Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35322e302f32342d3234203d3e203238303735.roa
File:                     3139382e31322e35322e302f32342d3234203d3e203238303735.roa (raw, json)
Hash identifier:          k2EpZ2CkS2SnrE13D39KI+54Ezp22tMO4QGir9Kkx68=
Subject key identifier:   D3:15:DD:99:2A:19:3D:5E:7E:CA:0C:10:58:2C:BD:3D:11:0A:B1:C9
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       7909B8F3D9146C272E35E7EE364ADBFE150388AF
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35322e302f32342d3234203d3e203238303735.roa
Signing time:             Tue 05 Mar 2024 18:11:49 +0000
ROA not before:           Tue 05 Mar 2024 18:06:49 +0000
ROA not after:            Tue 04 Mar 2025 18:11:49 +0000
asID:                     28075
IP address blocks:        198.12.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:09:b8:f3:d9:14:6c:27:2e:35:e7:ee:36:4a:db:fe:15:03:88:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar  5 18:06:49 2024 GMT
            Not After : Mar  4 18:11:49 2025 GMT
        Subject: CN=D315DD992A193D5E7ECA0C10582CBD3D110AB1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:f9:58:60:39:e3:97:4f:ad:16:66:a0:a6:
                    73:b3:d5:c8:63:e1:23:85:9f:8d:be:1a:6f:37:06:
                    8f:60:a8:58:8e:78:16:59:41:d4:a7:df:eb:f5:6a:
                    f5:f0:e6:f7:07:9a:00:11:37:ad:d1:77:9f:99:ef:
                    01:d1:b5:c1:d8:f1:b4:e3:eb:a5:ca:ce:9a:58:6c:
                    3e:24:ff:6d:0f:03:cc:99:8e:64:94:48:ac:d2:ba:
                    cd:d3:66:97:fa:73:74:78:69:f1:85:0f:ec:7f:39:
                    c9:56:92:9a:9d:43:da:69:e3:e7:e3:09:d1:6c:0e:
                    3e:c5:fa:f6:fb:fe:5f:0d:6b:82:20:73:e2:c8:b0:
                    94:2e:59:75:a5:6a:90:75:c6:d7:e6:8e:5e:03:19:
                    dd:89:e1:8d:63:c8:a0:6e:87:d2:76:f8:ba:54:fd:
                    95:fb:87:28:07:a4:6a:95:fc:e0:5e:96:29:84:ad:
                    2e:e8:41:b3:bc:d6:56:cb:bb:9e:ae:f4:9b:5d:d5:
                    ee:05:f3:0d:33:cf:f5:3e:ec:2e:8a:fc:47:da:36:
                    41:a4:b4:4e:8b:ce:b1:15:7e:e9:f9:fc:de:04:d5:
                    33:b5:45:5f:9d:8d:7d:4b:23:72:56:cf:da:be:e5:
                    13:5a:b3:cb:30:f3:dc:17:54:7c:4c:2e:45:b0:3a:
                    8b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:15:DD:99:2A:19:3D:5E:7E:CA:0C:10:58:2C:BD:3D:11:0A:B1:C9
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35322e302f32342d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:b0:42:2c:a1:be:43:3c:56:ad:12:42:95:3e:dc:f8:42:
         b4:2a:b8:4b:26:b6:d9:f4:97:1c:51:4d:d1:37:4c:27:e0:1d:
         53:12:a5:86:13:b7:1a:63:17:4b:55:0b:2a:1f:f1:4e:e8:ac:
         e7:9c:78:1a:52:28:df:06:06:7c:2d:80:57:61:39:4e:fa:66:
         ae:5f:cc:07:11:94:7f:b0:8e:3c:5d:c2:a5:96:7c:76:5d:cf:
         3c:d4:3a:60:b8:f3:b5:09:2d:9b:4e:e0:1b:95:46:78:20:ef:
         2b:02:00:f5:0e:69:3a:6f:9f:73:55:2f:42:44:50:fb:61:3f:
         95:a7:b9:8b:75:48:55:11:eb:8c:24:51:3a:89:2e:32:de:c1:
         54:8d:6f:71:de:e3:80:8e:11:1c:62:a1:f7:28:2f:fe:75:b9:
         65:ec:3f:d0:fb:ec:48:8a:82:80:86:17:80:26:4f:fd:7f:2d:
         47:66:03:47:78:41:83:3b:70:d0:62:c9:09:68:ed:9f:0f:0f:
         40:e7:c8:77:4f:7d:d9:95:84:ff:dd:b1:7e:43:38:04:93:7b:
         7c:cc:ba:d5:c4:d5:39:4b:31:a6:dc:01:ce:32:56:f0:1d:d3:
         89:ca:70:07:d3:45:26:57:b5:a8:3b:21:c2:87:04:5b:ed:5e:
         0e:c8:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org