Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36362e302f32342d3234203d3e20323732303036.roa
File:                     3134332e302e36362e302f32342d3234203d3e20323732303036.roa (raw, json)
Hash identifier:          IY9kXQgAkHfHLgce9YrnzP6weWrvUAMcEnB3cA4ovFA=
Subject key identifier:   23:0F:9D:FC:9B:DF:99:13:24:59:77:BC:11:2A:FB:02:6B:B1:8B:18
Certificate issuer:       /CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
Certificate serial:       405600B34AAE208FB5D3ED4DA732BB0DA174DC66
Authority key identifier: 8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36362e302f32342d3234203d3e20323732303036.roa
Signing time:             Fri 16 Aug 2024 13:30:00 +0000
ROA not before:           Fri 16 Aug 2024 13:25:00 +0000
ROA not after:            Fri 15 Aug 2025 13:30:00 +0000
asID:                     272006
IP address blocks:        143.0.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:56:00:b3:4a:ae:20:8f:b5:d3:ed:4d:a7:32:bb:0d:a1:74:dc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
        Validity
            Not Before: Aug 16 13:25:00 2024 GMT
            Not After : Aug 15 13:30:00 2025 GMT
        Subject: CN=230F9DFC9BDF9913245977BC112AFB026BB18B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:b9:e7:ac:b1:a6:ec:33:fb:6e:87:a7:e7:
                    1e:90:ba:55:30:e4:97:62:dc:d5:ed:1e:f2:31:de:
                    2a:60:0d:61:96:3f:d7:06:a1:6a:34:26:cf:70:2e:
                    fc:b5:60:02:3c:2b:0a:7b:c7:b5:a4:a8:19:13:af:
                    ad:f8:b7:a9:b0:28:d1:a7:b1:c7:97:52:e0:3d:9b:
                    0f:9a:8d:78:33:fe:00:d3:ab:87:c5:89:9a:3b:2b:
                    8a:3e:84:d3:8d:b3:5d:bc:38:ec:59:08:5d:c0:1e:
                    7b:fd:f7:79:9e:64:7f:ab:82:d8:57:e1:27:8f:52:
                    b2:04:be:91:d3:21:d4:0e:ec:09:27:d0:9e:d8:87:
                    d6:d4:94:ee:85:a5:5a:b2:d1:19:fa:49:67:89:93:
                    22:50:3d:8b:df:da:bf:57:bb:99:28:be:eb:ac:09:
                    c2:8f:f5:36:99:b0:52:af:70:3f:e6:a2:9e:26:ab:
                    a7:7e:ef:cf:b2:ca:1b:be:59:cd:e6:a1:da:3b:67:
                    46:fd:65:8f:4c:b5:e5:cd:ee:6b:e9:10:4f:be:9b:
                    62:61:ab:12:3c:c6:da:4a:b3:ac:de:ea:54:a9:85:
                    85:13:55:d4:ad:4d:6b:db:9d:d4:a9:b7:6b:c5:35:
                    46:e6:ce:af:2f:d5:7e:9f:7c:44:b0:70:ff:68:4d:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0F:9D:FC:9B:DF:99:13:24:59:77:BC:11:2A:FB:02:6B:B1:8B:18
            X509v3 Authority Key Identifier:
                keyid:8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36362e302f32342d3234203d3e20323732303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:4e:1a:b6:57:78:fd:18:ce:3a:05:e2:4e:e2:52:d7:5b:9e:
         aa:0c:9a:e9:aa:9f:c8:c0:21:88:d8:56:8d:ce:0c:61:fd:4c:
         f8:43:97:0b:b1:96:91:9c:d5:18:5e:3e:19:77:98:56:f4:fc:
         85:e4:b3:0f:d7:04:2c:b1:44:b5:c5:ed:e7:1b:fe:02:28:f7:
         e8:78:cb:79:48:a6:45:6e:1d:b6:d8:cf:80:39:31:af:6b:77:
         d3:a1:d8:00:1c:a4:c2:99:7b:b1:24:6f:0c:12:c4:d5:0f:41:
         4b:92:0c:33:b5:db:c3:75:d8:4b:12:ff:5c:9c:2f:79:7c:d6:
         6e:1f:fb:4f:ef:7c:26:f3:02:9c:0f:a5:4f:fa:9e:70:d7:30:
         0f:39:d1:28:ae:8b:60:72:62:1b:3b:31:bd:61:e6:e4:d1:8b:
         f2:de:26:a4:76:4f:82:dc:a4:9e:fb:b7:7e:e3:27:72:8e:0d:
         c8:12:84:7f:cc:4f:dd:0d:a8:fc:e8:3c:f5:d2:98:f2:30:0b:
         74:51:30:ba:03:c8:50:0c:cd:a4:d0:70:a1:6d:de:76:2f:1f:
         b8:69:86:a9:19:0b:fc:7c:88:d6:23:e1:4b:65:7a:6e:18:82:
         66:76:a0:f3:2f:e5:90:c3:93:61:fc:2f:4c:17:af:1c:d6:98:
         a1:93:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:01 2024 by rpki-client on console-ams.rpki-client.org