Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34302e302f32322d3234203d3e203238303735.roa
File:                     3139382e31322e34302e302f32322d3234203d3e203238303735.roa (raw, json)
Hash identifier:          U4XJRvzvuvLEjf2tfIbd02jNxz00VQWqcNZM8Dq4Dp0=
Subject key identifier:   18:7B:3B:09:8E:F0:24:67:78:E8:44:D0:B3:BE:9D:33:07:AC:25:0C
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       27BF17404FF8E9FF939DD2EBD79A25A56CCA2D83
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34302e302f32322d3234203d3e203238303735.roa
Signing time:             Tue 05 Mar 2024 18:11:46 +0000
ROA not before:           Tue 05 Mar 2024 18:06:46 +0000
ROA not after:            Tue 04 Mar 2025 18:11:46 +0000
asID:                     28075
IP address blocks:        198.12.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bf:17:40:4f:f8:e9:ff:93:9d:d2:eb:d7:9a:25:a5:6c:ca:2d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar  5 18:06:46 2024 GMT
            Not After : Mar  4 18:11:46 2025 GMT
        Subject: CN=187B3B098EF0246778E844D0B3BE9D3307AC250C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:ba:61:f1:83:a6:63:d2:dc:3e:97:6c:60:
                    30:65:1f:ac:4b:3a:51:70:b5:5b:0c:82:9e:af:6a:
                    b8:31:e6:ea:d7:99:df:89:f5:83:a2:29:e9:84:d3:
                    d6:86:df:6e:62:3b:43:8b:1a:b8:13:09:d1:d5:ee:
                    f0:56:8d:d0:d2:64:1e:66:22:0f:7b:be:2f:e5:44:
                    aa:15:48:ff:8e:99:30:9f:5e:a9:22:71:ff:b3:f5:
                    00:a9:2b:cd:66:8f:55:8b:08:e9:ed:3e:98:cf:f7:
                    12:f9:60:99:ff:08:9c:99:4d:33:ad:a6:6e:fb:fb:
                    d2:e0:e1:eb:13:2d:cd:b2:44:ac:45:ba:05:cf:67:
                    6d:b8:1a:7c:35:fe:26:1c:fb:3f:8f:68:9b:b8:03:
                    df:6e:ea:27:04:47:85:07:81:05:43:ac:c3:7c:01:
                    f2:6a:50:ed:da:a0:36:43:e8:11:f5:e3:a5:fd:aa:
                    26:5e:f7:51:ab:a0:a5:c7:44:e0:09:5f:ea:63:25:
                    7a:07:ca:e2:dd:27:11:50:fe:d9:ec:46:8b:d1:3c:
                    f8:d8:0d:6a:1c:35:d9:8c:1d:89:5b:5a:fd:ff:28:
                    59:df:6e:af:c6:93:e9:54:a2:86:9a:94:ee:07:51:
                    aa:aa:77:0d:c5:b5:2e:a8:42:c4:88:d5:73:23:43:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7B:3B:09:8E:F0:24:67:78:E8:44:D0:B3:BE:9D:33:07:AC:25:0C
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34302e302f32322d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:44:8b:bd:50:75:34:f4:33:1d:60:49:76:72:35:c1:28:
         31:9a:a9:04:04:93:de:2a:41:20:c5:53:40:f2:1e:9a:3e:6e:
         b6:44:7a:49:de:bf:ef:be:99:2b:14:67:31:40:cc:e3:d6:2d:
         16:6c:3d:37:9a:50:ba:b8:43:aa:a9:0f:18:cd:20:e8:98:71:
         1f:42:d7:52:9b:23:c1:80:83:60:b6:7e:61:56:0f:5e:40:5c:
         eb:99:df:a6:2a:a0:67:bd:b4:81:5d:e3:49:30:a9:1c:78:39:
         56:d9:fd:b5:01:2e:93:45:85:b8:f7:1b:bb:40:bf:27:df:4d:
         1e:c7:3f:b0:27:d8:f5:3e:e3:b4:56:5f:e7:67:13:3f:8b:b7:
         b1:42:a5:52:8a:dc:f8:4a:14:04:27:f4:3f:ee:42:98:43:68:
         9b:68:00:15:f2:45:79:25:d9:5f:dd:62:ac:ad:b6:88:97:e8:
         b8:53:7c:33:0c:51:44:7f:92:40:1b:6b:65:ad:db:0f:d8:d7:
         60:bf:21:22:36:19:9c:58:e1:c8:de:cb:74:7d:ce:f6:66:66:
         b2:0d:d4:32:da:55:f4:f9:29:e8:77:69:4d:73:8f:f7:7d:ad:
         cd:22:2e:cb:c6:27:5f:42:23:53:ee:04:47:bf:2d:33:b6:1c:
         13:eb:56:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org