Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3134332e302e37362e302f32322d3234203d3e203131303134.roa
File:                     3134332e302e37362e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          ZOL50EXf0RUElTsbpSLInH1ShcyfzIc662hxoHYRxY4=
Subject key identifier:   5B:B7:3D:12:59:A4:B3:7D:AC:F4:78:1C:20:62:8D:CC:52:54:6A:76
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       58DCD20BCE15A997E9D3D6E10A8B3AC8CE78ED4F
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3134332e302e37362e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:13 +0000
ROA not before:           Tue 05 Mar 2024 17:50:13 +0000
ROA not after:            Tue 04 Mar 2025 17:55:13 +0000
asID:                     11014
IP address blocks:        143.0.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:dc:d2:0b:ce:15:a9:97:e9:d3:d6:e1:0a:8b:3a:c8:ce:78:ed:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:13 2024 GMT
            Not After : Mar  4 17:55:13 2025 GMT
        Subject: CN=5BB73D1259A4B37DACF4781C20628DCC52546A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:ad:de:37:3f:ec:62:5c:05:85:57:58:86:
                    82:f8:80:32:0b:f3:25:36:02:0d:dd:70:87:13:d6:
                    f3:ae:cd:05:6d:9a:f8:93:dd:fb:29:c1:05:bf:09:
                    92:29:10:3b:91:6d:74:a9:82:06:3c:e5:eb:0c:5e:
                    e3:87:90:2d:4d:4f:6d:2e:05:1b:71:80:47:f7:5d:
                    1a:90:4f:f4:ad:ed:ad:1b:e4:dd:e6:3b:43:fd:0c:
                    d0:f4:ac:23:db:8a:a9:10:1f:81:77:7a:a2:19:df:
                    e5:4c:92:c3:e6:5c:e9:90:e6:80:7a:0b:00:94:f7:
                    b2:f6:be:ed:e8:bd:0a:98:33:43:82:fc:7f:91:f8:
                    d4:56:ec:8c:34:2b:26:8e:07:4f:a5:a5:4c:1d:ed:
                    a8:f5:73:86:03:3c:8c:43:af:e4:5f:f9:c4:e6:48:
                    02:df:ed:7a:a8:a2:07:d3:ec:83:f4:25:3a:c6:be:
                    4c:07:57:08:d9:76:e3:bd:84:10:8f:23:b4:4a:4d:
                    d3:6c:2b:87:95:c4:73:4d:76:55:e5:6a:51:84:54:
                    e8:19:7f:36:b7:79:a0:5d:5b:b9:08:75:38:76:01:
                    06:26:d1:bb:2b:ba:db:29:a8:a4:e9:33:d9:7f:f4:
                    ec:d2:e1:b1:85:f8:a8:82:63:e1:93:fd:64:23:64:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B7:3D:12:59:A4:B3:7D:AC:F4:78:1C:20:62:8D:CC:52:54:6A:76
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3134332e302e37362e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:43:3a:a6:a6:e1:9b:98:3f:3e:49:c3:da:77:0b:7c:2f:02:
         d0:be:f8:ad:c8:9c:c9:d5:c8:5d:64:32:b4:20:ad:36:25:bb:
         df:ac:8e:14:b6:01:8c:10:ee:2a:63:a1:95:f4:af:87:91:c9:
         3f:80:91:47:65:50:9e:ee:ac:7d:bc:64:f7:83:d4:c6:d6:c9:
         b0:34:fb:c7:08:13:e5:b3:95:3e:f4:e6:9a:25:48:4d:f0:b4:
         05:aa:03:cc:d6:3d:00:7a:22:e2:c9:f8:3a:5f:48:60:99:dc:
         5e:fa:cf:67:69:a6:2f:ca:c7:71:43:db:4a:79:41:6a:a4:b4:
         98:b8:2a:be:c1:7e:3c:70:1e:33:7f:11:f4:c0:aa:42:3f:cc:
         07:30:bc:ae:7c:9e:ee:28:da:21:5e:64:f2:ff:b7:2e:21:8f:
         45:c6:15:4a:b7:29:6a:97:bd:91:0e:f8:73:d5:f3:e2:91:40:
         4c:fc:af:19:0b:59:3d:d2:fc:39:b0:c3:5e:81:f4:ee:cf:d2:
         24:30:f7:65:c2:d2:7a:bc:3d:0d:67:53:b2:ad:cf:d3:5d:ee:
         52:2a:18:85:d5:49:87:03:29:ad:f6:de:85:58:fe:34:91:9c:
         bc:4b:60:2e:dd:bd:cb:67:7a:6e:ad:a1:b1:3a:f4:45:d4:aa:
         3e:a6:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:46 2024 by rpki-client on console-fra.rpki-client.org