Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3130332e382e39322e302f32322d3234203d3e203532343731.roa
File:                     3130332e382e39322e302f32322d3234203d3e203532343731.roa (raw, json)
Hash identifier:          SGgczsgt7b9Fb511wpVQexhzVaAtWN/o7fBmxUpZAr8=
Subject key identifier:   3F:4F:A4:1E:AF:E9:11:4F:F2:29:AB:AA:F9:CC:A4:4A:04:E6:01:5C
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       304832755D37B889001ACFA8342875BC7BAA2169
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3130332e382e39322e302f32322d3234203d3e203532343731.roa
Signing time:             Tue 05 Mar 2024 17:44:43 +0000
ROA not before:           Tue 05 Mar 2024 17:39:43 +0000
ROA not after:            Tue 04 Mar 2025 17:44:43 +0000
asID:                     52471
IP address blocks:        103.8.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:48:32:75:5d:37:b8:89:00:1a:cf:a8:34:28:75:bc:7b:aa:21:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Mar  5 17:39:43 2024 GMT
            Not After : Mar  4 17:44:43 2025 GMT
        Subject: CN=3F4FA41EAFE9114FF229ABAAF9CCA44A04E6015C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3a:5b:0a:b1:f7:78:62:1c:79:bc:be:dd:e0:
                    28:9d:42:fc:e1:73:e4:e4:2c:18:2f:a4:af:54:dd:
                    54:04:96:89:5c:53:d2:98:60:f9:0e:5d:f1:4d:38:
                    f7:73:56:8c:43:61:ec:b4:d6:d2:a0:c5:e0:55:cf:
                    b2:24:11:7e:5e:a7:1d:41:8c:d0:8e:44:4a:80:8d:
                    bd:74:11:65:21:f4:48:13:26:0a:7b:dc:b8:8f:9f:
                    a1:70:30:d9:5e:04:3c:bd:d6:a4:00:5e:a2:36:9a:
                    bd:cd:4f:aa:9c:2f:8c:61:6e:4e:65:ba:31:61:b8:
                    f4:77:ab:70:29:be:65:49:ec:fd:26:99:69:f3:48:
                    6e:26:c9:2e:f8:80:91:d5:1d:a7:27:fe:a1:38:a1:
                    cb:8a:56:3a:51:ac:dd:69:29:c2:bb:c9:a5:29:ad:
                    57:83:36:99:ce:c5:86:5d:bb:4f:dc:28:04:e5:2f:
                    8b:3f:f5:b4:1a:df:7d:56:84:71:f7:32:46:a4:e5:
                    c1:c4:8a:c5:81:65:5f:5d:50:a3:8d:72:da:5d:4c:
                    2d:e0:81:b4:d9:76:25:4b:91:28:01:52:64:85:b5:
                    d3:60:e2:89:a4:a0:f1:7f:44:dc:33:f0:d2:a1:98:
                    5c:94:2a:e0:5e:81:80:8f:f3:74:7d:4b:97:b9:7d:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4F:A4:1E:AF:E9:11:4F:F2:29:AB:AA:F9:CC:A4:4A:04:E6:01:5C
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3130332e382e39322e302f32322d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:36:23:2c:6b:74:81:16:64:0d:32:52:b9:eb:29:d4:55:82:
         18:f2:e9:be:a6:0b:66:19:ae:46:7a:9f:7c:23:9f:af:9f:6f:
         d8:4c:d1:8b:f2:6e:20:84:0c:24:24:30:bc:62:6f:f6:06:ca:
         22:3e:fe:55:fb:0b:00:3d:d7:d7:e1:73:cb:e7:6f:77:bc:86:
         e6:c7:e6:c0:a9:1f:f4:9e:2b:b3:b3:85:e4:70:f1:55:11:b9:
         06:f8:f2:82:5f:37:f0:49:07:78:8b:1f:f5:39:2b:71:89:c6:
         4e:ec:c4:a6:3f:f5:b4:39:b0:63:75:0b:ca:a9:cd:04:44:5d:
         83:b6:f9:ed:23:47:ca:a3:16:58:ec:e5:70:80:e6:f8:d0:d8:
         7c:ad:c0:41:e1:34:e5:e2:ea:f8:48:9a:1e:a4:de:84:c6:da:
         8b:fa:55:fb:a2:68:86:04:7d:39:a2:44:d9:6e:01:4c:71:ef:
         0f:60:71:93:c7:d1:53:de:37:43:7c:a9:1f:0b:38:7a:bc:ec:
         ea:55:31:9c:70:d5:c0:5b:91:6b:59:55:96:2f:3c:ca:18:ed:
         61:83:a7:36:3f:09:e6:1e:40:a0:28:fe:bb:5a:12:25:31:41:
         dc:43:eb:31:2d:2c:3d:47:79:0b:5a:b4:e7:55:32:95:ed:ff:
         2a:09:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:52:34 2024 by rpki-client on console-fra.rpki-client.org