Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3235312e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3235312e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          v/xtjNaRR/iqDqHVBTgBGXsMkxi1G3DMjlwesW2cElM=
Subject key identifier:   99:35:BF:CE:C7:94:FA:D6:62:AC:8A:63:8A:A9:EC:8F:A2:66:3C:A6
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       34016AC5EE19CFAC6A65C091644F0AE36668088F
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3235312e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:47 +0000
ROA not before:           Tue 05 Mar 2024 17:45:47 +0000
ROA not after:            Tue 04 Mar 2025 17:50:47 +0000
asID:                     18734
IP address blocks:        189.202.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:01:6a:c5:ee:19:cf:ac:6a:65:c0:91:64:4f:0a:e3:66:68:08:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:47 2024 GMT
            Not After : Mar  4 17:50:47 2025 GMT
        Subject: CN=9935BFCEC794FAD662AC8A638AA9EC8FA2663CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:f4:b6:f9:53:c1:50:0a:7a:32:a3:6c:aa:
                    54:3a:c0:67:61:0f:b2:14:90:d0:7d:31:bc:4b:df:
                    1c:fe:84:33:01:77:de:2a:0b:c6:4c:3d:ef:73:c1:
                    78:a4:80:b5:a1:04:ad:50:fd:75:d9:a6:2b:5a:c1:
                    5e:7d:ca:75:da:8c:a9:0b:c7:f0:1f:18:4d:51:d3:
                    48:17:7e:4b:07:d0:a2:04:d5:a5:bc:0b:f2:7d:2e:
                    f4:82:2d:25:e1:f2:6f:f8:7e:1e:8d:f4:78:a0:56:
                    4f:42:2e:d4:27:5b:10:78:43:ca:49:73:eb:a0:0f:
                    e5:4b:8e:be:a8:f5:b7:68:14:97:f1:57:8f:f5:06:
                    0d:c4:bf:82:cd:41:a9:e0:04:83:3e:07:dd:e8:fc:
                    b7:6f:f6:7c:fd:6d:16:43:3a:d6:a7:30:8b:3b:aa:
                    a1:74:bf:a8:8a:01:8e:4f:07:02:0c:54:bc:ab:17:
                    ae:e0:fa:ef:89:7f:44:25:6b:0a:d3:5a:d7:97:3f:
                    2b:d3:90:25:33:4c:31:92:85:84:39:bb:c2:34:1e:
                    97:bb:c1:c4:5c:ca:92:ff:f0:fb:ea:3c:59:0a:0c:
                    d9:f5:b4:da:8e:0e:f3:a6:b2:a7:79:a0:cf:d9:0e:
                    61:d8:22:5b:32:c3:3e:89:a5:05:97:b5:c2:6d:13:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:35:BF:CE:C7:94:FA:D6:62:AC:8A:63:8A:A9:EC:8F:A2:66:3C:A6
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3235312e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:bb:05:45:85:85:3c:c1:a7:a2:1d:4c:21:7c:90:64:d6:
         77:61:39:4a:90:18:19:9b:bb:a1:4d:8f:6d:2e:5c:73:89:39:
         7a:99:ca:87:9c:5c:c5:1b:b1:65:03:39:63:04:c2:9d:77:39:
         d0:76:cd:48:03:a1:52:74:6e:fb:66:57:f3:b0:4d:56:bb:bb:
         cb:a4:77:c7:ac:af:37:10:00:7a:b2:36:89:6c:f0:50:0b:67:
         6d:af:b9:3f:2a:05:51:9e:41:47:ee:5e:aa:ef:08:58:e9:af:
         7b:86:c3:56:0c:fa:f0:f8:dd:c8:f5:1b:31:ac:b7:f7:3c:31:
         ab:9b:61:bd:78:f0:78:c0:32:00:2b:f4:b3:dc:fd:06:84:31:
         6a:a1:96:06:15:d1:97:6f:e1:fe:dd:67:09:b5:0d:79:31:20:
         c0:40:97:31:84:af:fb:ab:d0:de:1e:97:dc:ce:84:a9:38:7f:
         0a:62:4a:0f:87:25:04:06:d9:49:f8:44:12:e3:56:29:2c:7a:
         e7:ca:d9:bf:37:11:63:06:68:8c:bf:1f:54:3c:27:eb:44:a1:
         b1:fb:dd:aa:c0:40:44:37:d2:bb:5f:81:68:72:84:b4:6d:25:
         66:ee:76:c1:27:6c:7f:1c:78:5a:85:8c:6f:4e:08:62:fe:10:
         30:71:d7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:12:15 2024 by rpki-client on console-fra.rpki-client.org