Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/3132382e3230312e3131322e302f32322d3234203d3e20323635373231.roa
File:                     3132382e3230312e3131322e302f32322d3234203d3e20323635373231.roa (raw, json)
Hash identifier:          uXxZdv3G5WFtkAqbG5m5jNI01k9Eggqvp1B3UQcWtNY=
Subject key identifier:   8B:A1:F7:54:50:65:01:66:44:F5:6E:E9:E8:15:1E:F0:09:30:7C:79
Certificate issuer:       /CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61
Certificate serial:       50144ADFA7044AD331E0FC010CCA4DAD67AD37A6
Authority key identifier: CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/3132382e3230312e3131322e302f32322d3234203d3e20323635373231.roa
Signing time:             Tue 05 Mar 2024 18:07:32 +0000
ROA not before:           Tue 05 Mar 2024 18:02:32 +0000
ROA not after:            Tue 04 Mar 2025 18:07:32 +0000
asID:                     265721
IP address blocks:        128.201.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:14:4a:df:a7:04:4a:d3:31:e0:fc:01:0c:ca:4d:ad:67:ad:37:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61
        Validity
            Not Before: Mar  5 18:02:32 2024 GMT
            Not After : Mar  4 18:07:32 2025 GMT
        Subject: CN=8BA1F7545065016644F56EE9E8151EF009307C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8b:d6:77:38:98:79:51:8e:9d:e9:29:1f:57:
                    6c:55:26:d6:92:6e:0b:d2:a6:40:c5:9f:3c:da:fe:
                    a7:5f:c7:70:a6:14:8d:38:a5:20:2c:ee:b3:7d:67:
                    b9:02:b2:7a:f1:d3:36:87:dd:3b:f5:51:16:e4:2f:
                    9b:77:23:a4:f2:07:81:b8:16:ea:bb:36:ff:46:02:
                    fd:c0:aa:80:fd:1b:23:81:87:2a:37:b3:ee:f4:7e:
                    ca:e7:4f:7c:ae:79:fe:91:8e:27:ed:c0:dc:b4:66:
                    d7:af:58:72:58:ee:36:bd:31:da:e1:dc:92:83:88:
                    0b:e5:ea:08:38:44:fa:a1:0b:6b:ff:0a:00:f4:5d:
                    56:78:c3:66:5e:4a:fa:5a:a5:02:f2:4a:6a:bc:68:
                    08:b5:f9:8b:83:c0:10:05:cc:75:23:d2:b2:c3:65:
                    90:87:5c:1e:3e:0d:e1:b0:ed:48:a1:fc:dc:34:5a:
                    07:80:f4:2d:b9:bb:e5:6a:04:69:9e:02:d3:40:dd:
                    b3:02:45:2a:7d:55:1f:23:f6:03:69:1a:21:23:98:
                    a0:d1:83:77:3f:0e:4c:74:cc:14:d4:71:2d:9a:e3:
                    54:b8:9f:ac:48:45:42:85:07:2f:c1:d5:1b:6a:2e:
                    a1:4f:d9:0c:c1:fc:10:b9:9d:cd:4a:9d:a2:66:48:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A1:F7:54:50:65:01:66:44:F5:6E:E9:E8:15:1E:F0:09:30:7C:79
            X509v3 Authority Key Identifier:
                keyid:CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/3132382e3230312e3131322e302f32322d3234203d3e20323635373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:58:57:0d:43:81:27:7d:0f:8e:a5:08:0a:ba:20:39:94:b9:
         6d:c1:bb:0f:33:8f:6c:87:d0:78:af:64:d9:08:ea:a6:5a:e3:
         25:f7:80:e8:58:38:85:e6:b2:07:9c:1e:69:e1:3a:89:04:31:
         12:9c:17:f7:d9:8d:1e:58:a8:7d:72:fa:97:fd:77:c6:13:5c:
         8b:c9:10:58:f4:3b:81:4f:ce:3f:3e:10:7b:e7:e5:4a:16:50:
         7f:41:89:7c:c8:57:bc:cf:f2:3a:03:75:52:08:8f:b2:f7:59:
         e4:94:8e:a8:bf:04:75:e7:d2:76:ae:8a:5f:b9:7b:a5:64:9b:
         72:a5:ff:f7:bd:d9:e6:f8:d8:14:a7:bd:fa:e9:28:be:c0:fd:
         f5:d1:ca:5a:85:53:dc:f1:ed:65:19:b5:55:ac:da:a0:b1:82:
         4a:c0:c5:3a:61:f6:28:60:bc:02:c8:b3:1f:09:13:3a:99:11:
         bd:ec:bf:2d:e8:db:51:58:a6:34:dc:27:97:96:b4:77:88:5f:
         e4:4c:48:a7:8f:21:90:ec:16:b6:a7:ba:7b:76:b2:5c:f3:0b:
         56:fc:51:8a:fb:8a:ef:01:87:0a:34:72:3d:96:d8:f0:70:60:
         25:cd:12:76:c7:c0:b0:f0:b1:4b:f1:38:1e:eb:ae:42:bd:94:
         a3:b2:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org