Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38332e302f32342d3234203d3e20323635373431.roa
File:                     3132382e3230312e38332e302f32342d3234203d3e20323635373431.roa (raw, json)
Hash identifier:          Tt9Y1v9vTRQrdG2uJkim0xN6xH8gqtpbGyDLv+3ic4g=
Subject key identifier:   D1:D8:43:09:08:DC:93:D3:0F:08:E3:51:10:47:9E:98:D8:50:58:5D
Certificate issuer:       /CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Certificate serial:       44704CC6A7A159DD25FF0307515A2B7D3E69162B
Authority key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38332e302f32342d3234203d3e20323635373431.roa
Signing time:             Fri 15 Mar 2024 23:55:00 +0000
ROA not before:           Fri 15 Mar 2024 23:50:00 +0000
ROA not after:            Fri 14 Mar 2025 23:55:00 +0000
asID:                     265741
IP address blocks:        128.201.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:70:4c:c6:a7:a1:59:dd:25:ff:03:07:51:5a:2b:7d:3e:69:16:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
        Validity
            Not Before: Mar 15 23:50:00 2024 GMT
            Not After : Mar 14 23:55:00 2025 GMT
        Subject: CN=D1D8430908DC93D30F08E35110479E98D850585D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:1c:35:3c:39:ec:c8:28:7a:99:c5:7d:9e:
                    5d:8f:e4:74:55:c8:bc:6d:47:3c:6e:c2:e1:72:eb:
                    66:88:de:14:e8:c7:fb:70:7a:36:a3:21:40:da:59:
                    e5:e6:76:ba:b8:b3:65:8a:3b:97:d0:07:42:5b:e2:
                    99:cd:83:74:38:f5:38:84:42:9a:a1:42:20:f2:6a:
                    8f:29:20:07:e0:65:ae:fe:d2:cf:c4:a1:4e:5f:32:
                    39:a5:02:25:71:fe:23:0b:bd:5b:72:50:dc:29:a3:
                    c7:ca:4d:ed:e4:39:35:e8:05:22:ec:bc:60:cf:24:
                    a9:8f:bc:c8:3e:61:db:7b:44:a4:d8:08:03:4c:1f:
                    00:7c:76:55:79:3b:20:73:34:64:53:f6:01:94:c6:
                    8b:30:aa:2d:36:5b:18:0a:00:ea:3a:87:50:30:c8:
                    d3:f5:80:da:cf:37:46:62:6a:19:5b:d2:3e:63:f4:
                    57:21:23:fd:c2:1a:02:cb:90:ad:59:a8:d8:0e:be:
                    69:ea:8a:c6:d8:ca:10:88:ec:81:9e:0d:95:86:4b:
                    6b:ec:94:d0:67:10:a3:0d:d2:fb:c4:17:ca:1d:82:
                    38:8a:1c:38:f4:4d:b6:0c:db:33:26:25:b7:f3:02:
                    33:36:60:5d:76:b4:91:2d:3f:40:c6:d5:2f:a1:3e:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:43:09:08:DC:93:D3:0F:08:E3:51:10:47:9E:98:D8:50:58:5D
            X509v3 Authority Key Identifier:
                keyid:71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38332e302f32342d3234203d3e20323635373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:f3:2e:51:ef:fa:fd:02:b0:69:73:54:97:c5:8d:d5:85:a2:
         f4:d4:66:5d:ce:de:41:27:ce:6b:a3:d0:cf:67:34:fa:e0:c4:
         ee:06:68:9a:11:a9:6b:ce:e7:0a:e2:08:99:01:5c:ab:03:52:
         b6:eb:33:0f:b9:e0:82:b9:9d:1c:8b:0a:98:4b:a1:c0:ef:b4:
         76:42:3a:b3:d7:11:d3:31:c5:42:b0:cc:73:17:5e:cb:ef:a5:
         a7:97:bc:f5:35:3a:96:37:88:86:68:a0:e9:cc:5b:22:57:13:
         91:6f:c4:02:5c:96:12:43:35:76:ef:11:28:53:eb:29:77:e7:
         16:67:0d:ad:e3:c2:20:a1:0f:8f:75:b5:ab:ea:8d:3a:bc:42:
         d9:c3:83:df:2e:63:4c:22:43:91:c8:25:fc:d4:7f:5e:1e:01:
         fa:95:15:00:e1:7a:b6:c2:29:82:fa:72:34:f3:a4:72:b9:d4:
         5a:49:56:47:bc:41:1a:9f:d3:78:1a:ae:a7:26:41:ac:55:20:
         71:dc:e0:53:0f:03:61:d6:62:a3:8d:39:71:b5:66:3d:0e:e4:
         2c:5f:9e:c3:b3:c5:32:45:87:5a:81:eb:b3:bf:2f:04:63:e3:
         f5:65:42:21:1e:d8:59:c8:6f:ac:95:69:75:fe:d9:eb:d2:5a:
         9b:7c:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:42 2024 by rpki-client on console-fra.rpki-client.org