Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3233302e302f32332d3234203d3e203238353438.roa
File:                     3138392e3230322e3233302e302f32332d3234203d3e203238353438.roa (raw, json)
Hash identifier:          0yF7SPUlou8IoBixZLubSRxSQFHlZIqvzteQ0HEX85w=
Subject key identifier:   57:A6:8D:F4:22:D3:89:FB:7B:8F:04:E4:6A:D5:82:73:A0:16:9E:B5
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       44704E83277032C3EC7B9518BD2E26A8C6951922
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3233302e302f32332d3234203d3e203238353438.roa
Signing time:             Tue 05 Mar 2024 17:50:39 +0000
ROA not before:           Tue 05 Mar 2024 17:45:39 +0000
ROA not after:            Tue 04 Mar 2025 17:50:39 +0000
asID:                     28548
IP address blocks:        189.202.230.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:70:4e:83:27:70:32:c3:ec:7b:95:18:bd:2e:26:a8:c6:95:19:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:39 2024 GMT
            Not After : Mar  4 17:50:39 2025 GMT
        Subject: CN=57A68DF422D389FB7B8F04E46AD58273A0169EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e7:6d:b9:eb:c5:b6:7f:a3:73:ac:37:d2:ee:
                    3f:7f:55:8e:65:a8:a9:c0:b0:76:41:13:03:55:8a:
                    37:38:0f:49:43:09:a7:e8:4b:db:7d:61:34:fd:ff:
                    77:89:14:5e:b1:23:62:a5:d3:a1:80:67:ef:4f:0d:
                    2b:98:0f:3d:b1:02:86:cd:fb:78:b6:57:c7:c5:c4:
                    1e:d3:da:4c:6a:9a:6b:bf:1a:a3:27:bb:41:74:1e:
                    3e:90:4a:e9:9b:2a:5e:b0:7e:2c:39:63:20:0f:3d:
                    96:df:ef:82:4d:d2:a5:23:28:79:3f:43:18:40:b4:
                    e9:54:d3:7b:30:c9:88:d8:82:38:22:b3:2c:a1:14:
                    d1:e1:15:8b:7e:20:ad:6e:f0:fc:53:a0:b2:0d:bf:
                    a2:62:8f:5b:3a:83:23:58:d5:41:f8:55:67:57:9f:
                    a9:fa:3e:64:a1:ab:79:85:69:86:e8:94:f0:df:3b:
                    af:f1:59:5e:b1:db:11:f0:ae:cb:e5:74:23:b9:db:
                    30:31:8f:e6:07:8d:77:d7:6a:2a:21:4b:04:5d:da:
                    3b:25:6d:d9:97:ed:13:2b:8a:0d:d2:eb:a9:79:61:
                    71:18:3d:ad:31:78:b6:be:19:68:cd:fb:63:a0:74:
                    a4:d4:e3:79:62:1d:c9:fe:9d:d9:7a:9e:0d:b3:5c:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:8D:F4:22:D3:89:FB:7B:8F:04:E4:6A:D5:82:73:A0:16:9E:B5
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3233302e302f32332d3234203d3e203238353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:13:db:e9:a9:8f:2a:3c:52:63:29:bb:e2:46:53:aa:aa:80:
         cd:fd:69:a8:ea:f4:3c:77:39:79:64:2c:11:07:48:5e:79:0b:
         4a:94:c4:05:26:a8:71:72:6b:c3:9f:22:71:e2:a1:a0:55:b3:
         db:23:61:ef:15:0f:28:43:f4:aa:0f:ab:f1:e7:6d:0e:68:4b:
         b2:27:27:71:1b:18:6d:4d:9e:06:3f:d3:d3:d3:78:ab:11:79:
         70:b9:7d:6e:55:41:69:93:d1:18:71:09:70:d7:5c:fe:ee:47:
         9f:e3:db:9c:58:26:ac:59:d5:21:56:aa:92:4e:f2:f9:c9:d3:
         78:65:d0:a0:59:18:11:3f:ed:6d:95:64:bd:4f:56:79:64:63:
         ad:e2:a0:16:e3:c8:2b:ec:e1:1e:e1:38:a9:a1:60:78:14:4b:
         53:0e:59:1f:11:d6:64:b7:4a:26:02:48:f2:a9:fe:be:96:96:
         c3:10:1e:f2:45:38:d5:06:43:72:84:3d:fb:bf:80:8d:50:9b:
         5b:f8:10:4c:0f:b2:eb:fd:1b:d9:ad:3e:41:45:51:0c:69:96:
         cc:00:5d:00:15:11:7f:47:88:57:eb:3d:46:5e:5e:51:ca:4e:
         95:e5:58:73:c6:41:d6:db:2c:b5:6a:29:64:c6:6c:12:b8:1c:
         80:4e:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org