Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36352e302f32342d3234203d3e20323732303036.roa
File:                     3134332e302e36352e302f32342d3234203d3e20323732303036.roa (raw, json)
Hash identifier:          mOrPOO2goOaOnBgoIdqRErmE0UT8MQS1nbW/DAxNS3w=
Subject key identifier:   2A:5B:A4:01:88:02:44:05:1A:BB:23:6F:E4:06:14:9E:EE:BC:45:FB
Certificate issuer:       /CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
Certificate serial:       4293CA1E657BD93022A11992B77E87E5D82BD834
Authority key identifier: 8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36352e302f32342d3234203d3e20323732303036.roa
Signing time:             Fri 16 Aug 2024 13:30:00 +0000
ROA not before:           Fri 16 Aug 2024 13:25:00 +0000
ROA not after:            Fri 15 Aug 2025 13:30:00 +0000
asID:                     272006
IP address blocks:        143.0.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:93:ca:1e:65:7b:d9:30:22:a1:19:92:b7:7e:87:e5:d8:2b:d8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
        Validity
            Not Before: Aug 16 13:25:00 2024 GMT
            Not After : Aug 15 13:30:00 2025 GMT
        Subject: CN=2A5BA401880244051ABB236FE406149EEEBC45FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2b:ec:85:9b:70:f6:65:f7:ff:94:01:f6:63:
                    01:50:9d:00:cd:85:30:51:88:13:7c:65:94:1c:ea:
                    73:98:4e:44:6f:24:23:25:73:d2:ab:50:7b:08:0b:
                    3d:3c:6c:79:82:98:da:3b:6c:c4:6a:23:a2:6a:9f:
                    5b:f6:76:fa:ab:3e:1a:71:a4:1f:a0:3e:f2:55:88:
                    c6:09:b2:b2:f0:10:4b:df:d2:b4:3d:59:ac:07:b6:
                    0f:62:0a:9a:ac:b4:12:55:85:2b:cf:6c:28:3d:06:
                    5e:d5:f1:00:d4:44:b6:5d:5c:e4:08:60:5b:cb:b5:
                    c5:91:84:e0:82:74:d6:90:f8:1d:fc:ae:54:21:3c:
                    1e:73:d9:da:d9:7e:bd:81:1d:8b:7f:36:49:fc:2d:
                    fe:bc:78:61:9b:03:02:56:49:fa:51:7b:d8:04:e2:
                    6e:f0:6d:e4:4d:0c:79:fa:7b:77:98:31:42:44:22:
                    bd:2b:83:f4:da:1c:ac:a8:fe:25:ee:90:a7:7a:bc:
                    ad:49:ed:fc:83:cb:eb:19:5c:be:79:be:0d:46:c5:
                    fc:22:3a:f7:b7:70:82:9e:3f:71:0a:f5:7e:07:56:
                    ff:b1:f4:d9:35:17:14:04:ff:26:41:6e:1f:d3:b5:
                    4c:d2:6a:08:ec:f4:2d:77:09:07:02:95:4e:7f:cf:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5B:A4:01:88:02:44:05:1A:BB:23:6F:E4:06:14:9E:EE:BC:45:FB
            X509v3 Authority Key Identifier:
                keyid:8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36352e302f32342d3234203d3e20323732303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:8b:06:16:21:09:04:7f:48:1f:e6:d0:70:5b:bd:de:5a:
         a1:9f:b5:23:31:25:ad:90:8f:a7:a0:58:53:63:76:9c:00:01:
         08:32:e5:b5:6f:0c:00:cb:67:c5:98:5c:03:af:fb:1e:b7:2a:
         bd:0b:a3:72:fd:94:c6:e3:90:21:7d:91:cf:ff:ff:b2:a8:78:
         56:be:52:b0:e7:25:ba:9a:1f:92:8b:3e:3d:ab:4a:45:22:54:
         96:2e:62:f8:5e:54:4d:d4:2a:96:f2:46:2a:b5:e2:21:a7:79:
         ab:1e:9d:ae:bf:dd:6f:ae:cd:5e:75:1a:7a:c3:a6:d6:2c:40:
         fe:fb:c9:49:89:c9:53:90:bf:67:e1:0f:3c:c3:3e:ce:79:d7:
         c0:57:ac:42:50:19:ae:17:36:1d:14:68:75:7d:98:e8:6d:31:
         74:67:94:0c:6a:71:a9:01:2b:a9:5a:ad:f2:35:98:f7:d3:c4:
         3c:75:5a:19:df:d7:a6:31:26:a6:0b:1b:6a:52:cb:33:cd:c4:
         33:56:e5:7e:7e:57:29:3a:5b:00:c2:26:69:cc:43:47:3d:d8:
         c0:ca:59:65:ef:44:e5:2c:4d:fe:1a:70:bf:0e:49:ca:fd:d7:
         45:25:64:cb:4f:f3:6d:ae:8c:bb:64:5d:f1:55:23:4c:32:3b:
         7f:c7:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 12:21:19 2024 by rpki-client on console-ams.rpki-client.org