Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3138322e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3138322e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          aw5gKxA48l1m7LN2uyYt36N8KCxaW9BTvZU2Z8zEUv8=
Subject key identifier:   6A:52:73:BB:68:7D:76:91:D5:1D:07:7F:E1:E1:31:63:9C:E8:7B:68
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       7D766371B710A87759F96DC60CE03C31723951E6
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3138322e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:38 +0000
ROA not before:           Tue 05 Mar 2024 17:45:38 +0000
ROA not after:            Tue 04 Mar 2025 17:50:38 +0000
asID:                     18734
IP address blocks:        189.202.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:76:63:71:b7:10:a8:77:59:f9:6d:c6:0c:e0:3c:31:72:39:51:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:38 2024 GMT
            Not After : Mar  4 17:50:38 2025 GMT
        Subject: CN=6A5273BB687D7691D51D077FE1E131639CE87B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:22:2b:d5:f8:0b:5e:38:88:1f:cb:eb:f4:
                    ca:7f:07:cf:19:45:e3:cd:e4:ec:f2:b4:71:34:1d:
                    d6:f6:76:ac:3c:62:d7:56:81:af:5c:dc:42:1a:ba:
                    b3:15:81:31:c3:f1:22:88:0a:26:ca:fa:2b:c3:05:
                    07:65:76:30:f2:15:e5:2e:45:3b:59:a3:bc:6b:1c:
                    f2:1c:e0:fa:08:a6:a8:e6:9e:d4:95:56:d2:6a:b4:
                    b3:67:77:6a:a0:f3:ef:a8:88:76:21:1a:a0:29:2b:
                    14:f1:d3:de:95:1b:f4:55:15:e5:5d:ba:45:c4:c1:
                    9b:1b:4e:ea:8c:61:a7:bf:fc:0c:91:04:bf:2b:0c:
                    01:0f:7a:cb:b3:83:42:98:00:6a:a7:4e:2b:54:86:
                    1e:89:a8:f6:ee:ce:27:ea:ba:6f:5a:71:25:cd:e7:
                    d0:30:2b:42:20:f1:ef:2a:ba:5c:c2:f1:f1:25:70:
                    9d:eb:f5:38:bb:e6:09:ff:79:6a:4b:c8:65:41:3b:
                    9a:e3:4d:d6:9e:bb:a2:d0:29:fb:07:df:8d:9b:66:
                    f6:53:76:a3:f9:4e:15:7d:7c:26:f0:36:f0:8a:07:
                    e5:1e:87:8d:7e:b5:98:e8:71:65:c9:fd:3d:54:f6:
                    79:31:4a:dc:da:72:34:f2:cc:1e:f3:be:8b:b6:f8:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:52:73:BB:68:7D:76:91:D5:1D:07:7F:E1:E1:31:63:9C:E8:7B:68
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3138322e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ba:fb:00:3b:dc:9d:ca:97:2f:dc:8b:f2:dd:f2:3e:5d:9d:
         33:0a:2f:e4:5a:dc:c3:a3:7b:49:6a:a1:2e:e1:c0:dd:cd:51:
         d7:25:f2:2a:b5:c6:4c:f8:99:d7:a5:77:e4:8e:8a:02:ec:4a:
         47:c1:d1:1b:89:e4:ce:ee:6a:d1:88:7d:12:f2:d9:77:fb:65:
         35:f9:7e:62:83:ac:11:4f:30:21:cc:de:09:5c:4f:78:93:4e:
         82:9f:16:6f:34:a3:9f:50:ac:a7:a6:bb:43:08:d3:5b:d1:6d:
         a6:c6:02:1c:d1:73:07:bf:a8:4c:61:85:68:33:a7:85:20:81:
         62:dd:bf:75:7c:e7:21:df:56:63:2e:c3:19:12:31:67:ae:56:
         9b:5e:f8:22:47:bd:65:4f:54:e5:64:bf:f6:3d:64:8a:72:97:
         66:ed:34:95:96:11:b0:61:52:03:b2:05:4d:8a:d9:9f:4a:58:
         8d:d8:99:bf:70:d9:8e:16:c7:71:af:dc:73:93:3c:a5:b1:60:
         61:ef:ae:ea:f6:6c:72:87:7c:dc:46:0d:87:ea:05:02:53:70:
         e1:26:4e:67:dd:68:b6:6d:52:8c:07:44:7c:82:12:a3:f7:84:
         47:1d:70:95:57:71:ff:d7:c2:11:d6:e6:d6:32:13:b6:e3:7b:
         b0:28:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:12:15 2024 by rpki-client on console-fra.rpki-client.org