Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/3136302e3233382e36332e302f32342d3234203d3e20323637383139.roa
File:                     3136302e3233382e36332e302f32342d3234203d3e20323637383139.roa (raw, json)
Hash identifier:          6yhdV0uIBrsc306Z6kllo6ktL/funiLKa3V1VFMbQoM=
Subject key identifier:   32:B6:DA:0F:8E:67:EF:1D:C2:54:3C:12:4E:CE:22:E5:D4:5D:A8:41
Certificate issuer:       /CN=F2F56A7D46F18855519ECBFCA7BDC0C7D3508748
Certificate serial:       0C034934431EFD95B22C1B9153352C2E81265C29
Authority key identifier: F2:F5:6A:7D:46:F1:88:55:51:9E:CB:FC:A7:BD:C0:C7:D3:50:87:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/3136302e3233382e36332e302f32342d3234203d3e20323637383139.roa
Signing time:             Tue 05 Mar 2024 18:18:31 +0000
ROA not before:           Tue 05 Mar 2024 18:13:31 +0000
ROA not after:            Tue 04 Mar 2025 18:18:31 +0000
asID:                     267819
IP address blocks:        160.238.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:03:49:34:43:1e:fd:95:b2:2c:1b:91:53:35:2c:2e:81:26:5c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F56A7D46F18855519ECBFCA7BDC0C7D3508748
        Validity
            Not Before: Mar  5 18:13:31 2024 GMT
            Not After : Mar  4 18:18:31 2025 GMT
        Subject: CN=32B6DA0F8E67EF1DC2543C124ECE22E5D45DA841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d7:37:06:33:97:fb:ad:cd:75:e4:0b:e2:32:
                    fb:41:14:2d:9e:da:9e:9d:05:22:6a:ea:0b:4a:10:
                    f2:96:c5:eb:b2:ca:10:05:30:8b:33:c7:45:6e:e5:
                    18:4a:bb:f2:d9:f2:a5:cb:13:7d:17:02:94:24:cf:
                    67:b9:bb:33:ea:97:94:8f:94:a1:86:09:ec:b1:33:
                    e4:b8:e3:ec:45:f1:55:2e:bb:f8:ab:4b:8f:59:83:
                    0c:f2:bd:a3:97:6c:91:02:62:50:4d:8b:a4:c1:80:
                    85:59:1d:40:5f:99:19:e1:18:a1:6f:89:6e:7b:2c:
                    4f:fb:45:e2:fb:d1:b2:fb:f5:e1:6b:b7:75:15:6e:
                    e2:b9:eb:1d:cf:17:2a:54:ae:2b:d4:f0:d3:4c:97:
                    75:39:52:8f:bd:ba:25:ac:b0:8f:17:9c:0e:85:ec:
                    de:26:7b:3d:d6:ba:8e:67:d4:fe:14:9a:ad:a4:b6:
                    ac:ee:64:6c:4c:79:e2:39:af:b5:7a:f1:6c:e5:b5:
                    83:27:00:b0:c5:cb:2c:77:45:26:8c:d3:70:ec:6d:
                    43:75:db:dd:db:70:8b:44:f6:23:58:6a:0e:42:52:
                    76:4a:3e:b7:00:fe:10:ec:55:6e:02:a6:fb:39:0c:
                    b0:35:52:bb:0a:e8:93:df:cb:77:65:ae:d7:d6:8a:
                    d1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B6:DA:0F:8E:67:EF:1D:C2:54:3C:12:4E:CE:22:E5:D4:5D:A8:41
            X509v3 Authority Key Identifier:
                keyid:F2:F5:6A:7D:46:F1:88:55:51:9E:CB:FC:A7:BD:C0:C7:D3:50:87:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/3136302e3233382e36332e302f32342d3234203d3e20323637383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:6a:c8:d9:41:d2:ed:6b:9e:bd:70:8c:63:7f:34:70:f5:
         e0:89:7c:c0:ec:f8:ce:55:ca:5b:bc:eb:a6:04:85:7b:4c:83:
         cb:27:88:a2:d0:4e:83:66:d6:5f:3b:b1:39:77:97:df:7c:2c:
         33:d8:ea:1b:bc:ca:34:ed:10:4e:37:5c:17:74:0a:7b:3b:be:
         84:40:63:bf:a0:52:85:af:3a:c0:68:75:7a:56:45:4d:06:d4:
         19:8f:bf:d7:e1:a2:e7:8f:a3:7e:04:6b:06:25:7c:45:2e:c5:
         b4:62:45:66:1a:94:7a:30:80:27:6a:39:76:62:13:14:bf:8a:
         6a:12:2b:26:82:73:23:7a:dc:9b:57:17:c7:9a:ad:d5:b9:5d:
         3f:02:59:cc:62:77:f3:3a:5d:2d:8d:f5:9b:7e:3f:f5:57:72:
         99:40:71:ba:3e:f0:2c:61:90:7d:25:72:94:a8:4f:d2:2d:96:
         c1:d5:e9:28:72:50:21:ea:32:06:27:e3:94:b6:8a:61:45:74:
         7c:72:b0:16:c5:a3:72:72:53:00:f1:88:e0:a5:23:01:0c:ec:
         8c:25:ec:e7:21:a8:ac:e2:6b:d0:85:ab:f5:07:2f:ac:94:cc:
         16:40:3f:ac:86:c3:81:85:66:4b:fd:1a:cb:07:d7:d6:d9:f6:
         23:88:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org