Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/3134332e3235352e33362e302f32322d3234203d3e20323634363532.roa
File:                     3134332e3235352e33362e302f32322d3234203d3e20323634363532.roa (raw, json)
Hash identifier:          FQeXdp6bqem0ywwd+ES8oUS9HV80mqBFJ+TXCMzDI/Y=
Subject key identifier:   EB:B1:1C:08:9F:58:D2:DB:5A:2E:B5:BC:57:7F:B0:3B:8A:F1:F1:0F
Certificate issuer:       /CN=1599BDA0EA70C244843872B07AD7381026232CA8
Certificate serial:       5C25FFBAC26641D9C75AA441F41BD954DB09998F
Authority key identifier: 15:99:BD:A0:EA:70:C2:44:84:38:72:B0:7A:D7:38:10:26:23:2C:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1599BDA0EA70C244843872B07AD7381026232CA8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/3134332e3235352e33362e302f32322d3234203d3e20323634363532.roa
Signing time:             Tue 05 Mar 2024 17:39:57 +0000
ROA not before:           Tue 05 Mar 2024 17:34:57 +0000
ROA not after:            Tue 04 Mar 2025 17:39:57 +0000
asID:                     264652
IP address blocks:        143.255.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/1599BDA0EA70C244843872B07AD7381026232CA8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/1599BDA0EA70C244843872B07AD7381026232CA8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1599BDA0EA70C244843872B07AD7381026232CA8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:25:ff:ba:c2:66:41:d9:c7:5a:a4:41:f4:1b:d9:54:db:09:99:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1599BDA0EA70C244843872B07AD7381026232CA8
        Validity
            Not Before: Mar  5 17:34:57 2024 GMT
            Not After : Mar  4 17:39:57 2025 GMT
        Subject: CN=EBB11C089F58D2DB5A2EB5BC577FB03B8AF1F10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:a7:84:6d:57:9d:26:14:cf:38:d9:ad:ed:
                    d6:7a:73:5d:6f:8e:86:69:77:f4:9c:7b:3f:9c:db:
                    55:6e:79:60:fd:f6:c4:a3:8d:49:0f:44:fd:22:3d:
                    20:d5:cb:05:9a:ef:5a:c6:d8:8c:f8:10:a9:41:3d:
                    8c:55:90:48:32:de:0f:52:2b:fd:81:be:e6:66:14:
                    84:cb:c2:d8:b5:ff:d2:9d:48:74:1c:5f:20:bd:7b:
                    9a:a2:b6:2b:8f:eb:71:43:43:d4:6d:54:94:67:b6:
                    ea:2e:bc:55:f3:04:b3:66:52:2a:14:72:64:be:29:
                    0b:7a:1c:41:31:b6:f8:2e:d5:10:41:b2:81:2b:e1:
                    61:c6:2f:77:57:2f:12:c2:58:a6:37:99:2b:ab:2e:
                    c7:ea:d4:6b:80:6b:0b:26:3e:a7:91:8c:b5:18:00:
                    00:7c:a0:90:56:6b:d1:bb:11:cc:42:83:1a:86:87:
                    30:33:a7:14:fc:e7:01:bc:29:16:03:09:ab:57:53:
                    2d:6a:7b:00:fe:61:eb:d1:04:69:4b:63:03:b8:7a:
                    c7:a1:ad:53:c6:45:d1:91:09:c5:02:1c:d2:7f:4d:
                    f5:6a:a1:72:0b:a2:29:76:7e:23:87:a1:0b:86:f1:
                    d5:79:65:c7:6d:3a:e9:84:d4:6f:41:4d:20:d7:20:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:1C:08:9F:58:D2:DB:5A:2E:B5:BC:57:7F:B0:3B:8A:F1:F1:0F
            X509v3 Authority Key Identifier:
                keyid:15:99:BD:A0:EA:70:C2:44:84:38:72:B0:7A:D7:38:10:26:23:2C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/1599BDA0EA70C244843872B07AD7381026232CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1599BDA0EA70C244843872B07AD7381026232CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1D2AB2A8DF744A4DB2A98A252BEC43A4E0EEA9B2274C84438D896155ACF5309/0/3134332e3235352e33362e302f32322d3234203d3e20323634363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:a6:d1:d1:6e:7a:dc:e9:73:08:cb:5d:ce:58:6a:5d:e7:
         58:be:b4:1d:72:a0:05:89:25:cf:22:2d:b1:5a:fa:a1:8e:a9:
         dc:ef:1d:a4:91:4f:92:a3:0a:fe:7c:da:e8:b7:9a:43:e0:d0:
         95:35:9c:f9:b4:3c:e1:74:7f:f7:42:a0:9e:d8:c9:a2:f3:1e:
         58:d0:cc:f0:2f:0a:26:fd:8c:cd:94:98:fa:25:57:94:e5:bf:
         f7:f1:c1:79:9d:5c:42:05:73:38:03:3b:d4:86:e6:e5:6f:40:
         6e:48:20:e8:6b:a1:2c:d0:09:7d:1a:cc:9d:3d:91:f5:33:99:
         22:1d:01:dc:2d:ca:24:66:d0:1e:57:22:ef:a3:98:f2:ae:05:
         57:3b:e3:d5:11:8f:79:de:d6:c9:d6:5e:8d:d9:13:c4:6c:03:
         8d:67:06:7f:b6:bf:1e:a7:3d:5c:49:f6:3c:7d:af:6d:f0:38:
         66:c4:54:ce:35:e5:a1:9b:5a:b2:a0:08:f3:5d:06:49:07:ad:
         ba:c5:7c:92:19:b6:99:48:28:94:43:18:93:e1:d9:86:94:bd:
         df:fb:cd:16:b8:fd:d4:d3:fc:c0:53:80:79:f4:05:53:4c:7a:
         de:16:5e:2f:b7:43:ee:ee:f3:1c:42:7e:59:59:cb:4e:e6:37:
         5f:79:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org