Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/32342e3135322e35362e302f32342d3234203d3e20323639393931.roa
File:                     32342e3135322e35362e302f32342d3234203d3e20323639393931.roa (raw, json)
Hash identifier:          /srRR0uec7wobgaTFYeWoD7/qHd9Otz0DEPfKx+eruk=
Subject key identifier:   11:8D:ED:42:63:B3:3B:76:DC:1E:9E:BB:FA:90:E8:DB:57:06:54:AE
Certificate issuer:       /CN=9A4D80CAC0655113C518284B3D90E6899CC2F974
Certificate serial:       445AFBF80BA2925C38C953466A1C4563C059037E
Authority key identifier: 9A:4D:80:CA:C0:65:51:13:C5:18:28:4B:3D:90:E6:89:9C:C2:F9:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/32342e3135322e35362e302f32342d3234203d3e20323639393931.roa
Signing time:             Tue 05 Mar 2024 17:47:49 +0000
ROA not before:           Tue 05 Mar 2024 17:42:49 +0000
ROA not after:            Tue 04 Mar 2025 17:47:49 +0000
asID:                     269991
IP address blocks:        24.152.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 16:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5a:fb:f8:0b:a2:92:5c:38:c9:53:46:6a:1c:45:63:c0:59:03:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4D80CAC0655113C518284B3D90E6899CC2F974
        Validity
            Not Before: Mar  5 17:42:49 2024 GMT
            Not After : Mar  4 17:47:49 2025 GMT
        Subject: CN=118DED4263B33B76DC1E9EBBFA90E8DB570654AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:8c:68:3e:47:55:fa:71:20:1a:4e:99:a7:
                    eb:e8:69:a3:51:ff:ba:a7:62:0d:dc:65:8c:a9:06:
                    fd:8d:64:7d:fd:ce:ef:5a:b4:d2:c8:a5:b9:0e:4b:
                    6c:fc:36:06:94:41:40:69:c6:91:db:6a:9f:cf:88:
                    7b:bc:77:51:33:f8:a8:dc:6d:8d:0e:f2:e2:f8:23:
                    fe:91:4a:7e:b4:52:85:da:9e:57:4e:b4:54:b3:c8:
                    b2:ad:7f:39:31:15:23:cd:16:60:86:b0:72:45:f0:
                    29:38:4a:19:90:2b:a6:78:ca:2a:4f:53:de:bb:6c:
                    d1:b8:52:a7:27:8f:a5:34:f1:e0:08:3a:da:9e:cf:
                    0f:a1:8e:ab:9d:65:95:23:43:b0:89:ed:de:e2:a8:
                    14:b7:50:84:95:65:5c:ea:f9:ea:e0:a1:b9:34:7c:
                    94:b8:0b:36:56:a0:5b:d3:47:47:25:3f:65:13:5f:
                    cc:3b:c7:bd:f0:dd:ed:2b:bb:2c:9e:55:14:c3:ad:
                    7e:10:49:f7:a4:5d:43:5f:aa:a5:64:5d:23:c7:69:
                    52:94:84:7a:73:a9:91:dd:0c:a7:e4:4b:e1:27:f7:
                    d0:39:26:f4:a5:38:cd:5c:b3:f8:54:2a:15:5b:8e:
                    9a:fe:94:e3:ea:bf:57:a5:99:5d:3f:89:e5:14:5d:
                    87:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8D:ED:42:63:B3:3B:76:DC:1E:9E:BB:FA:90:E8:DB:57:06:54:AE
            X509v3 Authority Key Identifier:
                keyid:9A:4D:80:CA:C0:65:51:13:C5:18:28:4B:3D:90:E6:89:9C:C2:F9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/32342e3135322e35362e302f32342d3234203d3e20323639393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:10:c7:45:f5:b3:ba:15:6a:62:f2:f4:77:e5:05:48:83:80:
         50:f4:0b:d7:02:2b:e6:d7:b1:cd:b8:39:a8:e2:66:73:4b:db:
         7a:73:17:95:02:5b:ef:c2:77:20:38:9b:31:2e:1f:a0:f1:33:
         1c:10:a9:21:16:41:17:a3:3d:9a:64:c5:c8:1c:c3:eb:33:6f:
         af:0d:d3:a1:b3:08:ab:b9:e3:95:b2:71:c2:4d:9d:ad:53:92:
         bb:6c:6f:fe:97:3b:72:df:e8:52:08:90:70:a2:57:68:2c:ca:
         da:12:11:0d:0c:ce:15:7d:19:60:68:a2:0e:cc:5f:ac:64:f6:
         ea:25:92:b4:f4:36:88:18:52:a7:b7:fc:09:a3:96:82:0e:f2:
         0a:77:ca:51:9b:ab:55:a3:db:1d:e9:e7:7f:68:11:63:77:ed:
         b9:65:63:16:81:4c:d5:46:11:c4:ae:fd:13:67:7d:bd:71:54:
         6e:0a:70:9f:4c:e5:65:77:5f:45:ad:2b:47:3d:55:7b:f4:7e:
         e3:b3:57:50:93:53:2d:8a:96:24:cb:4c:7b:d1:81:8c:24:6a:
         04:ed:21:35:06:09:d1:2d:a2:1a:06:1b:48:a1:50:d3:1c:41:
         f2:32:20:27:82:96:0e:e2:2a:b2:f2:09:07:25:8c:35:ba:7e:
         77:e8:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:28:25 2024 by rpki-client on console-fra.rpki-client.org