Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/3134332e3235352e3135322e302f32322d3234203d3e20323634363433.roa
File:                     3134332e3235352e3135322e302f32322d3234203d3e20323634363433.roa (raw, json)
Hash identifier:          lXN/8GSG2KDB5VOUAz6OkGCedchI5plhp8zcFjXJQuk=
Subject key identifier:   CE:7E:43:A3:4B:02:E8:87:6B:53:A2:A0:A3:49:37:A1:22:9E:B7:E4
Certificate issuer:       /CN=6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9
Certificate serial:       5266141EC1B685F8EDD8F30CE54C4C90557F3F4D
Authority key identifier: 6C:7B:10:FD:81:C0:E8:D8:A6:DE:1A:27:C5:05:95:09:63:3C:6C:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/3134332e3235352e3135322e302f32322d3234203d3e20323634363433.roa
Signing time:             Tue 05 Mar 2024 18:00:11 +0000
ROA not before:           Tue 05 Mar 2024 17:55:11 +0000
ROA not after:            Tue 04 Mar 2025 18:00:11 +0000
asID:                     264643
IP address blocks:        143.255.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:66:14:1e:c1:b6:85:f8:ed:d8:f3:0c:e5:4c:4c:90:55:7f:3f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9
        Validity
            Not Before: Mar  5 17:55:11 2024 GMT
            Not After : Mar  4 18:00:11 2025 GMT
        Subject: CN=CE7E43A34B02E8876B53A2A0A34937A1229EB7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:00:bb:fe:f8:9c:b5:fc:5a:a6:6e:d1:8c:
                    27:e6:7b:3f:82:6d:85:03:49:96:57:7b:83:25:fc:
                    bb:dd:6f:ee:c4:3f:4f:20:29:9d:ca:5c:ba:f1:ed:
                    fa:1f:88:22:f1:bf:fb:f9:92:fe:8d:09:8d:b8:e4:
                    c9:93:96:a6:ba:a6:6a:84:e4:d9:95:08:a9:c0:07:
                    fe:3b:e6:23:b7:03:3d:19:d1:6b:4c:5a:f5:a1:d7:
                    38:9d:b2:58:b1:8a:45:9a:a9:74:f8:52:1c:26:94:
                    d3:fc:f0:74:00:3f:4c:38:1c:78:89:68:5e:50:65:
                    7e:8a:51:58:4b:14:aa:a2:9d:82:07:23:db:3c:a5:
                    ea:d4:83:04:18:3f:99:1b:b9:4b:17:89:ef:30:33:
                    cd:ac:52:48:8c:8f:5d:38:53:68:d8:ef:96:97:3e:
                    87:c2:86:4d:4e:1d:66:7a:80:ba:31:7d:94:90:96:
                    b9:b0:db:51:62:cc:aa:b5:90:d8:24:b1:ab:10:b5:
                    d5:e9:6c:3d:22:fd:e0:2a:56:c2:bc:4e:04:49:bc:
                    79:18:d4:98:2c:7b:a4:e8:25:45:76:21:e0:df:f7:
                    f8:1e:5f:60:d1:da:34:59:6c:e3:68:68:62:4e:6b:
                    92:50:1a:e6:2c:a8:5b:75:50:c5:b8:cb:bf:cd:c9:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7E:43:A3:4B:02:E8:87:6B:53:A2:A0:A3:49:37:A1:22:9E:B7:E4
            X509v3 Authority Key Identifier:
                keyid:6C:7B:10:FD:81:C0:E8:D8:A6:DE:1A:27:C5:05:95:09:63:3C:6C:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/3134332e3235352e3135322e302f32322d3234203d3e20323634363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:4d:e7:dd:a1:55:b1:c5:fc:4c:07:16:31:a9:78:3f:d7:98:
         9a:65:0b:d1:f8:96:3e:9b:00:6a:59:09:e3:8b:10:9c:c5:22:
         4c:24:f2:d2:7f:76:47:51:59:ee:2c:a9:23:65:59:c1:fd:1b:
         6c:2c:c5:25:69:95:ed:d2:f9:dc:27:8d:c4:eb:64:0f:b6:7e:
         0b:52:e2:7f:9b:c3:93:06:22:78:99:61:c6:f9:e0:9a:62:be:
         73:4c:f8:53:f5:a7:e7:6f:81:3e:89:54:49:06:62:d3:bb:70:
         1d:06:fe:a3:74:3c:7d:46:fd:f1:55:06:e7:97:f0:be:98:ac:
         83:e2:c0:39:2a:34:83:ee:08:68:66:be:ea:f8:8a:35:7b:81:
         63:a7:e6:c9:62:8f:73:c4:9b:8d:cb:48:b7:5e:79:85:6e:38:
         c0:a7:ff:b1:65:b3:aa:8e:2e:96:70:6d:9c:f3:9a:6c:bd:cf:
         16:b5:e9:80:18:57:e0:8d:5a:98:3c:50:3b:6a:5f:0c:ed:57:
         4a:ec:96:f3:9f:17:c6:88:f6:32:ff:9d:a4:8f:bd:bf:b2:91:
         6e:ca:76:2e:0f:44:61:e1:06:33:16:0f:d2:51:8d:91:19:4f:
         44:d8:26:24:e5:25:0c:a2:db:b4:51:d0:27:05:d0:82:ab:85:
         99:07:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:55:43 2024 by rpki-client on console-fra.rpki-client.org