Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/3134332e3230322e31322e302f32322d3234203d3e20323637373736.roa
File:                     3134332e3230322e31322e302f32322d3234203d3e20323637373736.roa (raw, json)
Hash identifier:          5GjNASJIAKRzRNT7JeusSU6nHXzfaFwXOQVKMcFj2tY=
Subject key identifier:   EF:59:0E:FA:CA:8D:43:57:4B:8B:3C:01:E7:C0:EC:58:7E:73:C9:D6
Certificate issuer:       /CN=9D3515E483AB07CDCE67D20C458F1663A26D31AD
Certificate serial:       798C6DA7C261C480BA2BCC8022403F98CCBEF8F6
Authority key identifier: 9D:35:15:E4:83:AB:07:CD:CE:67:D2:0C:45:8F:16:63:A2:6D:31:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/3134332e3230322e31322e302f32322d3234203d3e20323637373736.roa
Signing time:             Tue 05 Mar 2024 17:48:09 +0000
ROA not before:           Tue 05 Mar 2024 17:43:09 +0000
ROA not after:            Tue 04 Mar 2025 17:48:09 +0000
asID:                     267776
IP address blocks:        143.202.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8c:6d:a7:c2:61:c4:80:ba:2b:cc:80:22:40:3f:98:cc:be:f8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D3515E483AB07CDCE67D20C458F1663A26D31AD
        Validity
            Not Before: Mar  5 17:43:09 2024 GMT
            Not After : Mar  4 17:48:09 2025 GMT
        Subject: CN=EF590EFACA8D43574B8B3C01E7C0EC587E73C9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:bd:a6:0f:99:bd:c2:3e:ca:dd:70:4a:2d:
                    af:51:d5:6c:be:ce:9b:31:f7:58:cb:b5:f6:77:9d:
                    7a:c9:67:58:12:09:65:1e:c0:a4:ed:ba:d0:47:ca:
                    1b:8b:da:fe:2e:48:85:af:d3:cc:58:df:03:54:b7:
                    b8:05:e6:ea:eb:0a:9d:31:e3:9f:dd:95:69:33:9d:
                    9b:be:47:7e:c3:fa:e6:d6:49:94:d3:b4:5d:dd:3e:
                    77:85:db:e2:01:9c:bc:b1:98:b8:7a:19:73:68:2b:
                    61:3c:54:22:b5:19:5b:08:82:2f:77:76:7e:f2:e4:
                    27:3b:ea:00:c5:c9:00:84:30:2b:00:79:81:f5:ab:
                    16:6a:ef:fc:b1:88:a0:38:f5:2c:f3:f2:d5:79:36:
                    62:ec:4b:da:15:4e:e5:9c:ef:96:88:28:bc:35:28:
                    4f:da:86:eb:9f:47:43:2f:54:2e:ea:8c:c2:29:18:
                    45:6f:d6:00:f2:cf:6a:94:60:61:09:51:bd:88:99:
                    3e:65:33:80:0d:0d:d8:2f:55:ce:44:c4:d7:ad:3f:
                    70:de:5e:8d:a8:f1:5d:8c:28:6c:35:5b:ae:78:38:
                    6e:ad:d5:e2:69:8a:7b:18:03:e9:3d:fd:73:eb:b3:
                    56:23:b8:9d:bf:fe:23:2d:2d:16:3c:5f:2b:14:94:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:59:0E:FA:CA:8D:43:57:4B:8B:3C:01:E7:C0:EC:58:7E:73:C9:D6
            X509v3 Authority Key Identifier:
                keyid:9D:35:15:E4:83:AB:07:CD:CE:67:D2:0C:45:8F:16:63:A2:6D:31:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/3134332e3230322e31322e302f32322d3234203d3e20323637373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:ff:41:0d:10:a5:df:7e:d2:f4:c3:3a:8e:fd:4d:94:38:cf:
         36:c9:35:f9:81:15:9d:a8:b2:37:47:8d:f9:4c:a4:09:ae:a5:
         66:30:0c:02:48:52:cb:5a:6f:c0:30:1f:a7:64:78:5e:d5:18:
         46:1e:53:c6:ab:80:d4:7b:a7:83:bb:4a:85:cf:cf:b7:12:6c:
         7a:20:da:9b:62:13:35:d8:be:54:c0:e6:df:f9:45:7e:ad:be:
         4b:0e:10:0f:e8:3c:b0:08:8c:d3:1e:14:fd:91:79:56:97:c4:
         e4:cc:b9:02:45:5e:44:4b:36:9c:51:8c:c3:eb:97:be:44:83:
         8f:ce:ef:7d:6f:1f:ad:ef:d3:10:b7:86:52:c0:65:d4:c8:f3:
         bd:cd:0d:07:0b:18:d7:4c:f3:e6:a3:ad:b4:1a:10:fc:f3:50:
         dc:dc:08:70:94:29:b4:2f:d8:a2:2e:76:b4:5e:32:0b:fa:3f:
         3f:e6:79:03:7b:2a:8f:b6:15:94:0b:27:e5:c0:f2:fb:9d:35:
         b6:85:37:84:f2:8a:48:8d:ae:5c:e9:25:53:95:9e:cd:d1:5a:
         c5:4d:21:40:82:a8:07:8f:6f:f6:d3:1a:30:55:a9:ec:96:66:
         e8:9e:fc:16:60:c3:3a:c5:ed:dd:6e:2a:98:69:29:14:33:b0:
         3b:5b:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org