Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3134332e3230382e3136392e302f32342d3234203d3e20323632313435.roa
File:                     3134332e3230382e3136392e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          2PebJZixx6sZ9NRQf8GGtivEfVF4nj18L4mP+fmBizg=
Subject key identifier:   02:77:92:9B:B9:08:6C:A4:90:52:6D:5E:19:30:42:49:88:5C:9E:61
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       30E924CBAAE26A40FB0799C8016DF667A742886F
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3134332e3230382e3136392e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:10 +0000
ROA not before:           Tue 05 Mar 2024 17:42:10 +0000
ROA not after:            Tue 04 Mar 2025 17:47:10 +0000
asID:                     262145
IP address blocks:        143.208.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e9:24:cb:aa:e2:6a:40:fb:07:99:c8:01:6d:f6:67:a7:42:88:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:10 2024 GMT
            Not After : Mar  4 17:47:10 2025 GMT
        Subject: CN=0277929BB9086CA490526D5E19304249885C9E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:cb:68:06:de:28:38:b1:13:c9:78:ae:5e:
                    a4:ac:1b:eb:bf:51:7a:dc:90:03:90:69:7b:15:8a:
                    1f:40:8f:10:c4:4b:49:39:2d:d4:71:e1:dd:fa:20:
                    fa:e3:dc:aa:39:a6:07:f9:2c:76:46:f3:58:9c:83:
                    11:02:11:c8:5a:c9:45:0b:2e:c0:79:6e:04:aa:c6:
                    15:79:51:13:1d:a4:90:86:92:ef:e8:e1:73:68:21:
                    65:48:0d:04:f8:50:d5:bd:99:9c:30:2c:64:39:d3:
                    b9:a8:97:4f:91:dd:73:3c:06:05:45:bd:da:78:43:
                    cc:90:b3:0c:42:f2:fb:5a:42:78:51:fc:44:e2:0c:
                    5d:00:17:fc:74:39:f7:7c:6b:26:fa:7f:c7:58:ae:
                    9e:e3:c6:43:a7:31:fd:88:3e:94:2c:2a:0f:1d:d0:
                    6b:33:9f:d9:68:b0:34:1e:cd:8f:42:2c:fd:e3:c8:
                    c1:17:af:26:e6:6f:c6:fd:44:1e:36:c9:b1:d7:43:
                    b2:5e:54:88:5e:60:4f:05:c8:7e:38:f4:81:1d:7e:
                    65:7e:a3:64:f1:b8:78:78:76:28:ec:21:5a:98:70:
                    07:25:fa:e8:b2:3f:98:21:54:85:2b:69:68:7c:5b:
                    08:4a:77:cc:b0:ca:bb:2f:7c:4a:1c:6d:49:ab:4e:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:77:92:9B:B9:08:6C:A4:90:52:6D:5E:19:30:42:49:88:5C:9E:61
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3134332e3230382e3136392e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:fe:7c:20:2d:ae:31:6c:f1:bf:50:fc:8b:5a:96:14:dd:83:
         7e:8e:f7:a2:e3:73:9c:9c:89:e6:3f:64:ec:6a:96:d9:25:00:
         9f:83:e8:9f:35:99:49:ad:12:9f:65:9d:6b:a9:c8:6a:fa:3c:
         20:4c:3a:e8:30:e6:62:0c:c6:1b:0d:79:f9:75:94:14:94:e2:
         71:ab:7a:fe:7e:08:2e:7d:43:c5:df:e4:a3:bd:a9:b3:01:db:
         bb:ca:f5:23:75:aa:5a:68:e2:5a:0d:4c:60:d5:30:53:3e:b5:
         9b:f5:e2:00:a2:a6:cc:a3:e0:1e:0e:0b:23:2b:23:b7:80:11:
         39:7b:50:15:7e:cf:91:b2:23:bb:7d:39:aa:60:bf:b5:ec:e2:
         9c:6c:2c:7a:56:49:05:40:a9:76:9a:13:fc:e4:8d:ec:2e:b7:
         ea:9b:32:9b:fd:62:47:d2:78:f3:20:c1:5d:9b:e0:89:5f:a1:
         e8:e5:04:2f:23:4a:10:e9:95:cd:66:d6:8e:f7:9d:9d:ac:db:
         40:ab:1f:26:6e:5c:e8:7d:cf:08:5b:d0:8e:3e:72:5f:e2:54:
         87:04:f6:66:3b:99:a9:39:d6:8f:e0:87:51:64:95:ae:9c:41:
         4f:9d:98:29:66:07:e7:b7:81:ca:2a:3b:32:1e:ec:2b:53:2f:
         ca:7a:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:00:07 2024 by rpki-client on console-ams.rpki-client.org