Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/3139322e3233312e3131362e302f32342d3234203d3e20323731373735.roa
File:                     3139322e3233312e3131362e302f32342d3234203d3e20323731373735.roa (raw, json)
Hash identifier:          QH6zdKWDF9fXU1tq5I3mOmwfwBDoW61DTtYOt/fpoG8=
Subject key identifier:   C3:72:6D:59:98:9B:9D:CC:0C:92:E6:61:25:3A:CC:94:EA:C6:22:6D
Certificate issuer:       /CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
Certificate serial:       12EE13A5532E8D0CDBC2CC772F3096F066F9897B
Authority key identifier: 22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/3139322e3233312e3131362e302f32342d3234203d3e20323731373735.roa
Signing time:             Tue 05 Mar 2024 17:47:02 +0000
ROA not before:           Tue 05 Mar 2024 17:42:02 +0000
ROA not after:            Tue 04 Mar 2025 17:47:02 +0000
asID:                     271775
IP address blocks:        192.231.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ee:13:a5:53:2e:8d:0c:db:c2:cc:77:2f:30:96:f0:66:f9:89:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
        Validity
            Not Before: Mar  5 17:42:02 2024 GMT
            Not After : Mar  4 17:47:02 2025 GMT
        Subject: CN=C3726D59989B9DCC0C92E661253ACC94EAC6226D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:b0:5e:ff:1a:65:89:0c:88:bd:d6:bb:4a:
                    2b:e7:50:b9:c7:34:ec:88:f0:61:10:50:15:2b:1a:
                    a6:a5:84:4a:fa:c7:3a:f0:fd:d6:ff:28:89:66:4c:
                    4f:48:44:6a:78:4f:fd:85:92:ca:02:e9:cf:72:9b:
                    c2:e7:36:48:99:9f:b3:5d:1f:18:c1:6d:e1:50:f5:
                    92:84:58:0d:c1:32:c3:b5:33:8b:e4:91:4d:81:cc:
                    ef:8d:d2:c4:98:91:c7:84:cd:94:c5:73:11:67:e2:
                    44:4e:62:cb:83:4e:33:43:67:fe:be:1b:dc:cc:15:
                    7f:9b:3a:0d:f9:03:50:8e:62:50:c2:08:9c:a2:fe:
                    84:e7:ae:05:c7:88:d7:e3:9e:b6:07:dd:97:87:49:
                    a9:9d:54:a4:da:64:c8:1e:10:1e:68:18:0b:35:eb:
                    2a:0e:05:a1:2f:09:ef:d4:30:5f:37:0e:a4:95:ad:
                    d6:16:78:0f:af:44:00:52:fc:73:08:cb:49:70:fa:
                    80:e5:e5:11:81:5f:59:61:23:ca:a8:85:8a:f0:75:
                    a2:b1:86:bb:10:e0:dc:d2:e0:31:85:8f:c4:da:98:
                    21:f6:58:f1:54:a7:2e:59:14:36:15:ab:fb:38:9f:
                    c1:41:a5:99:50:c7:b7:35:c5:cd:3a:1b:75:9e:49:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:72:6D:59:98:9B:9D:CC:0C:92:E6:61:25:3A:CC:94:EA:C6:22:6D
            X509v3 Authority Key Identifier:
                keyid:22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/3139322e3233312e3131362e302f32342d3234203d3e20323731373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:8c:f1:30:50:6d:78:a6:e0:00:7e:91:00:b8:4b:b6:d3:
         6c:02:26:3a:61:59:15:ec:3b:06:2f:24:4d:16:90:6f:b9:a5:
         e2:a1:69:c7:93:a7:c9:23:b1:bc:ee:16:c8:4c:51:c4:90:49:
         ae:18:7c:22:b5:98:e1:dd:7f:66:b3:34:38:ec:56:4e:89:0a:
         ad:c4:ac:98:dc:e5:6c:80:fb:5e:6e:2d:2b:2e:39:4f:56:c6:
         e8:ef:cc:ba:16:60:4b:20:99:5a:38:71:b2:f7:46:8e:6b:ee:
         63:11:59:24:47:7a:ea:fb:1a:a3:17:3f:ed:ef:49:e9:6b:10:
         4f:46:53:f9:42:cc:1a:18:32:c7:e4:2a:42:92:22:dd:a5:4b:
         02:e1:88:59:a6:54:ca:4b:11:a4:2d:a2:43:ed:f3:60:e9:d7:
         a9:a3:64:5b:14:21:9c:11:2e:9f:ee:47:e5:98:3c:88:46:7a:
         8a:6a:c8:3a:fa:27:19:ae:c3:e3:dc:a6:1e:23:72:1b:cc:03:
         a0:c1:fd:91:7a:76:c0:58:02:55:eb:f7:2a:93:b8:16:40:52:
         ae:a1:33:e0:c5:b3:9b:f9:6f:54:ea:bd:54:df:4f:10:26:45:
         32:2f:71:9e:f0:0b:66:e3:5d:e9:bf:94:25:12:ad:88:d2:94:
         40:21:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:45 2024 by rpki-client on console-fra.rpki-client.org