Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa
File:                     3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa (raw, json)
Hash identifier:          OIS1rNaOdmqY0/xcPFDrYRdH0jqotHsPgqVnFhjelDM=
Subject key identifier:   D2:2A:FB:5C:25:E9:8F:81:DB:FA:B4:13:65:CC:AC:01:7C:D7:C2:34
Certificate issuer:       /CN=071E98A75F67AF0AC72FFE00A1889291589B7570
Certificate serial:       100618C294BA82F75ABC39D4B0C67777DC88E7AC
Authority key identifier: 07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa
Signing time:             Tue 05 Mar 2024 18:16:33 +0000
ROA not before:           Tue 05 Mar 2024 18:11:33 +0000
ROA not after:            Tue 04 Mar 2025 18:16:33 +0000
asID:                     262934
IP address blocks:        191.102.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 07 May 2024 18:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:06:18:c2:94:ba:82:f7:5a:bc:39:d4:b0:c6:77:77:dc:88:e7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=071E98A75F67AF0AC72FFE00A1889291589B7570
        Validity
            Not Before: Mar  5 18:11:33 2024 GMT
            Not After : Mar  4 18:16:33 2025 GMT
        Subject: CN=D22AFB5C25E98F81DBFAB41365CCAC017CD7C234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:bf:21:62:41:b8:53:88:ad:da:e8:87:c4:
                    01:20:03:68:c3:22:1c:a9:c9:20:99:9f:e6:97:70:
                    48:7c:d3:c0:fd:6a:ad:b9:54:00:de:07:96:69:7b:
                    c3:b9:ba:3d:fd:27:0d:44:35:0d:bd:09:72:dd:d4:
                    14:e8:80:83:0b:93:d2:5b:b4:38:4d:e6:3a:bb:68:
                    92:18:db:b5:b2:f0:06:d9:29:19:d9:04:01:50:a8:
                    0e:1e:20:df:b0:99:eb:84:d9:5d:38:13:a8:d5:96:
                    2f:07:d1:fd:6e:73:18:5a:c9:28:bd:53:1c:c0:71:
                    0e:90:b1:95:ae:92:4a:54:cc:b5:a2:07:6a:54:e0:
                    c2:f7:ac:99:d7:5f:1a:ab:65:92:9e:cb:ad:0f:33:
                    72:93:c6:6d:54:2e:e3:e1:a9:41:a5:64:6e:96:1d:
                    92:16:bd:2f:35:da:ce:5e:19:37:0e:39:ba:2a:d2:
                    8b:e4:8d:bc:00:ae:01:e0:90:5f:e2:36:83:ed:53:
                    2d:53:d4:0b:27:e1:76:0e:22:d1:13:af:f5:e5:ba:
                    e8:3b:83:e4:26:51:1a:5d:11:d6:10:b6:ca:b5:33:
                    bf:28:26:e9:17:fe:8c:86:99:ff:f7:1a:e5:73:82:
                    6e:14:2e:cf:99:a5:2a:c9:dd:7a:3e:92:4c:59:59:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2A:FB:5C:25:E9:8F:81:DB:FA:B4:13:65:CC:AC:01:7C:D7:C2:34
            X509v3 Authority Key Identifier:
                keyid:07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:b6:c2:51:76:97:3d:39:40:53:55:e5:c6:a7:f0:95:a5:d2:
         44:9a:e8:0f:3d:45:9f:30:59:5b:29:7a:07:ee:57:9b:ea:04:
         58:e8:5d:e7:0d:bd:97:e0:11:6e:b2:fe:e4:79:d8:ab:d2:8d:
         24:60:c4:17:c3:ed:57:1f:c4:66:2f:b6:ed:76:8c:fc:e5:bb:
         df:3d:43:d2:c2:ee:0c:1f:f0:22:68:94:de:82:4a:08:c6:42:
         72:45:3b:66:0f:38:d8:48:5c:43:74:b7:1a:8d:e7:fc:cd:d6:
         31:dc:f7:9d:a9:a8:84:8f:cb:7a:ad:fd:9e:ff:bb:5f:3e:92:
         18:48:47:57:7a:7c:7d:51:34:9b:b6:e6:cc:00:8f:60:60:5c:
         a8:37:c3:02:15:7f:96:df:e7:43:98:21:ab:20:6c:ba:34:21:
         9b:f8:04:88:4d:0c:05:a8:84:88:9e:8d:34:54:33:f1:ca:49:
         6e:89:04:bb:94:80:91:d2:26:ac:f7:cb:5a:87:7d:b9:ce:81:
         1c:54:01:79:fc:ff:3a:27:bb:b3:1f:ed:79:3c:0f:63:cf:66:
         99:7f:31:15:e7:cb:a7:2c:ab:57:46:5d:42:7e:0d:b8:d2:e0:
         0a:10:9b:8e:8e:7f:0e:b7:39:88:77:4e:12:2a:8c:99:b5:16:
         0b:79:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:52:34 2024 by rpki-client on console-fra.rpki-client.org