Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          sMsTHT0P2uuRT4HW07FeECgQDPTDLWzq8XfC44aNW64=
Subject key identifier:   C4:FE:C3:2E:8A:35:66:85:E4:61:08:B0:9B:31:1D:79:46:83:20:FE
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       466BE11CACA771D9612EA3811D2E4C9AA01DFE16
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:46 +0000
ROA not before:           Tue 05 Mar 2024 17:45:46 +0000
ROA not after:            Tue 04 Mar 2025 17:50:46 +0000
asID:                     18734
IP address blocks:        189.202.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6b:e1:1c:ac:a7:71:d9:61:2e:a3:81:1d:2e:4c:9a:a0:1d:fe:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:46 2024 GMT
            Not After : Mar  4 17:50:46 2025 GMT
        Subject: CN=C4FEC32E8A356685E46108B09B311D79468320FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:a5:a0:6a:a7:ad:57:cc:b5:39:4c:64:9e:
                    8c:15:93:75:0b:92:7e:a3:0b:c7:d4:72:be:d6:8d:
                    04:ec:16:3b:0c:c9:dd:e6:14:81:c7:da:dc:41:9b:
                    cf:d3:0a:28:b5:00:7e:c9:dc:75:49:44:91:ec:87:
                    5c:0e:aa:66:c8:56:e5:58:bb:d2:87:6f:24:f4:88:
                    d7:4b:50:d3:d5:c3:02:81:12:73:fe:c5:e3:38:04:
                    36:55:7e:43:f8:59:66:f5:b1:0a:38:6d:28:8b:d3:
                    1f:06:3b:81:7f:66:c0:f2:76:59:4b:cb:68:df:41:
                    57:47:26:69:de:a2:59:82:53:74:14:32:8c:b3:81:
                    64:1b:80:36:7f:38:d7:bb:5a:70:8d:d2:a5:05:1c:
                    88:c3:96:34:aa:75:bc:0f:87:91:b9:57:15:31:3e:
                    2a:f9:69:44:40:08:60:29:86:69:3d:cd:88:81:24:
                    56:52:51:12:f1:4a:7f:e9:a8:d5:c9:7d:8f:08:cd:
                    79:03:cf:82:57:f2:bf:e5:a7:ad:fd:86:80:ae:ae:
                    3d:af:3b:f7:3e:be:b1:2c:15:b6:aa:00:b9:51:ce:
                    89:a0:2b:dd:67:63:72:10:0b:d9:83:2c:45:86:da:
                    f8:29:f1:71:a3:dd:4c:ce:a8:22:3f:e8:23:44:8a:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:C3:2E:8A:35:66:85:E4:61:08:B0:9B:31:1D:79:46:83:20:FE
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:09:9a:e9:f2:e0:61:4f:70:13:e4:0d:17:d3:25:57:12:3a:
         3d:ef:b9:c0:a1:33:52:a9:b2:fc:0f:e0:2c:5f:8b:68:54:99:
         19:98:03:82:05:05:ac:98:3d:a0:bb:bc:62:8f:7a:01:81:04:
         cb:8f:64:f6:9d:77:cd:fd:ef:9e:6e:8d:c6:97:78:72:fa:23:
         9b:78:01:7e:35:d5:9d:5d:25:75:51:2f:8a:6f:11:51:de:5c:
         bb:d9:23:53:d5:c5:2f:a3:93:42:a5:de:01:83:cb:8e:03:8a:
         40:e4:30:ac:a1:e7:6a:2a:c8:3c:c4:d7:69:f0:d8:8d:be:7f:
         54:4a:e8:97:9f:87:a2:db:b7:d5:47:99:b8:d5:28:20:30:73:
         4c:40:e8:18:77:33:c2:ab:46:7f:92:38:c7:2d:6f:af:3a:f8:
         24:55:c5:8c:dc:d6:44:6a:58:45:d7:b7:f4:1c:f5:3c:20:2d:
         73:7b:a9:1f:a1:f5:92:64:68:c6:c4:86:83:85:f4:7e:e7:22:
         71:14:89:46:c0:91:d7:9d:77:d7:48:ed:32:59:4d:9c:2b:8d:
         ba:a2:ca:76:8f:24:8a:f1:5c:87:24:b3:0e:2a:b4:9c:06:06:
         71:3d:57:50:f8:54:ea:d9:37:8a:43:56:87:70:c5:08:1c:f3:
         bc:b9:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:07:16 2024 by rpki-client on console-ams.rpki-client.org