Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203232393237.roa
File:                     3139312e35322e3230382e302f32322d3234203d3e203232393237.roa (raw, json)
Hash identifier:          9dA5TbVGfYUm5N1V6DyT2LOia2kl3jzHrO1zVthqj2A=
Subject key identifier:   85:51:05:6C:13:B3:BF:C1:8E:E7:8E:CA:8A:98:12:FB:15:34:B6:4D
Certificate issuer:       /CN=BFFF9ED422983457E784A1C5DF441797B00B1886
Certificate serial:       3F7E600A77E9DA84EF5D0AA03776AF100AD5F24B
Authority key identifier: BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203232393237.roa
Signing time:             Wed 07 Aug 2024 17:05:00 +0000
ROA not before:           Wed 07 Aug 2024 17:00:00 +0000
ROA not after:            Wed 06 Aug 2025 17:05:00 +0000
asID:                     22927
IP address blocks:        191.52.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl
                          rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7e:60:0a:77:e9:da:84:ef:5d:0a:a0:37:76:af:10:0a:d5:f2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFFF9ED422983457E784A1C5DF441797B00B1886
        Validity
            Not Before: Aug  7 17:00:00 2024 GMT
            Not After : Aug  6 17:05:00 2025 GMT
        Subject: CN=8551056C13B3BFC18EE78ECA8A9812FB1534B64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:8a:be:a2:8f:92:f7:ae:93:5f:c4:49:95:
                    6f:f0:2f:83:9f:f8:60:4e:d2:72:2b:00:ca:6e:e8:
                    fd:c6:9b:0d:b1:3a:b6:60:c8:7e:53:18:b5:0a:2c:
                    6d:da:d9:3d:b4:c1:b4:3a:8c:2e:4f:22:34:5f:dc:
                    8a:f5:fc:a8:83:14:0a:a2:dc:93:c4:6b:f3:f6:f9:
                    9c:9e:fd:ff:12:39:d3:42:5e:00:0a:5d:d4:a5:b4:
                    5a:54:58:f0:24:47:40:dc:2d:21:08:78:25:11:65:
                    51:0e:b8:51:50:6c:8f:43:3f:e0:59:5d:db:18:be:
                    0b:3a:93:d8:f9:8b:8f:5e:ef:43:50:11:2a:b2:7e:
                    16:e8:e8:10:28:5b:64:95:12:31:0a:b9:1f:e3:46:
                    6b:0c:e8:2e:74:d0:c3:d8:b6:16:11:87:c2:87:ad:
                    29:8c:53:74:d8:01:67:71:ea:01:a6:7d:ac:3e:47:
                    b2:03:fc:8e:41:48:a2:5f:83:30:0c:df:41:8a:7b:
                    96:61:eb:cc:06:d9:33:09:4d:78:98:71:69:5c:ea:
                    89:a5:5d:08:51:1d:8f:23:c2:5d:11:cb:5f:05:fa:
                    7b:94:3b:56:7b:ab:5a:e4:5a:fa:f2:3a:db:84:c3:
                    de:16:84:20:99:be:9b:df:f9:00:0c:cc:4a:6b:94:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:05:6C:13:B3:BF:C1:8E:E7:8E:CA:8A:98:12:FB:15:34:B6:4D
            X509v3 Authority Key Identifier:
                keyid:BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:cc:49:10:c0:97:ad:c1:4d:16:89:8a:9b:56:94:2b:86:3f:
         b2:62:03:e8:39:14:ee:26:13:86:2c:4f:d8:88:6c:75:0d:7d:
         0d:2d:2e:f8:fe:0a:79:78:67:de:97:92:3a:57:7e:8a:0c:9a:
         55:0f:62:a8:f5:de:64:06:57:49:24:63:58:78:4e:c0:71:cd:
         78:db:d7:67:be:9a:6c:4b:2b:54:0f:a0:08:7d:37:1a:a0:db:
         4d:b9:4c:74:ff:8e:bf:79:c2:cc:ec:76:3e:7a:cc:ee:95:85:
         93:37:a2:c5:01:b0:59:c8:e8:52:00:23:02:af:61:94:b1:ab:
         5f:7d:b9:e2:24:bd:76:96:bd:1b:73:6d:b5:df:87:8b:f6:03:
         bd:4e:58:a6:93:b8:c6:c1:e1:c1:82:9b:7e:2d:fb:01:69:08:
         b8:19:ff:37:d9:1b:45:81:7f:16:f7:3e:5d:2c:e5:da:c3:37:
         c2:da:b8:9d:e9:e8:fb:0d:8e:72:81:4b:7d:99:6f:52:3a:c6:
         5c:c0:13:6a:e7:2c:d3:20:a3:56:a4:7c:ea:50:d8:a9:bd:58:
         fe:92:f0:1c:e3:6e:02:b6:48:31:3b:c4:c7:4c:3e:db:c2:e8:
         1c:94:53:92:e0:ab:45:e6:a4:23:b1:10:75:8c:2b:22:24:ce:
         d7:9c:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 07:56:07 2024 by rpki-client on console-fra.rpki-client.org