E3:2C:8B:15:17:A2:E8:00:B2:40:42
Certificate issuer:       /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial:       298DDE38C0FF05FF78349E04E67095339566C67B
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3134332e302f32342d3234203d3e203238303637.roa
Signing time:             Tue 05 Mar 2024 17:48:43 +0000
ROA not before:           Tue 05 Mar 2024 17:43:43 +0000
ROA not after:            Tue 04 Mar 2025 17:48:43 +0000
asID:                     28067
IP address blocks:        64.28.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8d:de:38:c0:ff:05:ff:78:34:9e:04:e6:70:95:33:95:66:c6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
        Validity
            Not Before: Mar  5 17:43:43 2024 GMT
            Not After : Mar  4 17:48:43 2025 GMT
        Subject: CN=B566C4468F00E98BD4E32C8B1517A2E800B24042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6b:c9:a0:e3:27:d6:11:df:c8:45:19:6a:a0:
                    dc:76:7d:9a:b6:89:88:f9:5d:5c:75:93:62:e2:be:
                    b9:ff:37:ee:80:54:c0:48:a2:02:37:47:11:51:c6:
                    f6:2b:d1:23:45:33:ad:26:8b:e0:d3:ce:69:29:30:
                    95:5c:1a:9c:f0:cb:4f:2d:ca:15:49:22:e8:31:01:
                    fc:60:54:92:d2:a6:de:aa:f7:9f:6e:05:a4:5f:4c:
                    fa:6e:34:56:dc:4d:7b:5e:2c:c4:7c:f0:25:9f:fe:
                    4f:4a:9c:02:b6:48:5a:0e:14:ea:04:96:a8:38:3f:
                    19:29:60:14:91:dc:3b:ac:c0:2d:0c:67:cc:4a:57:
                    fa:d0:08:c0:a6:10:8f:61:6b:e3:e7:1f:f3:83:4a:
                    7a:97:94:6d:d9:92:b8:8c:d0:34:5c:cc:81:21:2b:
                    0a:08:7a:f9:b9:42:e1:49:36:aa:f4:d5:e0:a1:70:
                    07:c7:40:c6:8d:0d:7b:77:80:d1:7f:6b:4b:36:bb:
                    29:a1:15:9c:7f:13:d4:5e:6c:3b:8a:e7:0a:b7:2d:
                    33:20:e5:65:7a:d2:9e:f3:57:b4:77:43:44:d4:c7:
                    0f:fe:36:4f:a7:e4:d8:be:f5:43:9f:bf:58:42:59:
                    bf:a1:ab:50:76:6b:44:51:d5:ee:02:e6:d0:ef:8c:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:66:C4:46:8F:00:E9:8B:D4:E3:2C:8B:15:17:A2:E8:00:B2:40:42
            X509v3 Authority Key Identifier:
                keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3134332e302f32342d3234203d3e203238303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:e6:1e:5a:3d:e8:cb:63:33:c4:4c:73:d3:6f:3e:14:c2:
         58:cc:79:4a:03:1c:7a:0f:91:87:c6:be:ac:0b:b1:51:c2:a4:
         d9:19:21:66:28:31:03:94:9e:cd:eb:0f:3b:59:21:74:8c:14:
         23:69:da:f8:f0:73:8a:79:f9:b6:22:ee:49:3c:b9:4f:92:62:
         57:48:d3:44:04:0e:4f:86:fc:7f:c8:d7:ac:b7:62:fb:3b:f6:
         01:ef:9e:24:67:67:47:c8:01:a4:af:8e:59:b4:65:61:2a:30:
         1b:8d:ab:84:c2:13:61:2a:cf:a5:b2:3d:ce:6f:3c:c3:8a:aa:
         5a:84:1f:b6:b5:f9:23:44:54:1e:fe:4e:3d:b1:36:77:a8:1f:
         d6:f3:d7:34:ba:e9:63:ea:a4:d1:7b:bc:51:2b:cf:e0:43:80:
         66:3a:bc:a4:7a:ab:f4:40:6b:e0:4f:3c:04:26:4a:8e:64:51:
         b0:15:99:6d:a2:0a:d0:1e:12:52:9b:3f:2d:4a:6a:d1:1f:6b:
         e7:2b:a5:c2:44:35:44:df:c3:b3:ed:33:c2:bf:9e:e7:f8:63:
         ea:c9:9b:04:73:e8:21:16:76:5c:ac:d4:41:44:b6:6e:2f:ec:
         c0:32:71:ff:ca:65:ae:e6:52:09:fc:79:96:35:66:75:b6:f7:
         fa:88:c3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org