Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3135322e3233312e33322e302f32302d3234203d3e203238303336.roa
File:                     3135322e3233312e33322e302f32302d3234203d3e203238303336.roa (raw, json)
Hash identifier:          M1IWtsSAPEsu30VaVSYyMYrP0pi6PBaCiZOnyQLQhU4=
Subject key identifier:   6E:1E:C1:F2:06:3C:2E:17:63:EB:E8:85:FD:BF:7C:4E:45:13:69:62
Certificate issuer:       /CN=C0CE7DDA676A306A376374B13782ABD923687F5D
Certificate serial:       0C6A1ECFBBDB0E319D5874BD74ABAF7B5F1379A2
Authority key identifier: C0:CE:7D:DA:67:6A:30:6A:37:63:74:B1:37:82:AB:D9:23:68:7F:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3135322e3233312e33322e302f32302d3234203d3e203238303336.roa
Signing time:             Tue 05 Mar 2024 17:42:11 +0000
ROA not before:           Tue 05 Mar 2024 17:37:11 +0000
ROA not after:            Tue 04 Mar 2025 17:42:11 +0000
asID:                     28036
IP address blocks:        152.231.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6a:1e:cf:bb:db:0e:31:9d:58:74:bd:74:ab:af:7b:5f:13:79:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0CE7DDA676A306A376374B13782ABD923687F5D
        Validity
            Not Before: Mar  5 17:37:11 2024 GMT
            Not After : Mar  4 17:42:11 2025 GMT
        Subject: CN=6E1EC1F2063C2E1763EBE885FDBF7C4E45136962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ee:f3:af:6b:04:37:d2:86:92:68:59:bf:32:
                    a5:89:c1:f5:a8:4b:48:38:da:89:d2:0b:d7:e0:09:
                    96:56:b0:13:a5:3c:ad:f9:6e:44:d6:44:7c:75:d4:
                    be:30:34:a1:7b:ad:51:88:2e:84:b9:75:67:10:9b:
                    8f:71:9c:f0:6a:b8:29:ad:2a:38:92:03:de:5c:a0:
                    ca:59:a7:0b:87:4d:9c:d4:2e:57:6a:f3:5a:21:e7:
                    88:6c:98:9d:fc:c6:ef:0a:53:a9:ce:3b:9c:d6:9f:
                    d5:d9:8f:ac:92:e9:37:0d:b8:a9:fc:09:70:4c:dd:
                    2b:f5:d6:bc:1c:37:11:72:3e:d5:c9:fe:e6:7d:64:
                    fe:1e:02:0f:6e:fb:57:3d:7e:b6:49:fe:37:69:d5:
                    eb:c9:4a:6c:d5:51:57:18:79:7b:ae:fd:16:40:c2:
                    31:9b:0b:4c:23:66:82:c6:e0:ea:90:62:37:4d:6c:
                    9d:69:d6:fb:77:20:bc:53:ab:78:99:e9:d6:34:1c:
                    31:25:c5:ff:68:85:79:5a:d8:e4:fb:ca:ea:3c:48:
                    4d:ee:9e:98:54:8c:16:0f:81:86:41:f3:b8:cf:58:
                    7c:24:ef:26:48:cd:ed:a6:2a:6e:e6:d3:fc:ae:12:
                    71:ea:5a:91:b6:e6:32:51:10:1e:d5:3f:71:f9:e3:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1E:C1:F2:06:3C:2E:17:63:EB:E8:85:FD:BF:7C:4E:45:13:69:62
            X509v3 Authority Key Identifier:
                keyid:C0:CE:7D:DA:67:6A:30:6A:37:63:74:B1:37:82:AB:D9:23:68:7F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3135322e3233312e33322e302f32302d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:3e:04:d6:32:68:19:35:48:b2:a2:1c:da:08:b2:75:9b:5e:
         ba:77:93:25:3d:59:9d:66:36:7d:7b:b3:3a:58:45:f0:54:71:
         9e:b8:34:a3:ac:a2:63:1b:8f:a9:bb:6a:94:97:97:55:c1:56:
         96:1b:c2:ff:fb:2e:57:12:df:27:77:af:3c:58:d4:7d:3b:b3:
         5a:f5:95:9e:e9:07:05:38:9c:74:6a:a7:b7:52:70:86:a3:93:
         22:c4:1a:91:db:9a:6f:90:cd:fd:9f:bb:18:b6:db:ec:75:6d:
         7d:22:e9:3a:93:04:3d:02:ca:e0:d5:d8:4d:aa:bd:03:d6:2e:
         6c:03:c1:25:8d:56:4c:45:6b:16:94:c9:b6:91:33:d7:fc:fe:
         5e:b1:74:fe:76:53:d0:e7:91:d7:a6:9f:fa:f2:81:1e:6b:69:
         1f:9b:68:07:4b:71:4b:08:8e:49:ac:71:0b:4a:c2:8d:ed:b8:
         0a:af:e3:a6:91:d3:73:0b:f2:69:81:37:09:c7:c9:17:f3:3b:
         9b:48:01:81:e6:29:a2:f9:f1:a0:94:07:48:d9:8d:d5:09:7b:
         05:51:00:11:b0:b2:2d:f6:82:22:7d:f2:85:77:ab:ec:a9:d4:
         cf:cc:c8:f1:a2:10:49:36:3f:1f:2f:71:4d:fc:5f:61:c9:69:
         a1:51:9c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org