Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3134332e3133372e38302e302f32322d3232203d3e20323634373530.roa
File:                     3134332e3133372e38302e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier:          Gz8zxO3PY78FE5MUWzJse2SAdrl5ByuXjJrSzkx8qgA=
Subject key identifier:   79:28:A2:03:AD:98:6A:4D:C9:CC:F4:22:17:A6:74:CC:E6:01:56:C3
Certificate issuer:       /CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Certificate serial:       02FBBB9E34AFD7C33DEB021FD5A10A10B1AA82B1
Authority key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3134332e3133372e38302e302f32322d3232203d3e20323634373530.roa
Signing time:             Tue 05 Mar 2024 17:41:43 +0000
ROA not before:           Tue 05 Mar 2024 17:36:43 +0000
ROA not after:            Tue 04 Mar 2025 17:41:43 +0000
asID:                     264750
IP address blocks:        143.137.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 22:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fb:bb:9e:34:af:d7:c3:3d:eb:02:1f:d5:a1:0a:10:b1:aa:82:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
        Validity
            Not Before: Mar  5 17:36:43 2024 GMT
            Not After : Mar  4 17:41:43 2025 GMT
        Subject: CN=7928A203AD986A4DC9CCF42217A674CCE60156C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:14:78:47:3d:be:50:15:c8:88:e5:22:b8:
                    27:ad:4e:d7:1b:6c:99:67:04:7f:e5:e8:c9:34:0a:
                    ba:8d:33:fb:81:20:3e:8d:23:86:df:bc:07:60:81:
                    2d:68:81:d9:00:b1:d5:af:13:c7:67:9f:0b:6c:0f:
                    a2:e2:e2:2a:7f:83:2b:20:2d:ab:ff:ba:89:f9:f4:
                    cf:f8:98:ff:70:29:b5:84:57:e8:b7:91:e1:40:75:
                    7a:98:cf:cc:f1:6b:47:de:1b:2b:67:8d:66:73:8f:
                    b4:1a:27:be:13:f8:2b:e3:92:86:10:b3:8e:dc:ac:
                    a6:24:66:84:37:f2:a9:ae:59:d7:38:3a:99:ca:5d:
                    63:b0:9b:86:ad:d0:39:ac:2c:cc:38:51:cb:25:19:
                    c8:0b:96:8a:1c:26:fb:e4:dd:22:a5:ee:82:44:2c:
                    01:a4:4a:6b:c2:3e:41:58:db:f1:6f:e2:82:a5:72:
                    10:65:d2:92:bc:68:11:ec:01:00:b0:f9:3d:d5:70:
                    2d:6d:43:ce:94:a4:d2:50:40:fb:42:5c:7d:03:46:
                    59:b9:72:01:2a:36:84:fa:d3:1d:d5:98:ef:21:cb:
                    7f:4c:1e:e1:16:d0:54:7c:66:bc:3d:5d:2e:da:a3:
                    12:79:ac:1b:13:1d:a2:c1:c7:60:e4:ac:f4:38:07:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:28:A2:03:AD:98:6A:4D:C9:CC:F4:22:17:A6:74:CC:E6:01:56:C3
            X509v3 Authority Key Identifier:
                keyid:0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3134332e3133372e38302e302f32322d3232203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:99:92:6c:3b:bd:6a:09:55:f9:f9:12:ff:02:ce:53:9b:
         72:fa:82:b5:ed:30:54:32:43:f9:36:bf:6f:8f:aa:e9:86:ab:
         ca:b6:c8:fb:12:c3:14:85:a0:36:30:ae:18:31:14:08:2e:d1:
         ca:44:30:05:21:c3:df:fa:9c:89:4f:34:5f:0c:bf:1e:e2:bf:
         9f:34:bb:fa:e1:eb:f1:c0:b9:d3:8d:7a:c8:87:91:3b:f6:da:
         4a:76:26:ac:e2:a8:21:71:03:49:15:e7:e3:8a:c9:d5:e1:8f:
         7f:f4:b7:98:3c:31:14:05:7a:96:e0:8e:bf:29:87:a6:b5:ce:
         99:74:be:f8:fb:c8:43:9b:0b:1a:06:8b:7a:87:bb:fa:74:cc:
         21:ff:83:c8:83:c3:fe:56:ef:5f:26:14:cd:ce:71:98:51:35:
         81:e2:14:6b:08:fb:b7:0b:cc:c3:b9:bf:02:18:3e:8d:61:3d:
         af:cc:21:f2:6a:ef:15:b1:e8:fe:8e:06:db:b8:d1:e8:c2:c8:
         78:18:61:6f:1e:8d:e3:e4:f9:56:21:ad:cf:ba:c8:7d:eb:84:
         b5:c1:df:e4:bf:bb:e4:91:4d:57:d1:9c:86:f7:16:73:21:41:
         52:bd:c9:65:ca:ef:36:3c:91:43:2b:73:12:99:fb:2b:5c:14:
         8d:15:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org