Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/3139322e3138382e34382e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e34382e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          +V6nU6oNxGkBd6RlbMfK7Z4PhRIezdH0calcSsSiiNE=
Subject key identifier:   B6:DC:A0:84:B7:E6:29:E3:58:24:25:DC:D4:12:C3:AB:CB:73:BE:F6
Certificate issuer:       /CN=F7B07584D2AD2762D747DA517E182FEBEA108A82
Certificate serial:       6627D8EA384684CD254CF87CA570C0974EC37DBE
Authority key identifier: F7:B0:75:84:D2:AD:27:62:D7:47:DA:51:7E:18:2F:EB:EA:10:8A:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/3139322e3138382e34382e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:23:48 +0000
ROA not before:           Tue 05 Mar 2024 18:18:48 +0000
ROA not after:            Tue 04 Mar 2025 18:23:48 +0000
asID:                     61468
IP address blocks:        192.188.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:27:d8:ea:38:46:84:cd:25:4c:f8:7c:a5:70:c0:97:4e:c3:7d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7B07584D2AD2762D747DA517E182FEBEA108A82
        Validity
            Not Before: Mar  5 18:18:48 2024 GMT
            Not After : Mar  4 18:23:48 2025 GMT
        Subject: CN=B6DCA084B7E629E3582425DCD412C3ABCB73BEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e7:91:22:52:e9:6a:94:3c:fb:2c:cb:99:4c:
                    f7:f0:9c:fc:c6:2f:47:09:64:fc:70:5c:75:43:70:
                    4a:04:57:62:c8:b6:91:19:d7:3e:7a:d3:7e:ea:8b:
                    78:de:d6:77:80:2c:fd:43:85:91:2c:0d:a7:c3:f7:
                    54:67:36:c3:64:0c:10:70:86:6c:84:e8:77:7d:c3:
                    42:e9:b1:65:a7:10:72:fa:b2:fa:c7:ff:a3:b3:16:
                    45:5d:f8:b5:bc:39:19:1e:59:d5:28:c9:e6:4f:d5:
                    36:f3:db:45:b8:eb:57:31:aa:b1:b3:08:a9:68:54:
                    3b:a0:8d:b4:98:87:55:f9:4c:96:67:ce:7e:44:ad:
                    e3:3d:21:df:51:9c:b8:54:17:05:dc:c1:4b:b4:de:
                    4b:6f:3b:6c:f3:87:ce:2b:1e:29:63:85:00:e0:8e:
                    50:52:cf:36:61:dc:24:e2:76:b8:df:42:43:e4:6e:
                    64:13:b1:41:ac:2a:cd:e4:7f:ed:79:7f:31:93:13:
                    47:45:1b:2f:48:20:4f:0c:86:72:05:b3:6a:ec:b7:
                    04:df:a7:9f:6e:ba:e5:98:74:cf:ed:b4:03:96:71:
                    23:02:a3:ba:5c:7e:33:07:c3:7c:ac:5a:4e:94:4c:
                    a5:0f:4b:40:6f:8d:50:8a:41:c1:cf:61:e9:d1:c5:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DC:A0:84:B7:E6:29:E3:58:24:25:DC:D4:12:C3:AB:CB:73:BE:F6
            X509v3 Authority Key Identifier:
                keyid:F7:B0:75:84:D2:AD:27:62:D7:47:DA:51:7E:18:2F:EB:EA:10:8A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/3139322e3138382e34382e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:45:78:87:39:a8:19:46:52:d8:d4:40:8d:a6:e3:53:48:78:
         92:18:d5:d2:60:b7:be:54:c9:3f:86:be:00:f5:c2:c0:ec:43:
         6d:00:82:7d:3c:e2:9b:6e:64:34:4e:a4:c6:c9:b0:27:2f:8b:
         26:e2:45:5b:6e:c8:ea:7a:ef:b4:fc:1c:03:4e:e2:dd:1d:99:
         a3:1e:82:e3:08:6a:14:13:4f:33:43:37:5b:c1:89:29:32:93:
         80:75:14:97:93:bf:1a:5d:03:15:cc:bb:6b:a2:44:b1:5a:03:
         d5:d1:21:6a:8a:c6:e4:cd:e0:cc:82:dd:0b:4b:03:e9:e8:ad:
         10:76:af:55:d2:8e:52:74:c5:a6:ee:9f:d8:9e:63:01:dd:ac:
         41:1b:da:dc:a3:8f:71:31:1b:aa:bc:60:da:f6:80:8d:70:4e:
         67:c8:f7:0e:0d:52:be:7d:b2:88:89:a1:40:fc:84:c4:19:f7:
         e3:87:c6:a2:54:a4:69:b4:76:3e:df:ff:e3:29:a7:93:88:46:
         8f:d7:3b:4c:42:d0:9e:bd:14:43:99:74:8a:0a:9a:18:19:d3:
         98:56:ea:da:e0:26:e1:4a:05:13:65:8f:b9:db:88:63:b7:cf:
         b7:f4:e6:a3:f9:03:2b:52:33:2b:b1:90:1a:23:d1:6d:5a:60:
         c4:8a:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:27 2024 by rpki-client on console-ams.rpki-client.org