Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/3134332e302e3130302e302f32342d3234203d3e20323634363138.roa
File:                     3134332e302e3130302e302f32342d3234203d3e20323634363138.roa (raw, json)
Hash identifier:          sBEBgFhnO2zr9adCHGdNf1BGJ9xDfnPUqgg/W1RY0Ks=
Subject key identifier:   6E:98:8E:AF:9A:B3:3A:97:4C:FC:3E:BA:42:3F:33:B3:47:1C:27:4F
Certificate issuer:       /CN=7BBA799A94770E31F16F691BE643DE0718D988E7
Certificate serial:       69F4359F6B8E02FF48BC0FF38B8BB59FA36FB468
Authority key identifier: 7B:BA:79:9A:94:77:0E:31:F1:6F:69:1B:E6:43:DE:07:18:D9:88:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BBA799A94770E31F16F691BE643DE0718D988E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/3134332e302e3130302e302f32342d3234203d3e20323634363138.roa
Signing time:             Tue 05 Mar 2024 17:52:42 +0000
ROA not before:           Tue 05 Mar 2024 17:47:42 +0000
ROA not after:            Tue 04 Mar 2025 17:52:42 +0000
asID:                     264618
IP address blocks:        143.0.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/7BBA799A94770E31F16F691BE643DE0718D988E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/7BBA799A94770E31F16F691BE643DE0718D988E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BBA799A94770E31F16F691BE643DE0718D988E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f4:35:9f:6b:8e:02:ff:48:bc:0f:f3:8b:8b:b5:9f:a3:6f:b4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BBA799A94770E31F16F691BE643DE0718D988E7
        Validity
            Not Before: Mar  5 17:47:42 2024 GMT
            Not After : Mar  4 17:52:42 2025 GMT
        Subject: CN=6E988EAF9AB33A974CFC3EBA423F33B3471C274F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:56:e1:6c:b2:23:d7:bb:8f:a4:34:30:09:
                    71:ba:e7:47:3e:1b:88:02:8b:c5:a1:32:7d:a2:c2:
                    95:0d:a0:af:36:0b:1d:eb:16:5f:76:9c:ca:94:e1:
                    66:e3:de:c8:77:22:68:3e:51:2b:31:e8:8d:09:f4:
                    e4:b1:32:04:d8:ba:86:a3:75:dd:9b:da:78:c0:dc:
                    6c:e9:30:b8:51:b6:38:0c:51:32:62:a2:ee:f4:33:
                    72:c3:b9:5f:67:8c:24:a0:6b:5b:9b:38:c7:5f:f6:
                    d0:f3:4b:5b:69:d2:9c:5f:83:59:4b:ed:c3:6a:57:
                    28:3a:09:0a:48:8e:0c:2c:5b:af:4a:e1:9e:2d:4c:
                    20:01:d4:d9:47:a0:31:67:c8:a2:50:b4:20:23:90:
                    43:84:04:b8:4e:25:f0:ae:b5:f3:05:05:80:8f:66:
                    7e:b3:a3:dd:bf:e0:e3:59:17:6a:2b:02:ac:3f:7d:
                    4a:e5:1e:54:24:3e:06:2a:33:95:27:1d:af:ca:e7:
                    4d:b6:c8:52:29:2a:4e:e3:7b:36:80:10:de:d7:cb:
                    aa:c6:c3:ae:17:24:33:a4:af:1f:3d:4b:be:50:ef:
                    47:e7:04:74:70:6f:77:24:4f:ef:12:13:fd:16:de:
                    0b:b8:4d:c3:69:28:11:18:d5:88:a2:c1:2e:08:d5:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:98:8E:AF:9A:B3:3A:97:4C:FC:3E:BA:42:3F:33:B3:47:1C:27:4F
            X509v3 Authority Key Identifier:
                keyid:7B:BA:79:9A:94:77:0E:31:F1:6F:69:1B:E6:43:DE:07:18:D9:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/7BBA799A94770E31F16F691BE643DE0718D988E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BBA799A94770E31F16F691BE643DE0718D988E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/304B9C2550FC9A369B6FF451607501F38218BD478B69FE790F1379077CCA9428/0/3134332e302e3130302e302f32342d3234203d3e20323634363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f8:a6:88:b4:1c:db:b3:73:33:20:be:f4:c4:73:6b:84:07:
         a6:93:02:43:28:af:ff:41:a4:62:4c:e2:cd:d7:9a:90:7a:87:
         8d:d8:cb:bc:6f:2b:f0:01:39:57:28:0d:f4:9b:b2:2d:6b:78:
         0b:4f:45:77:74:89:4e:4c:8b:05:b3:1b:0e:cc:ac:af:1f:1a:
         bd:14:dc:38:a4:bb:6e:1c:59:19:c1:c5:a5:70:c1:76:8e:ea:
         3e:ce:a6:e1:dd:fd:ac:15:4f:86:d8:a1:2b:30:93:22:0a:e0:
         42:2f:09:55:da:d9:27:36:d4:9c:73:1c:8d:04:d7:20:1b:f2:
         16:9a:41:f6:c9:06:51:fe:2d:e3:c5:53:bb:7d:05:f1:44:54:
         99:8d:16:ee:76:bf:69:1c:bf:65:1f:ec:54:9c:8e:0a:39:18:
         06:30:77:6a:c4:ec:2e:3b:80:52:38:cf:1b:65:7a:80:60:58:
         c8:2f:23:01:ff:05:cf:f2:8a:8f:a2:c7:5d:51:b2:33:ad:cc:
         c8:e1:bc:b1:3a:1c:c0:54:b6:52:f0:97:e4:bb:fc:a1:12:9e:
         d1:5c:ef:c1:45:8b:44:a1:11:57:33:7e:1e:fd:6e:20:c8:20:
         a2:85:d0:d3:a9:ba:e1:87:73:7e:24:38:ba:dd:d4:32:5b:d0:
         f5:b7:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org