Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa
File:                     3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa (raw, json)
Hash identifier:          ScKrQpbg+bkkm7GZGuQxtzNG1vWLF9pA7H4aDJ92dwE=
Subject key identifier:   F4:7F:CC:01:4E:AE:CF:90:A9:FD:C9:98:94:70:97:ED:AB:B4:26:00
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       2607C6D72B05AF97E8449AFCEDA074233D0EF7D1
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 17:56:40 +0000
ROA not before:           Tue 05 Mar 2024 17:51:40 +0000
ROA not after:            Tue 04 Mar 2025 17:56:40 +0000
asID:                     19905
IP address blocks:        132.251.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:07:c6:d7:2b:05:af:97:e8:44:9a:fc:ed:a0:74:23:3d:0e:f7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:40 2024 GMT
            Not After : Mar  4 17:56:40 2025 GMT
        Subject: CN=F47FCC014EAECF90A9FDC998947097EDABB42600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:54:77:fb:10:5c:43:3a:0c:b6:fa:1d:8c:
                    24:c2:cc:51:cd:a8:2e:42:b3:ca:55:03:66:c6:c4:
                    00:74:53:0d:e5:40:7b:61:e9:e9:2a:a2:1e:2d:fd:
                    5c:ae:47:28:dd:0c:7e:26:c6:b8:e8:a8:3a:ab:e4:
                    00:71:99:88:ba:dd:51:f6:07:4e:c1:1e:47:85:45:
                    dc:6c:79:b6:2c:d8:a2:18:12:8e:ae:07:2d:b2:26:
                    53:7e:06:85:74:00:b2:7e:50:12:9b:18:f0:01:81:
                    9d:eb:e6:96:0d:86:81:89:fd:00:a1:98:fa:27:d6:
                    52:c7:aa:07:00:e2:df:cb:ba:68:97:86:df:90:79:
                    e7:6e:af:8e:36:cc:cb:84:a2:4b:c9:b3:3f:c9:50:
                    dd:ad:a1:7b:09:e1:94:08:c8:29:18:47:9c:14:4e:
                    1e:e8:9a:0a:07:a0:62:e9:e1:a4:4c:63:f4:a4:54:
                    92:81:6c:cf:1e:00:f2:fc:20:84:0b:ff:29:43:2b:
                    08:73:be:21:bc:a6:84:97:39:ff:8d:84:61:f4:83:
                    82:2a:de:5c:f3:ec:6a:67:bc:4c:d2:63:48:c6:36:
                    39:06:ad:6c:15:69:9a:2f:81:0b:00:8e:d6:0d:66:
                    0b:3d:0a:5b:32:4c:ba:58:9f:24:87:c5:2c:67:76:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:CC:01:4E:AE:CF:90:A9:FD:C9:98:94:70:97:ED:AB:B4:26:00
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.251.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:86:0a:5f:43:23:ba:04:1d:96:6f:b4:8d:8d:be:aa:24:
         be:05:d4:77:e7:88:ee:f9:c6:00:e5:26:12:cd:f6:5d:f0:10:
         43:6c:2b:46:23:4c:73:89:a7:07:c0:7a:0f:12:ad:fd:d3:f6:
         53:9f:e4:cf:66:4b:eb:d7:55:fa:b0:18:8d:3f:50:3a:8b:17:
         94:b9:b1:80:39:7b:5b:84:69:f4:d5:70:9c:8d:60:4f:1c:4f:
         79:45:ef:17:ec:05:51:b7:a0:84:24:8a:7b:ea:ed:5e:ac:82:
         d6:9a:e3:31:9b:f4:09:f3:c2:ea:45:96:6a:06:6b:20:f2:98:
         8f:41:c5:95:6a:03:32:46:e8:ab:b2:d4:34:f8:9b:32:5c:74:
         e8:11:6a:f2:c2:51:2b:b8:21:78:6a:c0:8e:7c:c3:49:27:56:
         5e:6c:2c:89:d1:b0:54:c9:ac:46:9f:9c:67:18:05:45:85:0a:
         fd:13:d7:df:c0:44:da:be:d3:d1:6a:71:86:bf:f1:ec:44:08:
         70:72:01:a8:40:47:41:b9:e5:d2:86:b0:76:e4:13:3a:30:2a:
         e1:28:c2:55:2f:21:66:32:fd:09:c0:2c:36:c5:4d:f6:b0:2a:
         2b:1e:20:20:51:74:69:54:3d:89:68:01:83:15:d8:fc:7a:c8:
         97:0e:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org