Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323730313439.roa
File:                     3135392e31362e342e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          /7pZ8zUImkAM4T1mDmg+z6jx19LLlSGEh58i2IVG0eg=
Subject key identifier:   9D:37:90:38:18:FA:86:25:E2:93:5C:CC:0C:EB:FB:19:F2:38:5D:5F
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       74E29ED3A12FC2C2CC6D6589FBDBFEB19D1CD301
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323730313439.roa
Signing time:             Tue 05 Mar 2024 18:01:57 +0000
ROA not before:           Tue 05 Mar 2024 17:56:57 +0000
ROA not after:            Tue 04 Mar 2025 18:01:57 +0000
asID:                     270149
IP address blocks:        159.16.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e2:9e:d3:a1:2f:c2:c2:cc:6d:65:89:fb:db:fe:b1:9d:1c:d3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: Mar  5 17:56:57 2024 GMT
            Not After : Mar  4 18:01:57 2025 GMT
        Subject: CN=9D37903818FA8625E2935CCC0CEBFB19F2385D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0a:aa:87:d4:7d:7a:6e:b5:86:20:da:4b:a8:
                    10:5f:e8:c0:4f:3d:12:52:6e:8d:8f:86:0a:41:f4:
                    b6:2d:f5:eb:e2:6d:94:87:a8:1b:b9:34:e2:6e:ea:
                    21:10:19:e3:75:8f:8a:32:ab:88:72:04:31:87:c1:
                    1e:a5:10:b3:cc:55:a4:19:5d:b9:30:20:ae:f5:d3:
                    d4:f2:b6:da:76:d1:f8:ac:d3:cb:7c:80:eb:c2:3e:
                    37:cf:4a:c0:99:72:8a:b9:39:83:bb:39:33:ff:60:
                    bb:c5:25:d6:8c:1e:4b:05:ce:5f:08:76:e5:97:c4:
                    01:83:e8:0d:0b:ec:38:55:0e:78:83:d6:1b:a4:d3:
                    3e:7d:c0:eb:ee:fb:07:f2:2e:04:73:d7:30:61:92:
                    21:35:de:ed:58:8a:f8:82:70:12:a7:93:1a:8f:42:
                    14:e9:21:82:6f:d3:7d:6b:13:4a:64:2a:c4:57:01:
                    1a:fd:75:de:57:97:1a:79:db:95:51:1b:79:f0:4d:
                    d1:82:f5:d4:56:8c:a4:8e:d6:fe:34:ed:a5:c6:59:
                    b6:01:99:47:3c:cb:0c:23:86:cb:18:56:09:cf:13:
                    63:6b:dd:29:3b:5f:55:cf:1c:af:7d:37:64:78:04:
                    63:bc:2b:01:27:cf:90:4a:d6:58:45:df:7b:a1:68:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:37:90:38:18:FA:86:25:E2:93:5C:CC:0C:EB:FB:19:F2:38:5D:5F
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.16.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:93:0d:14:8a:66:ea:18:89:76:60:e3:b4:84:94:73:d0:a1:
         eb:5b:f2:19:38:f7:33:ae:bf:8b:67:89:1e:59:d8:fc:87:1c:
         8f:5d:11:8d:53:e7:c0:2f:53:56:c8:a5:fc:5a:cf:59:2d:f6:
         bf:1a:2f:37:6b:23:3d:4e:7b:8d:e9:46:1e:ef:09:9a:72:01:
         3d:b6:56:d8:5d:f7:8d:12:1d:b1:f9:30:6a:82:7f:27:2f:ce:
         fe:f0:28:03:cb:89:d4:f4:e0:1d:9f:bb:90:bc:d7:03:48:3c:
         86:fa:c7:81:7e:99:68:73:9b:83:32:80:42:9e:96:c7:b4:76:
         54:04:40:16:8b:b4:15:8c:28:58:75:9f:36:64:c4:e9:d9:43:
         0b:67:70:e6:7e:c7:5a:90:a7:82:ee:5d:8b:e6:44:70:57:88:
         a5:cc:43:fd:68:29:94:95:27:fc:2f:5d:78:b4:af:5f:43:40:
         9f:89:46:a1:08:f2:5d:47:86:a2:4e:af:5d:e9:2f:6e:e7:1d:
         90:8b:e5:03:28:b9:2f:1f:9b:a7:b7:08:41:c0:78:2f:66:6d:
         19:68:b6:ed:b6:eb:d9:b7:d9:2c:fe:e5:fc:a2:f0:ac:5b:86:
         10:1a:d8:f2:d0:26:ff:23:f8:49:a4:dc:a8:a1:7e:f6:92:59:
         b4:36:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org