Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3130332e3133332e3230382e302f32322d3234203d3e20323632313931.roa
File:                     3130332e3133332e3230382e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          wo58HhPD3YFWMIciWVC5pxOpsWIS0KtR9o/+2VndJwg=
Subject key identifier:   79:B1:7B:63:15:71:EE:89:FB:50:82:F5:EE:B4:05:06:7B:C6:31:13
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       107BBC712991E5EA784850E568248326647703E4
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3130332e3133332e3230382e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 08 Oct 2024 17:40:00 +0000
ROA not before:           Tue 08 Oct 2024 17:35:00 +0000
ROA not after:            Tue 07 Oct 2025 17:40:00 +0000
asID:                     262191
IP address blocks:        103.133.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7b:bc:71:29:91:e5:ea:78:48:50:e5:68:24:83:26:64:77:03:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Oct  8 17:35:00 2024 GMT
            Not After : Oct  7 17:40:00 2025 GMT
        Subject: CN=79B17B631571EE89FB5082F5EEB405067BC63113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:c0:8e:61:19:03:1f:df:0c:76:1f:ce:e5:
                    f9:df:93:39:15:d0:12:4c:42:86:17:b1:91:5a:96:
                    70:7a:17:5a:8d:3b:0e:58:5b:3a:74:45:40:60:19:
                    e0:c0:68:d7:77:5a:ba:0c:44:ed:81:2e:a5:a5:c2:
                    3a:e3:7e:49:3a:4a:19:92:3f:c6:1f:3d:f5:f4:0a:
                    a6:ce:17:97:6a:3b:c0:ba:e8:95:32:c4:73:91:22:
                    a4:83:b7:91:27:4b:48:0e:fa:df:dd:fa:d5:90:84:
                    e4:34:27:cd:2a:ea:9f:a7:d7:fc:3e:2a:4f:ac:fe:
                    c6:a9:5a:14:32:2a:04:c8:ee:9b:42:66:db:a1:78:
                    24:e0:49:3a:54:2f:e5:52:1e:16:b5:d3:86:76:a8:
                    39:bf:b3:2a:78:28:ce:87:a8:10:10:be:f9:fd:79:
                    03:09:d5:42:58:cc:3c:b1:a4:76:48:61:4b:71:71:
                    12:ed:0d:02:b6:b5:fc:82:a1:1f:1b:4e:08:00:15:
                    2f:fe:dc:ef:67:da:ab:90:15:20:43:ab:26:d7:98:
                    2f:1d:82:ec:c5:23:b0:82:be:79:35:e0:44:c3:4d:
                    41:0e:d7:e8:9b:8f:58:03:2a:ad:c6:16:0c:16:51:
                    46:ce:ae:f8:62:59:b2:64:be:da:17:b4:2d:e7:0b:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B1:7B:63:15:71:EE:89:FB:50:82:F5:EE:B4:05:06:7B:C6:31:13
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3130332e3133332e3230382e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:8d:06:75:fe:40:d4:42:a0:68:a8:10:df:ed:af:d2:77:d1:
         48:f8:ec:54:11:6f:0b:28:b6:26:cd:f4:b4:ff:34:85:10:e5:
         80:71:9f:a1:58:1f:a4:1a:de:88:3e:9f:20:36:89:81:07:51:
         c7:a3:87:fe:87:36:e5:2f:4a:01:00:a4:64:b6:29:70:ed:0c:
         e8:7b:27:57:7d:15:ee:b4:84:67:82:32:f7:5e:ba:b1:31:44:
         08:32:77:62:1f:86:13:3d:09:25:57:81:71:b2:50:88:93:7b:
         9a:52:84:a0:4e:0a:3a:4b:6b:81:28:01:da:38:53:50:e5:5a:
         6f:d3:0d:89:b0:4d:39:85:bc:11:fa:52:5d:04:1d:7f:c1:4a:
         b8:d1:90:28:6d:24:0f:53:96:98:96:e3:e5:62:76:ba:b8:3c:
         0d:a2:39:22:d9:cd:10:17:f5:f8:32:f6:5c:e1:12:bb:f0:29:
         1f:74:56:fb:bc:a0:fb:2f:e7:54:7b:e7:9b:bb:ed:6e:e5:7c:
         7a:9d:fe:57:eb:21:2a:11:7c:8f:58:b0:bf:e5:c6:fa:25:a2:
         68:24:2e:f5:0f:57:aa:48:87:34:65:b3:57:e3:59:fb:aa:24:
         62:4a:b8:01:a8:fd:f4:35:54:cf:08:9f:32:12:5f:fc:04:73:
         77:ce:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org