Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34332e302f32342d3234203d3e20323635353137.roa
File:                     3134332e3235352e34332e302f32342d3234203d3e20323635353137.roa (raw, json)
Hash identifier:          n7YejSzjKHio2rC2xERI9CzKGl9xPeVsykbZtNilp2I=
Subject key identifier:   FC:AA:9D:89:32:E3:4B:7E:9E:02:88:C5:D0:88:E1:90:35:90:B3:FD
Certificate issuer:       /CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
Certificate serial:       1302517C050CD015939AEC510C3976775579644A
Authority key identifier: 8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34332e302f32342d3234203d3e20323635353137.roa
Signing time:             Mon 06 May 2024 16:50:00 +0000
ROA not before:           Mon 06 May 2024 16:45:00 +0000
ROA not after:            Mon 05 May 2025 16:50:00 +0000
asID:                     265517
IP address blocks:        143.255.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:02:51:7c:05:0c:d0:15:93:9a:ec:51:0c:39:76:77:55:79:64:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
        Validity
            Not Before: May  6 16:45:00 2024 GMT
            Not After : May  5 16:50:00 2025 GMT
        Subject: CN=FCAA9D8932E34B7E9E0288C5D088E1903590B3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:92:da:98:6f:2e:9e:45:8d:a3:44:ea:ed:
                    0d:f9:8c:69:11:ad:a5:0a:b3:ce:a0:47:64:76:19:
                    71:6a:c6:c7:38:69:29:f1:d8:b5:76:17:b8:7c:e0:
                    72:1c:c9:86:b3:4d:5d:d5:6e:ac:96:30:c9:1d:76:
                    14:75:84:c0:ae:6a:52:cc:12:b8:5f:5b:39:bf:52:
                    60:6c:91:84:4d:7a:66:c3:0a:38:a0:e7:a1:ef:cc:
                    4e:90:2f:18:1f:23:2f:3d:10:34:ef:16:6b:e0:bb:
                    c6:b2:45:ef:75:bf:a2:b1:f7:77:0f:25:f1:6b:5a:
                    b6:5d:4e:6d:99:41:c4:4f:83:34:d8:0f:0a:9f:56:
                    5b:7e:8d:71:82:0c:0f:c4:00:5d:55:e3:2d:34:fb:
                    d3:72:0c:56:ee:25:17:46:d9:1f:73:d8:6e:55:a8:
                    c4:f0:d6:90:15:1b:25:85:9f:e5:f8:84:c7:a5:ec:
                    97:91:ea:12:1b:f3:d8:11:7e:27:64:6a:76:16:86:
                    8e:4a:d3:21:4d:e3:28:a2:8d:29:df:a1:32:6d:b5:
                    73:2c:27:85:f7:a6:83:b8:51:48:fd:da:3a:3b:96:
                    ee:31:57:37:04:f5:af:64:94:e2:90:14:86:a6:18:
                    86:94:20:ba:8a:da:ce:a4:7c:4f:17:71:8b:fa:3f:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AA:9D:89:32:E3:4B:7E:9E:02:88:C5:D0:88:E1:90:35:90:B3:FD
            X509v3 Authority Key Identifier:
                keyid:8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34332e302f32342d3234203d3e20323635353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2e:ce:77:cb:84:89:ef:91:ba:e2:e4:85:ac:28:6b:be:a9:
         0a:b0:8d:41:f1:38:af:02:21:ff:85:f0:1d:67:84:54:d3:ca:
         e0:ad:30:ae:07:83:c6:ae:78:2d:9e:ad:98:7a:02:65:f6:32:
         67:de:7d:7c:eb:87:9e:fb:ec:81:71:03:1a:2e:36:47:05:20:
         e7:1b:9d:85:74:c5:98:29:15:04:05:18:41:b9:77:12:17:68:
         77:0c:43:20:99:c5:9e:50:f8:9c:ec:55:72:11:c3:ce:3b:42:
         c7:e4:ac:d2:8d:7d:1f:a8:44:75:47:e4:8c:ec:05:b0:b4:33:
         17:fa:e3:58:c7:ac:fa:9d:28:78:c2:66:8d:92:23:14:52:38:
         56:2d:4e:6e:9a:ed:33:80:e9:44:f1:3f:58:11:0c:22:1e:d5:
         01:38:c7:99:7e:60:44:1c:a4:ce:ed:02:c1:08:bb:18:9b:89:
         93:42:53:62:55:12:91:57:78:96:2c:ba:07:a6:a9:2a:08:f1:
         9f:8a:ef:72:6b:bf:f6:e7:a5:dc:90:a1:11:e1:9d:99:d5:3f:
         a1:32:7e:e8:b6:0d:c3:15:8c:17:d4:47:d9:58:26:21:2f:97:
         60:79:7b:c2:37:4a:6d:8c:68:47:69:43:7c:74:e7:fe:b4:ed:
         2f:01:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org