Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34362e302f32332d3234203d3e203238303735.roa
File:                     3139382e31322e34362e302f32332d3234203d3e203238303735.roa (raw, json)
Hash identifier:          sh1a65WDqtfgTTAwzMPsEjUXqYF4yLDn1ZFOo5Jc1NE=
Subject key identifier:   F9:05:74:50:6D:74:BF:F5:23:98:C3:4D:45:6E:05:7D:97:9F:CB:DA
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       22ABF932D11A2F6AEC02CFA0F05EFCEF50D87EA8
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34362e302f32332d3234203d3e203238303735.roa
Signing time:             Tue 05 Mar 2024 18:11:47 +0000
ROA not before:           Tue 05 Mar 2024 18:06:47 +0000
ROA not after:            Tue 04 Mar 2025 18:11:47 +0000
asID:                     28075
IP address blocks:        198.12.46.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ab:f9:32:d1:1a:2f:6a:ec:02:cf:a0:f0:5e:fc:ef:50:d8:7e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar  5 18:06:47 2024 GMT
            Not After : Mar  4 18:11:47 2025 GMT
        Subject: CN=F90574506D74BFF52398C34D456E057D979FCBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:da:b5:f2:07:98:2f:cc:fe:63:15:fb:57:
                    f7:25:7f:53:83:33:46:f4:a9:88:47:3a:54:05:70:
                    12:05:7e:05:9f:97:7b:32:aa:c5:b9:0f:4d:3c:2c:
                    c5:62:04:5a:7d:08:68:4d:94:fe:17:10:83:55:87:
                    f7:26:85:16:1c:ee:57:3e:66:35:99:d3:d7:3e:8b:
                    43:17:61:46:44:5d:68:b1:d2:a9:be:1a:73:01:ee:
                    6a:01:7f:59:ba:ae:99:5d:9b:81:35:16:eb:c0:04:
                    43:7a:f3:2c:50:a0:bb:c2:52:59:14:27:da:25:c2:
                    a7:1e:d7:08:24:b4:ee:ab:3e:18:b1:e7:df:58:13:
                    72:95:9c:e9:73:a7:81:fc:b0:a8:ea:e3:cc:af:8a:
                    25:c1:ba:95:86:3e:d3:39:e3:18:e4:59:eb:59:b6:
                    b5:b9:e4:88:e0:e5:46:37:e1:6e:9f:47:7c:8b:3d:
                    d3:10:51:de:40:6d:fa:69:e6:fb:f6:73:36:29:f1:
                    e2:9b:9d:96:b1:63:45:24:68:75:a5:96:f3:69:b7:
                    36:3d:4f:02:e3:ba:2f:68:8b:2b:15:c1:16:84:11:
                    a8:e0:81:08:c1:72:6d:51:bd:a7:c9:df:66:15:51:
                    89:e2:7a:fa:a3:c6:ed:35:cc:8b:0d:0e:0d:ab:02:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:05:74:50:6D:74:BF:F5:23:98:C3:4D:45:6E:05:7D:97:9F:CB:DA
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34362e302f32332d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:b3:25:b8:26:72:88:5c:29:60:40:dd:1b:68:7e:72:56:c3:
         36:91:01:0a:c4:02:df:f0:b7:cd:77:8a:8a:ab:10:56:9d:5e:
         7e:c5:71:03:fe:37:cc:98:c0:4d:86:71:a0:00:48:94:02:9c:
         84:d8:09:52:7b:64:61:2e:7f:b4:d6:37:e8:dd:b5:de:0b:91:
         0a:4c:ff:7f:36:d7:6b:dc:9b:f4:b7:10:9b:4e:8f:6f:ff:11:
         7a:d4:48:1a:a3:32:ac:c1:c2:40:65:c7:09:aa:56:a9:e2:38:
         94:c9:9e:dc:ad:26:86:2e:14:9b:a2:73:45:0e:7a:70:28:0e:
         80:d9:0f:10:02:14:e5:c1:da:3b:3a:ec:af:e4:82:03:a1:5b:
         ce:38:88:fa:5d:d7:6d:00:1b:c0:5e:9f:4c:e2:5b:19:45:28:
         5b:76:19:08:87:42:e6:f0:f4:2d:52:7d:fd:0a:4a:2d:3f:2a:
         6d:45:3d:4b:ad:8b:a5:e1:9a:90:bc:5e:bb:d0:1d:54:94:14:
         ac:d4:de:13:1c:ae:f8:ed:92:f3:57:4f:b2:07:4d:2f:de:6e:
         08:72:2d:9d:7e:76:f2:cb:f9:8f:c0:1c:ce:54:7b:9c:62:a9:
         b5:eb:53:04:10:d6:01:3c:a6:36:cb:11:56:f3:a9:6d:f1:87:
         1a:de:fa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org