Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3136372e3131362e302e302f31362d3234203d3e2036303537.roa
File:                     3136372e3131362e302e302f31362d3234203d3e2036303537.roa (raw, json)
Hash identifier:          mqsSAe6RzWann9GPrjmlZJubxNIG5A1Nu1wB0CkYXkY=
Subject key identifier:   42:12:D0:06:6A:A7:5C:E3:C5:AB:31:FA:24:B4:8C:1B:1D:4E:00:57
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       0870A401C2E43CAAD38A9630F2CABDCEEB012ABE
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3136372e3131362e302e302f31362d3234203d3e2036303537.roa
Signing time:             Tue 05 Mar 2024 18:20:03 +0000
ROA not before:           Tue 05 Mar 2024 18:15:03 +0000
ROA not after:            Tue 04 Mar 2025 18:20:03 +0000
asID:                     6057
IP address blocks:        167.116.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:70:a4:01:c2:e4:3c:aa:d3:8a:96:30:f2:ca:bd:ce:eb:01:2a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Mar  5 18:15:03 2024 GMT
            Not After : Mar  4 18:20:03 2025 GMT
        Subject: CN=4212D0066AA75CE3C5AB31FA24B48C1B1D4E0057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:e6:00:51:0b:2e:41:54:04:e2:89:41:e0:
                    24:ca:de:ae:69:a5:41:89:b5:b9:93:87:a0:0a:6d:
                    44:84:56:06:c2:e0:04:ad:b7:a0:65:35:fb:8d:87:
                    7b:7d:8c:b8:73:17:4e:27:54:6c:4a:90:dd:5d:4f:
                    97:e7:ba:a7:fb:96:78:92:dc:85:c1:09:d5:17:c4:
                    ce:20:34:71:c9:60:62:52:ab:50:e8:71:92:6b:47:
                    54:55:92:29:73:0f:9c:24:72:42:7d:38:4d:2c:23:
                    3d:a5:ad:97:c4:c0:09:2e:8b:83:0a:8e:e7:78:8b:
                    29:75:4e:d1:d6:df:ed:46:d5:91:a3:29:1e:6f:80:
                    50:50:b3:07:f7:b1:27:a4:df:31:37:25:5f:cb:99:
                    fe:b8:b3:3a:13:33:79:dd:d4:7c:4d:ad:52:bb:5e:
                    bb:67:6e:63:d4:66:a4:33:06:ef:32:68:40:9f:93:
                    22:f5:65:f4:33:c7:fc:8e:e7:02:a3:21:00:b5:45:
                    d5:bf:41:67:95:c5:6a:af:ac:b6:66:71:6e:fb:4a:
                    3c:6d:49:7a:c3:17:a2:a2:6a:fc:5c:9a:d3:ae:98:
                    54:4d:37:58:c2:09:d2:24:fb:27:90:f9:3f:50:44:
                    4a:81:48:d1:d4:69:e5:67:9e:2a:b5:1c:2d:9d:5a:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:12:D0:06:6A:A7:5C:E3:C5:AB:31:FA:24:B4:8C:1B:1D:4E:00:57
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3136372e3131362e302e302f31362d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:fe:4e:86:25:7a:32:3f:4c:46:8c:c3:b6:2b:e5:10:2f:7b:
         77:c5:c3:b1:49:cd:d9:a9:bc:0b:4e:aa:20:cb:75:bd:d6:24:
         9d:b9:01:d3:4e:21:7b:83:dd:0b:46:c5:59:35:52:d5:0a:b8:
         0a:58:6d:89:26:c5:48:2a:0a:ac:a6:31:7c:4a:b0:39:18:85:
         f7:37:45:90:7b:89:d3:14:6d:aa:a8:8c:28:33:7e:7c:60:09:
         38:54:9f:7d:4b:14:59:b2:0d:35:93:1d:ef:7d:59:5c:7e:db:
         2b:8c:1b:0f:e0:c3:bf:a8:cf:6b:4f:26:2f:e4:93:3f:c4:33:
         c3:85:56:09:7c:9c:2d:28:60:fd:d3:66:70:4f:7d:d1:de:e5:
         3a:11:e1:51:46:3e:0b:f2:4c:29:b0:f7:99:cb:60:54:d1:4c:
         34:78:d3:22:34:2a:65:c4:cc:e9:f7:d1:d4:e9:dd:7e:92:d0:
         93:ec:d3:39:4c:c2:87:63:b4:60:1e:0a:30:b0:c7:a5:93:98:
         df:bb:06:5c:3c:00:bf:c4:1d:4e:56:3d:b0:f3:8c:e2:99:9e:
         2d:e2:19:4e:23:70:11:f3:c5:ea:56:63:64:77:70:8c:a0:82:
         4f:fd:5a:cd:a6:a7:59:69:59:27:c3:9b:67:17:cf:b7:6f:a5:
         54:e9:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org