Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3136312e302e38302e302f32302d3230203d3e203237373435.roa
File:                     3136312e302e38302e302f32302d3230203d3e203237373435.roa (raw, json)
Hash identifier:          Vx2uc7T672aFikM7x6VuE5hUVr1R8nWLt+5eYBlDn/k=
Subject key identifier:   FC:8F:2F:95:97:44:D0:54:F6:3B:D9:2B:EE:72:97:26:E3:4E:33:80
Certificate issuer:       /CN=15DB6B388486161B93957759E07BEB14CE6D932F
Certificate serial:       3FD2EED4BBFE0D79D2EB86D3EF6253B6F7DA62BB
Authority key identifier: 15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3136312e302e38302e302f32302d3230203d3e203237373435.roa
Signing time:             Tue 05 Mar 2024 17:51:30 +0000
ROA not before:           Tue 05 Mar 2024 17:46:30 +0000
ROA not after:            Tue 04 Mar 2025 17:51:30 +0000
asID:                     27745
IP address blocks:        161.0.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d2:ee:d4:bb:fe:0d:79:d2:eb:86:d3:ef:62:53:b6:f7:da:62:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DB6B388486161B93957759E07BEB14CE6D932F
        Validity
            Not Before: Mar  5 17:46:30 2024 GMT
            Not After : Mar  4 17:51:30 2025 GMT
        Subject: CN=FC8F2F959744D054F63BD92BEE729726E34E3380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:ea:69:37:76:a6:53:f5:ca:b0:be:fc:bf:
                    83:5d:dd:59:9f:62:34:a3:c7:0e:7e:48:52:61:51:
                    b6:4e:35:14:93:03:b1:93:e1:69:8c:71:35:ed:41:
                    da:f1:01:6b:c6:5c:fe:45:99:ea:99:b8:b1:b7:e2:
                    ea:64:d8:cf:cd:d6:c3:96:e4:b6:e9:bf:7f:37:0f:
                    9f:8f:14:23:b8:04:55:55:86:ae:ed:7a:fc:d2:66:
                    8d:e6:9f:e3:2f:0a:fe:9f:fc:5d:0c:4c:82:33:34:
                    f2:1a:e3:86:45:77:fd:b3:89:6e:eb:78:06:6f:66:
                    56:83:74:a1:a3:c0:c2:d2:00:ba:df:5a:01:d6:f3:
                    4b:73:66:ce:74:d6:a5:21:da:eb:66:c3:19:6a:28:
                    cc:41:bc:97:bd:21:04:b2:90:9a:5d:4e:97:c9:a8:
                    eb:c3:7c:9d:f4:62:3f:63:e0:5c:8c:09:56:b2:2e:
                    bb:d7:c0:9a:8e:97:0f:b2:14:c7:3b:2f:19:90:79:
                    12:13:ea:04:94:ab:e3:98:97:67:37:f8:fe:82:18:
                    0b:3c:2e:b9:e5:dd:11:ab:70:24:b2:e3:f8:d5:37:
                    45:5a:c6:18:2b:62:49:44:21:b5:e7:23:40:a8:5a:
                    e5:a8:3d:73:36:e7:96:74:36:84:2a:36:bb:3d:ac:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:2F:95:97:44:D0:54:F6:3B:D9:2B:EE:72:97:26:E3:4E:33:80
            X509v3 Authority Key Identifier:
                keyid:15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3136312e302e38302e302f32302d3230203d3e203237373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:91:b4:6f:d4:26:d5:67:c1:a2:be:3c:bc:ad:5f:89:53:0a:
         35:4c:9c:8c:dd:30:71:20:c2:ec:51:de:a8:1e:e0:23:ec:57:
         bd:b4:be:b1:44:3e:50:6f:05:2d:10:6f:13:3a:4f:65:43:d2:
         ac:03:d2:40:c5:ba:45:0c:06:6f:de:8c:4d:4f:c8:2f:7f:23:
         25:bd:e0:20:6e:7e:3e:14:6d:c8:b9:b7:4a:97:88:44:29:96:
         77:30:d5:cf:07:b7:a2:9c:cd:24:cf:7a:d9:c7:1b:cc:ed:e6:
         c7:05:99:ff:a1:cc:ca:8a:2c:98:17:cd:5f:40:7f:03:a2:f9:
         2e:e6:7d:e3:67:ec:c4:97:99:f3:e1:54:63:f6:32:cf:10:af:
         11:59:a8:22:65:42:f6:ec:75:bf:8b:59:7f:27:c2:3c:8e:be:
         aa:4f:d7:08:01:7a:46:fa:75:19:00:d2:2d:71:87:5b:f5:11:
         27:96:42:47:c8:3c:d2:0d:33:c6:92:d1:87:71:58:5d:72:96:
         5a:b1:f0:e6:8d:17:5b:23:e8:77:16:98:23:f7:f5:7a:6a:b4:
         a7:7a:f8:7d:4f:d1:dd:6f:b6:f9:ee:ef:7c:e4:2b:a8:39:2f:
         8d:bb:83:02:7d:3b:55:4f:80:18:15:10:90:92:2c:89:89:f2:
         91:8a:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org