Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa
File:                     3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa (raw, json)
Hash identifier:          0g8J863tkIsQ5ATpU7dELA2hJCbl+gNUhOGMXavqH4w=
Subject key identifier:   D4:EB:EA:16:91:5B:AE:A4:B0:E2:3D:F7:75:44:25:FA:ED:D7:F9:D7
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       69847935CB9CD9BD026CC77A2DD2840C2C9785D8
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa
Signing time:             Fri 31 May 2024 13:35:00 +0000
ROA not before:           Fri 31 May 2024 13:30:00 +0000
ROA not after:            Fri 30 May 2025 13:35:00 +0000
asID:                     61461
IP address blocks:        168.232.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:84:79:35:cb:9c:d9:bd:02:6c:c7:7a:2d:d2:84:0c:2c:97:85:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: May 31 13:30:00 2024 GMT
            Not After : May 30 13:35:00 2025 GMT
        Subject: CN=D4EBEA16915BAEA4B0E23DF7754425FAEDD7F9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:5c:87:5c:9f:41:d1:89:56:ca:5f:f5:fd:
                    b2:b0:00:cb:db:4d:0a:6d:98:3a:4c:49:7c:b7:ff:
                    48:37:3f:fd:22:70:d8:10:38:5e:96:09:48:62:87:
                    bf:87:63:b5:07:5b:eb:d8:1b:c7:83:ca:55:e8:4c:
                    1c:30:c0:64:9c:d8:6c:53:25:19:63:8b:8d:1c:71:
                    0e:f6:b8:16:2b:e1:59:9f:14:a2:70:ea:06:30:88:
                    30:92:40:53:c2:cf:26:d2:22:fe:64:ec:fd:8d:e9:
                    c5:9a:b0:b8:8f:93:5d:c6:4e:cd:b4:ad:5f:37:33:
                    b6:08:72:03:86:4c:e3:11:70:6f:37:ac:b0:9e:63:
                    59:34:7b:46:e0:2a:ec:ca:14:ec:2d:6a:d4:49:76:
                    c6:ef:60:60:56:43:29:01:3c:b9:36:3e:7b:5a:af:
                    f8:8d:d4:87:a8:b1:5c:6b:4f:b6:8c:4b:ae:44:97:
                    de:12:1d:ee:6b:dc:e3:41:a5:53:f1:40:60:c8:9e:
                    50:a2:34:25:81:16:76:ee:1d:cd:d8:b8:35:e9:a3:
                    f3:4f:ad:91:ca:64:aa:57:f5:93:78:fa:11:09:5f:
                    77:a3:a1:9b:0a:91:11:88:b8:5a:f4:16:16:31:26:
                    9d:eb:a8:70:a1:d9:30:a1:c5:30:aa:8e:f9:32:79:
                    83:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EB:EA:16:91:5B:AE:A4:B0:E2:3D:F7:75:44:25:FA:ED:D7:F9:D7
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:8f:28:c3:0a:6c:3c:de:6a:cf:29:73:94:da:b1:7c:12:99:
         16:35:73:20:dc:39:b6:12:32:bc:08:50:d5:3c:24:0d:8c:74:
         04:69:1d:c3:0c:39:c4:f9:82:13:ec:f3:60:fe:18:45:1d:e4:
         2b:1e:b9:09:a6:0a:74:72:85:f5:fa:57:63:b3:17:01:7d:a2:
         e1:bb:f4:26:2f:7d:61:3d:eb:d4:f1:74:04:70:06:de:cf:94:
         a0:8a:c0:a7:8a:25:49:af:30:01:34:79:91:3c:1a:9d:85:93:
         b6:82:85:25:75:2c:8b:35:5f:e3:da:a7:8a:3c:44:a0:0f:6b:
         54:1e:4d:ef:30:cf:50:aa:48:38:43:7e:4d:7f:af:6e:68:87:
         ba:3d:47:ad:16:e3:d8:b8:79:58:ee:f7:c6:68:08:60:9c:1e:
         e2:98:59:dd:95:78:25:fb:4a:d8:6c:80:13:2c:b5:ca:20:6d:
         12:ad:1b:8c:c3:8a:6d:ab:71:62:60:10:ab:1b:79:43:5f:9f:
         dd:5c:29:29:e5:f9:84:56:e2:e4:80:c3:9d:1f:6c:ef:7f:90:
         97:f5:46:ac:13:ab:19:02:48:d0:44:50:24:9d:01:f5:ba:59:
         1f:19:32:50:98:6e:d1:a1:11:c6:f3:9d:4c:89:50:d5:78:dc:
         86:90:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 22:22:36 2024 by rpki-client on console-ams.rpki-client.org