Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31362e302f32322d3233203d3e203332303938.roa
File:                     3138372e3235312e31362e302f32322d3233203d3e203332303938.roa (raw, json)
Hash identifier:          +cdtj3+e3t4hyENIKQPsTsH7nEWA//khC+woR9U1Xac=
Subject key identifier:   DA:D8:1F:C4:9E:43:02:D6:8A:AC:CA:52:66:DA:EA:0D:87:31:03:C9
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       2FBF3EA2D0E5BE170ED2C782761DBC82A6EFB9E9
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31362e302f32322d3233203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:57 +0000
ROA not before:           Tue 05 Mar 2024 18:12:57 +0000
ROA not after:            Tue 04 Mar 2025 18:17:57 +0000
asID:                     32098
IP address blocks:        187.251.16.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 02:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bf:3e:a2:d0:e5:be:17:0e:d2:c7:82:76:1d:bc:82:a6:ef:b9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:57 2024 GMT
            Not After : Mar  4 18:17:57 2025 GMT
        Subject: CN=DAD81FC49E4302D68AACCA5266DAEA0D873103C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:1b:9a:6e:29:68:fe:79:71:b3:87:13:fb:
                    c6:3c:fc:30:aa:d7:56:39:f7:f3:12:67:18:bb:41:
                    21:2a:2b:3f:37:c9:0c:e6:29:1f:35:06:33:29:01:
                    ae:7f:3b:4b:c3:ea:1d:ff:fa:8b:e3:b7:1c:1a:20:
                    1c:86:82:17:99:ab:7e:16:c0:78:33:42:e6:56:6b:
                    46:d8:f0:c9:e7:37:16:e6:d1:99:a9:9d:1f:4b:74:
                    a1:b2:b6:4c:78:4c:c8:fe:4b:e8:55:96:ba:b1:c4:
                    dc:06:8c:59:7b:4b:3e:f2:e1:27:ff:a9:b7:49:90:
                    c3:d8:15:c3:4c:a7:9d:57:a8:e7:84:ae:cc:6e:f0:
                    7f:cb:e4:ab:9e:87:ca:67:e7:a6:0e:aa:e5:7b:08:
                    b1:a9:d7:ae:f6:e9:33:7d:c4:4d:ec:44:81:46:79:
                    d5:bd:49:28:ed:28:99:a5:ca:1f:35:b2:57:b3:ce:
                    fb:4e:9e:d7:b4:e6:b4:14:65:d0:a0:2f:64:68:fb:
                    8d:f6:8a:1d:a2:bc:6f:b4:ae:28:2e:b9:47:a9:8f:
                    c3:12:39:a5:99:7d:2c:c3:fe:82:03:e1:e5:29:9a:
                    30:2f:f3:8e:6f:cc:a5:65:68:ce:75:ba:ad:1b:28:
                    af:7c:66:c4:0f:23:b6:d7:4b:d6:6a:eb:d6:01:a1:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D8:1F:C4:9E:43:02:D6:8A:AC:CA:52:66:DA:EA:0D:87:31:03:C9
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31362e302f32322d3233203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:f4:df:c6:15:f2:27:74:c5:0e:1d:cf:45:9d:2a:f7:b2:
         27:70:18:47:18:b2:54:3e:e6:05:d5:62:d2:4a:33:a8:a8:21:
         6d:12:24:4e:4e:78:e9:eb:98:fe:f3:3e:20:29:5c:25:6d:de:
         33:39:90:90:84:b7:be:00:e8:27:8d:66:14:64:55:5a:06:d5:
         82:73:79:d7:71:e8:93:5c:ee:9b:13:38:fa:7e:05:b1:89:f9:
         0b:80:0c:56:e0:44:1d:3a:cc:68:c0:a2:35:78:be:ec:94:b1:
         65:7b:c2:63:f0:b1:c2:58:1f:08:82:d9:c9:cf:3e:67:73:cc:
         e9:15:a9:ba:44:bb:20:3c:22:44:e5:56:4e:fd:34:c2:f6:e0:
         ce:c1:13:5d:78:e6:bb:e7:5e:33:b3:82:90:b7:5c:36:cf:9e:
         5e:41:e5:3b:27:e9:aa:b2:da:21:1f:a3:3e:50:1d:e1:6a:dc:
         3f:f7:ff:55:9b:d5:c0:ac:5b:f3:04:8c:41:a0:05:36:49:96:
         f8:7e:79:7a:1d:fc:eb:58:7c:58:59:ae:a0:7c:76:af:5c:11:
         54:d9:65:7b:4a:67:90:0a:4f:07:d4:17:54:76:e6:dd:0a:e1:
         9b:cc:b6:c8:df:f7:11:b2:25:b3:e3:23:23:90:a6:94:16:e9:
         0a:d6:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:11:12 2024 by rpki-client on console-ams.rpki-client.org