Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/3138372e3130322e3231362e302f32322d3234203d3e20323730303034.roa
File:                     3138372e3130322e3231362e302f32322d3234203d3e20323730303034.roa (raw, json)
Hash identifier:          5in0hag4ZDi2h+rcJsjgLomJZe0xftQGLuWhXf3WD/Q=
Subject key identifier:   E2:6A:FF:37:65:17:C1:68:1D:5E:7D:A8:B6:87:AC:43:D4:D9:7A:96
Certificate issuer:       /CN=6313E6A17698A1287384FBB72C52152A7BD6DCB6
Certificate serial:       4CFDB0F5A1D52E3D30BB3908E1915614B6EF43B5
Authority key identifier: 63:13:E6:A1:76:98:A1:28:73:84:FB:B7:2C:52:15:2A:7B:D6:DC:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/3138372e3130322e3231362e302f32322d3234203d3e20323730303034.roa
Signing time:             Tue 05 Mar 2024 17:40:42 +0000
ROA not before:           Tue 05 Mar 2024 17:35:42 +0000
ROA not after:            Tue 04 Mar 2025 17:40:42 +0000
asID:                     270004
IP address blocks:        187.102.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fd:b0:f5:a1:d5:2e:3d:30:bb:39:08:e1:91:56:14:b6:ef:43:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6313E6A17698A1287384FBB72C52152A7BD6DCB6
        Validity
            Not Before: Mar  5 17:35:42 2024 GMT
            Not After : Mar  4 17:40:42 2025 GMT
        Subject: CN=E26AFF376517C1681D5E7DA8B687AC43D4D97A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:51:ec:87:d4:cb:f0:1a:56:fd:ce:d4:59:
                    c2:37:08:b2:b0:1d:ce:36:06:5a:59:fd:a0:05:cd:
                    a3:c9:15:92:21:08:44:3f:e4:05:27:62:65:c7:ff:
                    67:46:b9:07:60:f0:d5:cb:d2:69:26:51:55:6b:76:
                    8d:7b:d0:af:57:70:e4:59:79:67:e0:35:d0:47:5d:
                    d0:55:5f:58:e8:8f:f3:58:ab:e8:b0:9c:ee:ee:fa:
                    5b:28:1d:38:8b:38:da:72:4d:2b:fb:c5:d6:93:52:
                    46:29:6a:83:75:6c:e6:60:71:cd:ad:9f:b5:15:89:
                    d7:d9:21:c7:80:85:38:9e:44:ec:b8:a4:e5:e5:a4:
                    59:af:5b:c9:e5:da:29:ca:b5:c8:53:46:eb:a0:36:
                    65:21:90:33:ae:61:69:fb:6d:ac:41:a6:1b:b2:8b:
                    8a:02:d4:05:26:2e:07:f1:37:a2:ed:c5:6a:ab:2c:
                    93:35:b6:6b:fd:9a:08:fe:68:90:01:f6:76:34:31:
                    70:f5:48:1c:06:24:5a:26:13:28:12:ef:89:3a:ab:
                    61:90:0d:1e:de:cf:c4:0d:06:9a:1a:df:a4:83:e4:
                    e8:1c:a6:f7:d1:9c:61:70:ec:7c:49:6f:e4:0e:59:
                    18:af:c6:bf:28:0e:a9:0f:5d:f6:78:ef:9e:9b:11:
                    c0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6A:FF:37:65:17:C1:68:1D:5E:7D:A8:B6:87:AC:43:D4:D9:7A:96
            X509v3 Authority Key Identifier:
                keyid:63:13:E6:A1:76:98:A1:28:73:84:FB:B7:2C:52:15:2A:7B:D6:DC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6313E6A17698A1287384FBB72C52152A7BD6DCB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25F4487951F05D1A68FEBDE2B3524AC2AB5F70277D0CDBCAD122A35AF0EE4318/0/3138372e3130322e3231362e302f32322d3234203d3e20323730303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:09:42:6a:05:20:0d:a7:67:c5:fa:a0:6f:80:7a:c4:77:db:
         ba:92:73:60:71:53:8f:f4:29:93:d5:c8:72:d9:0d:e8:40:a3:
         ac:ff:ad:90:6c:7f:93:ad:ca:ae:93:58:3d:72:77:85:2b:d2:
         b1:e5:69:3b:2c:cd:80:93:6f:7a:57:50:42:6f:e0:a9:f6:20:
         6e:02:fc:3b:63:d3:e7:1c:95:f0:b2:30:51:7f:96:01:fe:a1:
         67:aa:3f:82:0e:4e:e8:d7:ee:40:c4:5a:3b:b2:d6:ee:78:b5:
         09:5f:bd:c2:49:3c:43:3c:d5:31:c1:bd:3c:3e:10:35:15:da:
         cc:96:fb:34:b5:ce:3e:9d:a3:86:2c:61:2a:ab:ee:2c:58:6b:
         35:8d:8b:9a:11:58:41:c0:07:bc:01:f0:10:62:91:58:8f:03:
         e6:a0:e6:34:61:32:87:38:17:92:42:ba:21:c5:b9:51:b3:f9:
         a9:96:a9:f7:d4:59:b9:27:40:3c:af:95:dc:59:26:91:b1:4e:
         66:1f:dd:ab:2f:67:75:31:a5:f8:ff:96:97:d8:c5:21:3c:47:
         a2:85:1b:ba:9e:9a:e0:55:3c:16:cf:ed:99:cf:30:ac:78:0e:
         49:cb:93:db:ee:32:d9:78:1b:7a:c0:64:6b:1f:db:be:69:a9:
         51:6b:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org