Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36342e302f32322d3232203d3e20323732303036.roa
File:                     3134332e302e36342e302f32322d3232203d3e20323732303036.roa (raw, json)
Hash identifier:          /raoUazur1ekdwlzhIvhPJYtBwqCgPx7Tqn3gF1PhTI=
Subject key identifier:   2D:4F:88:21:D1:95:56:13:81:7B:D8:CB:E7:90:57:4E:F3:12:8A:6A
Certificate issuer:       /CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
Certificate serial:       76A50BFC39DF8CF21AE6A5B1317F74FCBD60ED08
Authority key identifier: 8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36342e302f32322d3232203d3e20323732303036.roa
Signing time:             Fri 16 Aug 2024 13:30:01 +0000
ROA not before:           Fri 16 Aug 2024 13:25:01 +0000
ROA not after:            Fri 15 Aug 2025 13:30:01 +0000
asID:                     272006
IP address blocks:        143.0.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a5:0b:fc:39:df:8c:f2:1a:e6:a5:b1:31:7f:74:fc:bd:60:ed:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
        Validity
            Not Before: Aug 16 13:25:01 2024 GMT
            Not After : Aug 15 13:30:01 2025 GMT
        Subject: CN=2D4F8821D1955613817BD8CBE790574EF3128A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:56:8a:ad:9e:4a:b8:b6:a3:7b:b2:a4:d6:
                    b8:22:85:94:4c:fa:f7:0a:ac:a3:c6:d3:1e:54:42:
                    0a:f2:fc:fc:50:fb:37:44:55:55:f4:a9:4b:79:51:
                    7d:7d:c1:8b:92:0e:44:28:ff:7b:9f:48:f7:fd:7c:
                    88:ab:19:32:6f:e1:68:9d:cd:48:9f:aa:0b:21:ad:
                    02:73:3e:06:7d:d4:b7:72:22:f7:40:37:a4:db:ff:
                    92:f8:19:a1:42:84:58:a4:90:2c:13:37:92:c3:57:
                    4d:08:91:3a:3d:cb:aa:52:61:9d:ab:f0:0f:1b:57:
                    52:68:83:bb:3c:b8:0b:7a:8c:a2:65:00:fe:06:14:
                    30:55:12:d4:39:04:27:00:27:76:07:cf:e0:78:9b:
                    0e:6c:1e:64:f4:57:84:d8:87:fd:f7:9a:e7:e3:fb:
                    2d:d6:71:97:4d:f0:c8:94:c9:36:9a:3d:5d:74:78:
                    65:c3:77:f7:cb:05:1d:c7:82:e1:b8:8d:4b:1e:f4:
                    2c:69:aa:39:16:01:af:2a:89:92:6d:fa:7a:2d:d8:
                    ab:65:9f:4e:85:25:e6:5d:34:a9:d0:7c:dd:ec:9c:
                    c2:ba:13:5e:ba:81:e9:1f:a1:35:6c:c6:a7:6b:b6:
                    6d:83:00:af:e5:64:f5:cd:f2:0f:44:4c:a1:01:e2:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4F:88:21:D1:95:56:13:81:7B:D8:CB:E7:90:57:4E:F3:12:8A:6A
            X509v3 Authority Key Identifier:
                keyid:8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36342e302f32322d3232203d3e20323732303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:db:37:4e:0d:87:c8:79:74:18:d6:e9:2a:8c:3f:ba:4d:7c:
         55:3d:cc:c5:de:87:7d:c4:c1:1b:db:94:7e:4c:10:22:e5:19:
         2a:65:f3:07:b1:e7:27:68:20:42:ba:3c:dd:90:7e:df:10:5a:
         7a:58:7c:2c:b0:09:6a:b5:97:94:70:de:32:48:fb:b4:86:90:
         ac:80:be:56:ea:94:f5:38:94:5c:85:5d:59:b0:ea:51:de:fa:
         2d:f4:aa:18:bb:1b:fa:b7:e0:5e:0f:68:dc:0a:3f:6b:cf:af:
         51:bb:6a:a1:d1:0e:50:78:5c:9e:72:24:37:d3:b5:8a:37:43:
         d7:9b:f4:62:37:6b:8a:92:5c:e4:9f:ee:70:ae:2e:9e:e4:61:
         d6:56:0f:e0:4a:a4:02:71:25:4d:56:07:7c:0d:85:00:d7:40:
         ce:3f:98:eb:66:de:3b:b4:08:0d:60:2b:ac:72:fd:bc:b4:86:
         4f:ea:0e:dc:db:df:76:4c:05:a1:af:c1:32:2c:9c:04:3a:64:
         b9:d0:6c:5d:4f:b2:fb:25:32:3d:9e:91:3a:a7:a4:14:dd:e8:
         77:33:10:58:13:72:07:bd:c3:f7:80:32:28:7b:a7:4e:ed:a8:
         87:5a:49:92:13:8e:14:2a:af:95:b0:a5:92:ce:9d:9f:c8:ca:
         82:c4:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 13:51:44 2024 by rpki-client on console-fra.rpki-client.org