Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/3133322e3235352e382e302f32322d3232203d3e20323635383233.roa
File:                     3133322e3235352e382e302f32322d3232203d3e20323635383233.roa (raw, json)
Hash identifier:          YJwV+O5q8hQr9zbyT9BQAagp7eEjGZbWr+6xRO4ZB+8=
Subject key identifier:   C2:D4:C9:A6:5B:FC:CA:13:47:CD:56:00:A2:10:6D:B2:4D:03:D0:B2
Certificate issuer:       /CN=147B7D55918A2F6911996FA0232FC4A257FC3C1B
Certificate serial:       4B26256F16767A280B4E2DAC76426E35F9D8FCBE
Authority key identifier: 14:7B:7D:55:91:8A:2F:69:11:99:6F:A0:23:2F:C4:A2:57:FC:3C:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/3133322e3235352e382e302f32322d3232203d3e20323635383233.roa
Signing time:             Tue 05 Mar 2024 17:58:46 +0000
ROA not before:           Tue 05 Mar 2024 17:53:46 +0000
ROA not after:            Tue 04 Mar 2025 17:58:46 +0000
asID:                     265823
IP address blocks:        132.255.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:26:25:6f:16:76:7a:28:0b:4e:2d:ac:76:42:6e:35:f9:d8:fc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147B7D55918A2F6911996FA0232FC4A257FC3C1B
        Validity
            Not Before: Mar  5 17:53:46 2024 GMT
            Not After : Mar  4 17:58:46 2025 GMT
        Subject: CN=C2D4C9A65BFCCA1347CD5600A2106DB24D03D0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:1a:00:f7:c3:91:21:7c:e6:8f:aa:93:39:
                    dd:67:47:98:ab:19:9a:14:e7:9e:12:d3:e0:78:23:
                    42:e8:ee:7c:bb:a4:57:89:43:df:80:64:fc:03:cf:
                    14:8a:38:32:99:11:15:d4:32:04:0c:84:c4:7e:eb:
                    69:01:0a:bd:70:62:f8:cc:a2:7a:97:d3:b3:c2:4b:
                    6d:86:bd:84:4b:68:55:9f:b7:8a:05:3a:6d:83:38:
                    41:ac:b2:cc:be:fd:a7:7c:56:36:8b:83:f5:29:ea:
                    d2:f3:e9:9b:4f:f1:52:5c:60:1f:d5:8b:29:3c:50:
                    3d:92:44:88:65:3b:7a:a3:c3:0b:9f:80:aa:dd:f2:
                    2b:95:04:a6:8e:51:84:24:86:df:45:c7:c0:d5:90:
                    64:34:fb:8b:b0:c7:97:b4:5d:cb:4c:66:1c:de:28:
                    a0:f4:e0:8a:ec:95:fc:79:14:03:a1:be:52:6e:db:
                    04:54:df:e4:12:1c:0b:6c:f0:be:db:2e:bc:41:e9:
                    87:a6:67:75:98:1e:fb:c6:b4:74:54:7c:6f:99:a1:
                    50:7a:78:6f:14:3c:0d:ec:03:aa:18:d4:d4:2b:5f:
                    21:28:19:a0:b7:31:6a:e9:8a:43:26:dc:99:84:8a:
                    3f:83:dd:b9:a4:b7:f4:bb:87:e2:d8:58:7b:dc:74:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D4:C9:A6:5B:FC:CA:13:47:CD:56:00:A2:10:6D:B2:4D:03:D0:B2
            X509v3 Authority Key Identifier:
                keyid:14:7B:7D:55:91:8A:2F:69:11:99:6F:A0:23:2F:C4:A2:57:FC:3C:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147B7D55918A2F6911996FA0232FC4A257FC3C1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FC63630D0F196900A7C318E0112B8FEE334A6AB6987D9C52FFFFC1563EDF675/0/3133322e3235352e382e302f32322d3232203d3e20323635383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:cf:ad:42:af:62:7f:1f:63:a6:cd:14:bc:c2:0a:b8:2c:91:
         2b:4c:4f:c3:5c:e3:56:c9:bf:26:0c:36:41:a9:fb:57:dd:49:
         06:d1:7e:17:c8:e6:99:97:1d:0f:54:10:61:cd:9b:0c:5b:cb:
         4f:4d:fc:15:52:02:1f:46:8d:38:25:e0:0e:17:8d:fd:d7:a9:
         25:9f:e1:61:28:99:e2:a0:33:0e:fb:be:fe:d2:11:65:21:58:
         13:76:69:87:3d:a7:03:ec:1e:d0:cf:30:5b:68:59:70:c0:bd:
         12:15:40:7e:e1:60:cc:c7:8c:fa:31:67:2a:bb:26:f3:23:e8:
         cd:db:5c:dc:a9:76:04:0d:6b:8e:f4:fc:9c:37:b4:36:84:bc:
         d5:c6:a4:77:4b:d7:74:33:94:c1:69:62:ce:14:fa:16:03:d7:
         15:27:af:62:f3:1c:5c:85:9e:48:06:e3:51:a4:f3:a5:4c:6b:
         e8:27:fd:af:fd:ce:8a:1c:f0:b8:77:5e:28:56:c2:1d:35:b0:
         ea:84:48:bd:33:74:68:f4:68:e4:81:9d:91:7a:f6:e3:ce:da:
         9e:b1:09:4c:70:de:05:e6:b5:36:76:c1:8c:b2:dd:c1:51:79:
         54:3e:4f:d8:8d:32:7e:df:78:5e:bc:76:02:d3:96:18:4a:a3:
         87:8d:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org