Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3231362e3233302e3132382e302f31392d3234203d3e203134373534.roa
File:                     3231362e3233302e3132382e302f31392d3234203d3e203134373534.roa (raw, json)
Hash identifier:          ubVpJ7fNESWjArr8HhpXXM1wP5YnPQLAAc55sFTKljM=
Subject key identifier:   A6:3A:F8:74:C3:C1:82:51:3B:97:D4:6C:7F:F7:A8:76:E1:EE:52:C6
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       5C94BAE25608C46854192E7C66FDA942DBC0B8C4
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3231362e3233302e3132382e302f31392d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:23 +0000
ROA not before:           Tue 05 Mar 2024 17:37:23 +0000
ROA not after:            Tue 04 Mar 2025 17:42:23 +0000
asID:                     14754
IP address blocks:        216.230.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:94:ba:e2:56:08:c4:68:54:19:2e:7c:66:fd:a9:42:db:c0:b8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:23 2024 GMT
            Not After : Mar  4 17:42:23 2025 GMT
        Subject: CN=A63AF874C3C182513B97D46C7FF7A876E1EE52C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:6d:b4:39:53:74:94:6d:0c:4a:4f:dc:5a:
                    2e:2e:05:1c:ab:54:98:88:2c:8f:8d:c8:71:67:8b:
                    16:51:ad:22:01:8c:d6:c0:65:a9:e0:5e:14:5a:30:
                    d9:62:ad:d2:7c:5e:bc:a8:a0:70:8f:a6:47:44:22:
                    10:a1:62:91:7f:3a:09:ba:90:65:5b:64:38:a7:c9:
                    b3:28:c9:3b:75:2b:c0:53:d3:d8:47:3b:d4:cc:fa:
                    ba:a0:4f:05:02:71:3e:d2:a0:92:82:0d:b7:3e:e5:
                    ad:9e:0a:74:eb:05:92:40:ba:b9:5b:ed:a4:76:26:
                    09:e8:d7:f1:60:93:89:63:ca:ab:8b:1a:b9:5c:d6:
                    03:36:7a:e5:fd:17:f6:43:3f:1a:c4:d3:de:e7:89:
                    b5:c7:83:0f:3d:26:55:f6:50:ef:f2:49:6c:ba:f3:
                    8f:78:3f:8f:84:4a:11:8f:29:cd:3a:47:66:61:a2:
                    db:d2:79:86:6a:90:cc:4a:ae:25:62:8e:7a:01:f8:
                    a8:6a:03:12:1f:e1:30:ff:e3:93:c1:41:2e:93:66:
                    0b:48:2f:5b:64:b1:0c:a7:94:b1:23:1b:68:5f:5d:
                    8e:7e:1b:e4:43:cf:55:3a:41:de:56:7c:b3:b4:b6:
                    7b:a0:3d:37:d7:2d:02:7f:28:e9:45:7d:78:98:ce:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3A:F8:74:C3:C1:82:51:3B:97:D4:6C:7F:F7:A8:76:E1:EE:52:C6
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3231362e3233302e3132382e302f31392d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:26:97:c3:8b:76:6b:c4:0b:6f:68:95:67:f5:51:d3:5d:38:
         29:97:d9:0d:93:d8:49:76:b7:5a:d5:89:2d:14:d6:d2:10:06:
         c2:24:21:c3:84:4e:88:14:2b:90:cb:ae:ea:08:a2:40:35:45:
         c0:3a:ff:f1:f8:28:a2:e4:1e:c0:36:34:be:f5:cb:49:d9:42:
         ba:c0:ba:9e:a8:31:e4:f6:cc:90:cd:a6:76:1e:b5:75:c7:ef:
         5f:87:02:25:9f:af:f6:0e:f7:41:12:1e:28:b7:0e:df:3b:ed:
         72:d3:fc:ee:9b:a3:d9:b5:a7:d2:ff:ec:75:88:e1:01:44:36:
         49:36:d0:7c:71:17:92:58:57:2e:75:85:45:00:ff:40:04:ca:
         37:0b:d5:03:a4:5a:e1:d8:a8:98:81:b7:f2:90:3d:14:67:b0:
         28:0a:63:89:66:6f:ca:e1:bf:8d:d8:c0:6a:57:25:f6:50:47:
         20:54:c1:03:26:71:0a:10:d4:dc:56:23:9a:69:74:18:0e:3e:
         b5:79:c9:c6:16:53:a0:c3:4a:c3:3f:7e:1a:88:38:cd:38:5b:
         02:fc:e9:c4:f2:66:7f:a9:f1:7b:05:b5:91:4d:d8:f5:4d:55:
         6f:c9:f3:83:89:e7:8c:90:c5:9d:07:8a:df:9f:d3:f5:e5:8b:
         0e:23:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org