Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36302e302f32342d3234203d3e20323632313931.roa
File:                     3139312e3130322e36302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          8uRikmwwqX9+0P6eqDdO+1Jp3LaQZhBEd0JmMWjSroI=
Subject key identifier:   3D:99:A2:62:91:C3:6D:78:BF:A0:9F:92:DB:87:C7:64:97:6F:05:96
Certificate issuer:       /CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
Certificate serial:       52B2E0684B454E5B5E508CAE174AC3238F8B3B77
Authority key identifier: D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:15:06 +0000
ROA not before:           Tue 05 Mar 2024 18:10:06 +0000
ROA not after:            Tue 04 Mar 2025 18:15:06 +0000
asID:                     262191
IP address blocks:        191.102.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b2:e0:68:4b:45:4e:5b:5e:50:8c:ae:17:4a:c3:23:8f:8b:3b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
        Validity
            Not Before: Mar  5 18:10:06 2024 GMT
            Not After : Mar  4 18:15:06 2025 GMT
        Subject: CN=3D99A26291C36D78BFA09F92DB87C764976F0596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:02:b2:16:09:5f:34:0d:74:cb:cb:9d:2a:
                    08:69:1b:a2:65:44:1b:e4:f9:3e:4d:57:17:6e:13:
                    a9:5c:90:81:5e:a5:a2:21:40:03:ee:a7:37:a7:ad:
                    ba:50:2e:bd:e0:38:b7:c7:80:f9:1d:7f:a6:fe:f8:
                    41:d2:cf:dc:e1:f6:13:7b:b2:e0:6c:48:3d:30:e0:
                    6d:a4:93:83:74:dc:23:0c:09:4b:06:f9:bc:3d:84:
                    78:d9:90:f3:83:3e:6e:35:b2:7a:9c:3b:6e:85:46:
                    2e:53:6f:f0:2b:bf:1b:6d:38:07:82:3a:69:09:2c:
                    26:42:06:bf:a4:5b:c2:13:25:fd:ed:ea:1e:b6:b5:
                    2f:fa:6f:85:53:a6:de:61:b6:18:d1:6d:16:b3:0b:
                    aa:c3:23:58:b1:48:33:f8:23:00:89:2d:e3:64:f8:
                    a6:b5:d5:ad:39:2d:3f:67:55:4d:f5:26:64:56:c3:
                    b2:d8:ee:1d:24:3c:35:a6:5a:a9:4f:80:a6:cc:fd:
                    9a:f0:2c:60:65:62:99:37:07:02:c9:7b:ed:4c:3d:
                    bc:29:6f:58:36:9b:7e:02:cb:e3:1b:3a:12:cc:39:
                    fc:e5:7a:a9:ce:a0:ba:4c:53:df:95:1c:15:3d:5c:
                    18:81:b8:83:5d:f1:8c:71:c2:cf:ae:2e:e2:d3:7b:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:99:A2:62:91:C3:6D:78:BF:A0:9F:92:DB:87:C7:64:97:6F:05:96
            X509v3 Authority Key Identifier:
                keyid:D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:bd:3e:44:fe:94:b7:6b:a1:94:71:ba:c8:b0:0d:72:80:b2:
         bd:43:c8:09:f7:c9:7f:13:ca:95:60:7d:21:72:26:1c:92:a5:
         94:02:ec:ec:e7:64:2a:a7:20:d2:f0:c1:5a:73:b5:4d:91:56:
         80:52:c1:40:e7:bd:a8:f2:1e:b9:63:b8:9d:ec:8a:7c:a0:45:
         75:39:f3:29:e8:20:45:10:62:d1:5e:58:81:71:cb:94:c8:dd:
         d6:7a:be:9a:e1:49:2f:06:21:6e:73:fb:05:fe:c4:e5:f3:1f:
         a3:78:a3:b7:53:a4:01:98:ff:08:a0:54:88:34:eb:d3:a4:23:
         75:45:a6:21:1d:43:78:ae:d4:71:a7:b3:b6:d1:7d:b6:31:22:
         10:4d:7b:28:a6:76:d1:a0:b8:6f:50:36:f3:01:f0:c0:78:49:
         3e:8e:ce:0d:0e:f3:75:8e:95:c0:ff:8d:e6:32:7e:a9:eb:86:
         5c:a4:75:2e:2f:01:4f:b6:4f:d3:2d:ef:bb:f1:f4:98:4a:14:
         a1:8b:11:25:8b:59:c5:eb:d7:7e:b4:8f:85:ee:0f:a3:52:a0:
         39:28:f6:04:65:49:4c:f5:c4:e7:28:95:f9:db:dd:e1:f0:74:
         c9:62:32:c3:51:81:73:5d:0f:db:71:33:28:7c:47:99:c3:6d:
         b8:f2:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org