Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3138392e3230312e3139322e302f32322d3234203d3e20323632393434.roa
File:                     3138392e3230312e3139322e302f32322d3234203d3e20323632393434.roa (raw, json)
Hash identifier:          1J/5fHlZxU72uN9Xf/sy5FWj76s/Pgo2vjADuDSnR8s=
Subject key identifier:   4C:15:2E:74:59:F0:4C:25:1A:0E:FE:79:B9:18:B7:67:FA:C6:E2:6E
Certificate issuer:       /CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
Certificate serial:       5FACB4A03933062C9AAF541A555DC668BC53F387
Authority key identifier: 78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3138392e3230312e3139322e302f32322d3234203d3e20323632393434.roa
Signing time:             Thu 14 Mar 2024 04:25:00 +0000
ROA not before:           Thu 14 Mar 2024 04:20:00 +0000
ROA not after:            Thu 13 Mar 2025 04:25:00 +0000
asID:                     262944
IP address blocks:        189.201.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ac:b4:a0:39:33:06:2c:9a:af:54:1a:55:5d:c6:68:bc:53:f3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
        Validity
            Not Before: Mar 14 04:20:00 2024 GMT
            Not After : Mar 13 04:25:00 2025 GMT
        Subject: CN=4C152E7459F04C251A0EFE79B918B767FAC6E26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:d6:58:e0:54:ab:ce:98:95:b8:b8:c4:a3:
                    bc:8a:75:e1:9a:e6:88:cf:80:30:e9:39:a7:2d:fc:
                    28:0c:96:32:c7:c5:9a:37:6c:8e:8f:bc:c1:f6:93:
                    95:8d:15:3b:b3:b7:0b:0b:9f:e7:5a:b4:33:3a:3c:
                    49:f9:44:e7:26:bd:3d:46:2c:d8:a7:cf:ca:50:88:
                    76:a5:4c:0b:fc:3d:6a:76:83:1d:f7:19:39:b9:0a:
                    e9:dc:4f:81:6c:a7:b5:6a:a8:9d:cf:ac:98:d4:b2:
                    85:4f:be:26:43:76:00:88:1d:89:2f:88:25:dc:e9:
                    77:49:01:ce:fd:c0:19:79:d6:1c:fd:46:69:43:4b:
                    38:0f:3b:b9:5a:fd:9e:47:66:8c:ff:5d:76:63:68:
                    87:c7:b8:8f:34:f4:8d:12:54:db:b7:35:62:35:b4:
                    c9:a5:26:c6:5d:f6:2f:e3:ca:9f:d4:45:28:fc:52:
                    1a:e0:0c:00:cb:22:cf:fe:20:46:d5:55:b9:22:e0:
                    79:6e:85:70:07:02:02:08:c4:18:4d:dc:ed:9d:8a:
                    53:d1:e1:16:23:23:5c:c1:77:68:1c:3d:02:c2:3d:
                    09:3e:a3:32:16:f5:6b:1f:6a:92:9c:de:0c:0d:29:
                    16:e5:2d:5e:e2:8f:9f:54:95:d0:36:56:5f:9e:42:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:15:2E:74:59:F0:4C:25:1A:0E:FE:79:B9:18:B7:67:FA:C6:E2:6E
            X509v3 Authority Key Identifier:
                keyid:78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3138392e3230312e3139322e302f32322d3234203d3e20323632393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:52:42:7c:48:be:b7:66:d2:38:13:5a:75:e0:0a:0e:1f:fd:
         c5:dc:9f:0f:8b:cd:1b:33:bb:4d:52:13:6c:85:10:1b:3c:9f:
         32:55:93:48:82:89:5b:d5:7d:1a:1d:60:7e:38:d2:e0:ea:18:
         4d:ec:d8:9f:3f:10:51:96:ce:ac:45:1f:a2:10:6e:1a:e3:a5:
         4c:56:83:10:32:c1:e4:7a:5b:f4:7c:32:1c:37:94:43:04:3e:
         a9:ed:f8:2c:1f:1a:73:14:88:0d:3f:46:49:ea:be:30:2c:04:
         12:f1:f9:be:87:2d:8f:a2:25:c0:d6:57:2a:8d:a5:3f:87:a2:
         58:42:e9:2d:f4:ce:f9:fd:b0:95:ea:57:2e:d8:6f:35:ca:3e:
         0c:9a:e6:21:2e:87:5c:40:0c:15:34:d0:14:2b:20:d8:c7:28:
         ec:f7:75:af:db:bd:3f:b7:f1:6e:e9:1c:3c:38:58:74:cd:58:
         23:0e:f7:8c:d5:f9:3c:2f:e2:4c:3c:8c:1e:eb:80:5e:8c:85:
         dc:f9:e7:78:09:b7:1b:68:d6:8a:7c:d2:53:4f:2b:c8:39:c8:
         91:83:0e:f1:42:4b:e1:f6:aa:b5:53:7d:03:ac:76:9d:57:f7:
         6e:48:e1:61:2c:c5:fa:c0:8b:d2:76:ea:09:31:bd:ae:21:e1:
         e2:32:ee:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org