Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BB774FC552C42CFFBA7339EDD3795A273FFB97284C001EAF179C327B8BC8BCF/0/3134332e3235352e3137362e302f32322d3234203d3e20323634363431.roa
File:                     3134332e3235352e3137362e302f32322d3234203d3e20323634363431.roa (raw, json)
Hash identifier:          OfqPmhJgITOtd1PYkJDRhBf+t6KN9e1oiiBxIMnLMI4=
Subject key identifier:   69:9E:CE:DA:DC:D4:35:EA:14:3A:CA:BF:C3:7E:8B:91:BD:68:1E:5F
Certificate issuer:       /CN=1ACD2B0DB6359786E9820022CE67CB84DE8FFF08
Certificate serial:       7659C8574F67F10348C482F9C25B3C21F13822B1
Authority key identifier: 1A:CD:2B:0D:B6:35:97:86:E9:82:00:22:CE:67:CB:84:DE:8F:FF:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ACD2B0DB6359786E9820022CE67CB84DE8FFF08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BB774FC552C42CFFBA7339EDD3795A273FFB97284C001EAF179C327B8BC8BCF/0/3134332e3235352e3137362e302f32322d3234203d3e20323634363431.roa
Signing time:             Tue 05 Mar 2024 17:59:59 +0000
ROA not before:           Tue 05 Mar 2024 17:54:59 +0000
ROA not after:            Tue 04 Mar 2025 17:59:59 +0000
asID:                     264641
IP address blocks:        143.255.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BB774FC552C42CFFBA7339EDD3795A273FFB97284C001EAF179C327B8BC8BCF/0/1ACD2B0DB6359786E9820022CE67CB84DE8FFF08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BB774FC552C42CFFBA7339EDD3795A273FFB97284C001EAF179C327B8BC8BCF/0/1ACD2B0DB6359786E9820022CE67CB84DE8FFF08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ACD2B0DB6359786E9820022CE67CB84DE8FFF08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:59:c8:57:4f:67:f1:03:48:c4:82:f9:c2:5b:3c:21:f1:38:22:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ACD2B0DB6359786E9820022CE67CB84DE8FFF08
        Validity
            Not Before: Mar  5 17:54:59 2024 GMT
            Not After : Mar  4 17:59:59 2025 GMT
        Subject: CN=699ECEDADCD435EA143ACABFC37E8B91BD681E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:a2:d1:b1:c0:d9:4b:9e:f8:42:f0:6d:84:
                    e1:f8:da:3c:09:91:cf:88:83:89:cc:c3:e0:77:af:
                    dd:c0:1d:a3:1e:db:43:eb:02:ec:b4:7c:bf:4d:0e:
                    7a:72:87:ae:7c:ea:22:05:bb:de:8d:e3:43:3e:2a:
                    32:a3:87:87:8f:ed:ed:f9:45:a7:b1:d6:09:3f:e5:
                    61:7f:9a:ce:42:c0:c3:63:98:96:28:7b:32:95:79:
                    1d:84:06:f2:9b:59:eb:a2:61:c4:ca:12:ac:1c:ad:
                    ac:59:96:1f:01:9f:99:c5:39:66:cf:56:bb:ba:73:
                    99:87:bb:e9:7c:63:d9:89:5e:19:25:bd:92:be:f6:
                    43:24:43:2d:8f:d5:8a:7d:8f:78:50:b8:f7:c4:d5:
                    dc:72:af:76:f1:56:89:53:76:94:e4:55:b5:88:36:
                    91:22:af:48:58:5f:3c:0b:82:fc:fd:1a:5f:2f:fc:
                    97:5e:83:b6:d8:c7:d3:de:2f:03:07:72:18:cc:0a:
                    29:0a:3a:ed:4a:c1:3d:f8:f4:0d:46:50:0c:00:13:
                    59:f1:83:e7:91:bf:ae:52:17:af:82:2c:32:0d:bc:
                    91:84:f2:16:6d:2a:ba:03:67:f8:e1:20:23:c7:1e:
                    0a:c4:42:9d:37:45:ca:ab:c0:2c:6d:26:3b:6e:70:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9E:CE:DA:DC:D4:35:EA:14:3A:CA:BF:C3:7E:8B:91:BD:68:1E:5F
            X509v3 Authority Key Identifier:
                keyid:1A:CD:2B:0D:B6:35:97:86:E9:82:00:22:CE:67:CB:84:DE:8F:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BB774FC552C42CFFBA7339EDD3795A273FFB97284C001EAF179C327B8BC8BCF/0/1ACD2B0DB6359786E9820022CE67CB84DE8FFF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ACD2B0DB6359786E9820022CE67CB84DE8FFF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BB774FC552C42CFFBA7339EDD3795A273FFB97284C001EAF179C327B8BC8BCF/0/3134332e3235352e3137362e302f32322d3234203d3e20323634363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:b7:37:2f:45:ad:8e:6b:1a:87:93:e4:8e:bc:fb:b5:7c:6a:
         6b:8e:5d:49:c0:72:47:fc:f8:3a:1a:75:9f:a0:95:a9:87:98:
         9e:a4:38:26:9c:2b:f6:1b:18:d4:90:49:f9:bf:c1:33:37:72:
         31:6b:fe:6e:b5:f6:2e:56:dc:21:a4:e8:e1:ae:e8:57:63:fd:
         93:10:07:83:ca:fc:3d:6d:59:32:51:a4:1c:25:bb:9c:3f:5b:
         d9:19:37:eb:77:97:1a:4e:d5:49:04:85:d9:0b:60:37:97:d4:
         66:6c:ca:ae:2d:da:bb:11:55:78:9c:f8:16:f7:5b:6a:da:5a:
         41:9c:d7:45:e9:c8:7e:75:13:0b:1a:33:1e:34:cc:9f:a9:89:
         f4:ed:3f:11:75:d2:b3:f1:82:4c:4a:97:78:91:63:86:b2:74:
         ab:82:47:1f:89:97:4c:db:e6:f9:a0:0b:27:62:f6:0c:0e:b2:
         45:a8:d4:d3:0c:16:f2:db:52:85:87:df:2f:2c:28:1e:0c:3f:
         e5:13:b7:49:b7:d5:57:93:89:f3:17:e6:f1:38:f9:bf:6d:ee:
         fc:c4:a3:36:4c:b8:27:70:e9:74:52:c5:77:ef:65:01:d9:32:
         97:69:02:65:cd:86:59:84:00:14:d3:85:a4:60:50:ec:79:a2:
         db:0f:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org