Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/32342e3135322e35362e302f32342d3234203d3e20323639393931.roa
File:                     32342e3135322e35362e302f32342d3234203d3e20323639393931.roa (raw, json)
Hash identifier:          yDin9eoHuJbcbVfEjoo1pUi0r33Ay0LFdD0e/8qCUKY=
Subject key identifier:   EA:FC:25:7E:A3:F6:29:7C:B3:A0:D0:2F:02:38:8A:15:82:C5:1C:65
Certificate issuer:       /CN=9A4D80CAC0655113C518284B3D90E6899CC2F974
Certificate serial:       27BFC757AC4261F877707B06FEE6DE2103EF8526
Authority key identifier: 9A:4D:80:CA:C0:65:51:13:C5:18:28:4B:3D:90:E6:89:9C:C2:F9:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/32342e3135322e35362e302f32342d3234203d3e20323639393931.roa
Signing time:             Tue 04 Feb 2025 18:54:43 +0000
ROA not before:           Tue 04 Feb 2025 18:49:43 +0000
ROA not after:            Tue 03 Feb 2026 18:54:43 +0000
asID:                     269991
IP address blocks:        24.152.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bf:c7:57:ac:42:61:f8:77:70:7b:06:fe:e6:de:21:03:ef:85:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4D80CAC0655113C518284B3D90E6899CC2F974
        Validity
            Not Before: Feb  4 18:49:43 2025 GMT
            Not After : Feb  3 18:54:43 2026 GMT
        Subject: CN=EAFC257EA3F6297CB3A0D02F02388A1582C51C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:32:4f:be:09:45:1c:7c:a6:e7:5a:04:ae:
                    6d:ef:09:6d:5a:fd:55:73:8d:18:f1:ca:f0:53:a5:
                    86:70:23:d7:88:81:d6:34:9c:6d:c0:6e:8e:15:e5:
                    0b:fb:9e:97:ac:fe:1b:94:70:e1:90:09:a1:85:51:
                    89:a1:4b:9e:1b:15:a3:87:bc:3e:b6:ec:38:db:64:
                    56:bd:2c:73:9f:ad:16:c4:99:ba:52:52:10:0a:62:
                    45:10:29:73:17:bb:85:08:e8:6b:38:07:3b:4a:9c:
                    9f:25:3a:16:08:1b:8c:eb:4f:2e:e3:36:e4:a6:ad:
                    35:4e:ae:dc:92:08:51:48:16:40:ae:fd:91:61:42:
                    69:0f:57:e4:a7:41:7a:2f:d2:57:fd:19:ed:28:ec:
                    7d:69:c2:c8:3d:89:cf:10:38:f0:ee:24:cc:a6:ae:
                    c7:06:99:3e:15:62:8e:65:e3:2a:7e:fc:6c:32:64:
                    86:24:29:48:4d:59:3c:7a:25:84:ed:90:9e:1e:52:
                    35:10:25:9a:09:00:16:dc:e9:57:21:74:ea:7f:a4:
                    9a:fb:be:8e:2f:b0:f3:63:30:af:08:a4:7f:79:ad:
                    7a:2f:06:ed:54:9a:74:a3:94:40:15:a9:60:d7:bc:
                    10:7e:f1:b7:f0:61:61:07:8b:fa:b4:18:40:59:f4:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FC:25:7E:A3:F6:29:7C:B3:A0:D0:2F:02:38:8A:15:82:C5:1C:65
            X509v3 Authority Key Identifier:
                keyid:9A:4D:80:CA:C0:65:51:13:C5:18:28:4B:3D:90:E6:89:9C:C2:F9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/32342e3135322e35362e302f32342d3234203d3e20323639393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:e6:e0:7a:3e:83:64:31:0c:5a:69:a9:e3:55:b2:62:a1:
         5a:79:9c:ab:9f:13:52:8d:b6:ef:cf:51:98:21:0c:27:61:87:
         ad:73:00:ee:73:00:c3:65:6f:f6:92:12:20:3e:fe:46:92:ae:
         68:55:40:94:06:74:74:0c:3e:e1:6f:95:c4:ea:9e:01:99:5e:
         4d:9e:c2:65:ce:c4:74:46:e9:e9:0e:9e:9e:60:a3:5f:de:ef:
         8c:26:29:5a:6f:20:c4:19:2f:ce:f9:10:00:21:a2:cf:1d:53:
         ab:17:88:c9:3f:54:ac:4f:c3:80:92:b9:02:2a:0b:c8:a8:f0:
         5c:21:28:e3:8b:55:82:7b:87:4a:b5:aa:41:26:0f:07:5a:d9:
         dd:3e:af:82:cf:c0:2b:03:77:b0:3a:6f:9b:39:c3:88:f3:dd:
         1c:16:10:d0:25:60:77:45:e8:e8:9c:1f:71:7a:9b:49:21:db:
         25:a8:a5:00:93:9d:f3:a5:f7:b2:84:65:89:f5:65:8d:e2:3d:
         ac:44:b5:6d:3c:1c:6c:91:bf:6f:0c:ad:3e:83:f6:85:8e:8b:
         2d:78:37:67:41:cb:2d:5a:a8:76:cc:6a:b6:da:39:a6:61:4c:
         ef:51:12:45:b5:01:db:34:b0:8f:4b:ce:b7:be:a6:ee:55:23:
         ee:a6:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:47 2025 by rpki-client