Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35342e302f32332d3234203d3e203238303735.roa
File:                     3139382e31322e35342e302f32332d3234203d3e203238303735.roa (raw, json)
Hash identifier:          u3QQ+ZsOMeh4Nf5yCfGB1wHnzeYR8AdWYFNpgxvULTw=
Subject key identifier:   96:D5:D3:15:89:1E:41:54:06:5F:14:68:7D:5D:04:40:09:BB:C7:F3
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       05556C0E2239D3FFA9C7D8EBBCA032C17F356A35
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35342e302f32332d3234203d3e203238303735.roa
Signing time:             Tue 05 Mar 2024 18:11:46 +0000
ROA not before:           Tue 05 Mar 2024 18:06:46 +0000
ROA not after:            Tue 04 Mar 2025 18:11:46 +0000
asID:                     28075
IP address blocks:        198.12.54.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:55:6c:0e:22:39:d3:ff:a9:c7:d8:eb:bc:a0:32:c1:7f:35:6a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar  5 18:06:46 2024 GMT
            Not After : Mar  4 18:11:46 2025 GMT
        Subject: CN=96D5D315891E4154065F14687D5D044009BBC7F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a6:53:21:65:41:f1:80:c6:55:6b:16:35:0e:
                    44:91:9b:35:c0:f2:c1:b0:77:56:5c:dd:41:ec:d4:
                    b0:b4:6c:8d:7c:28:39:87:41:d2:e1:f0:7e:1a:3d:
                    70:cb:5c:a8:0a:a3:1d:fe:d8:2f:02:df:c2:da:c9:
                    4d:d2:c2:dd:d8:75:b1:dc:70:db:f5:74:b8:fb:61:
                    b1:fd:a3:d9:8a:c6:2d:08:3c:e6:48:6d:f4:01:5a:
                    68:10:c7:ca:86:00:e0:4d:fe:37:3a:38:9c:75:d8:
                    67:35:c8:6d:c3:fa:6c:30:1e:0d:75:3d:30:ec:f8:
                    47:8f:a0:52:1e:40:93:9e:4e:e6:d0:77:bd:e8:95:
                    50:92:e7:4a:f9:05:b9:9c:61:73:dc:43:a2:c5:75:
                    0e:f5:92:48:a0:68:6d:83:06:14:a9:d3:fa:1d:04:
                    db:b5:a0:f3:30:2d:4e:69:12:4d:5a:d1:b0:c3:51:
                    ab:82:4e:fe:7c:8d:76:17:7a:af:e0:32:1e:a5:8a:
                    48:2a:91:2f:7e:65:4c:f2:01:ff:ad:48:5d:85:cf:
                    a9:06:26:5b:5e:a5:29:f7:e4:ee:38:da:a5:16:85:
                    8f:bd:91:93:9f:a5:33:a0:d0:bc:46:9a:03:c2:d4:
                    f5:03:e9:82:1b:7d:bf:39:a5:a9:dd:69:83:e9:2b:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D5:D3:15:89:1E:41:54:06:5F:14:68:7D:5D:04:40:09:BB:C7:F3
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35342e302f32332d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:2d:b7:a8:70:28:a8:03:cb:a5:42:93:40:52:2e:15:dc:2b:
         10:ad:2a:f7:b6:28:65:bd:da:f4:ef:5b:65:0d:9d:a3:e6:8d:
         58:b0:2d:3a:68:70:df:6c:29:71:e7:f0:e7:77:a2:99:61:2a:
         8a:88:19:1f:74:02:c3:43:b3:80:56:ac:51:f6:54:56:93:01:
         86:ac:45:7e:d0:0c:c2:1c:a2:be:bd:a3:b8:13:59:97:4a:b1:
         53:09:1b:af:87:4c:e2:43:39:6b:4a:df:32:86:f2:4a:a0:c9:
         ea:49:04:c3:76:8e:69:c2:b9:17:7c:ac:30:f2:aa:af:3f:3e:
         32:88:90:96:80:47:69:f6:e7:9c:37:9e:c2:0c:bd:a6:1e:c0:
         1c:df:2f:d4:b4:ed:18:24:c0:67:c3:aa:41:dd:c4:d1:06:f6:
         ae:0f:c4:aa:84:9f:77:7c:31:d7:fe:b7:7e:50:73:10:e4:ae:
         98:52:f9:33:53:d9:9d:18:64:15:11:f9:33:a5:b0:13:25:2c:
         ca:31:0d:ba:45:3c:d2:67:35:12:03:b6:7d:bf:c9:27:ea:26:
         6a:d5:cf:68:32:93:09:d5:13:5c:c0:7d:68:1d:11:fe:e0:8c:
         5e:14:cd:d8:c4:1c:f1:ea:cc:d3:91:69:e7:a0:3b:bd:3a:18:
         de:ea:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org