Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/3134332e3230322e3133362e302f32322d3234203d3e20323633313936.roa
File:                     3134332e3230322e3133362e302f32322d3234203d3e20323633313936.roa (raw, json)
Hash identifier:          ZRkHk583l0gLBO2dinHACoGSfUwvaEK3UlYfN0hW0uU=
Subject key identifier:   36:24:86:8F:54:36:B8:7B:4B:80:B3:B2:80:19:DF:71:D0:3C:6D:50
Certificate issuer:       /CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860
Certificate serial:       2750396913A5268A11C395EFCE71C58AA1EA460D
Authority key identifier: 1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/3134332e3230322e3133362e302f32322d3234203d3e20323633313936.roa
Signing time:             Tue 05 Mar 2024 17:58:26 +0000
ROA not before:           Tue 05 Mar 2024 17:53:26 +0000
ROA not after:            Tue 04 Mar 2025 17:58:26 +0000
asID:                     263196
IP address blocks:        143.202.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:50:39:69:13:a5:26:8a:11:c3:95:ef:ce:71:c5:8a:a1:ea:46:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860
        Validity
            Not Before: Mar  5 17:53:26 2024 GMT
            Not After : Mar  4 17:58:26 2025 GMT
        Subject: CN=3624868F5436B87B4B80B3B28019DF71D03C6D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:57:ba:4c:c5:c4:34:99:91:0a:e0:15:43:
                    81:06:df:40:4d:e2:a9:61:5e:10:4b:93:3e:44:d1:
                    f1:22:86:01:38:63:f9:28:68:17:4e:12:0b:3f:4e:
                    8a:bf:87:c7:51:c7:18:1f:a9:df:01:00:72:13:06:
                    9b:bf:1d:1c:4d:dc:ef:28:53:d1:51:5e:4c:92:7b:
                    fc:e8:58:aa:66:c0:8e:5d:f9:59:ef:d7:f8:04:96:
                    ef:0e:6e:6e:62:e3:b1:3a:e0:dc:a9:6e:ce:02:f0:
                    f2:e5:05:c7:c5:20:a0:06:0e:14:2f:c2:af:40:b3:
                    b7:1b:f3:54:d1:61:70:85:18:d3:e2:c1:15:df:10:
                    8c:90:1a:32:68:7c:c6:09:5d:65:c4:b2:d3:77:b6:
                    c6:eb:e8:0a:72:fd:54:b7:6e:69:03:df:7f:fc:95:
                    aa:22:59:16:b9:4b:40:0b:dd:e5:65:26:2f:b8:8c:
                    5f:28:b3:26:6f:bb:f9:a3:78:c4:40:ae:e9:97:d8:
                    3e:50:e0:38:d2:0a:c0:dd:6a:6c:d0:9c:55:f0:fd:
                    75:26:c6:24:35:b0:4c:4c:6d:5f:15:ba:89:39:eb:
                    0f:90:82:e2:bb:60:e3:12:b1:7c:ad:90:65:c3:ac:
                    d0:64:4e:f9:d5:84:6d:36:3f:87:15:f4:3d:55:f9:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:24:86:8F:54:36:B8:7B:4B:80:B3:B2:80:19:DF:71:D0:3C:6D:50
            X509v3 Authority Key Identifier:
                keyid:1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/3134332e3230322e3133362e302f32322d3234203d3e20323633313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:1f:e5:6f:31:bd:bf:da:8d:5e:5e:28:a5:22:b8:fc:0b:17:
         75:1e:7a:3a:a6:5a:1d:57:56:0e:58:53:01:71:b7:d4:8a:a4:
         12:4b:52:58:43:3a:12:00:24:1b:f9:b5:9a:a4:78:d0:3e:b8:
         31:4c:b0:d5:15:1f:24:f9:61:a4:47:30:90:66:47:34:01:54:
         d9:9f:7f:4c:df:37:ee:7c:fe:12:e9:b0:e6:28:75:f4:aa:36:
         2a:56:8c:15:c2:23:54:9a:10:10:ff:14:8a:ed:4f:c7:ec:ae:
         c4:ca:3a:7a:4f:2b:28:5b:54:0c:70:08:2d:21:cc:6d:3d:5f:
         d9:32:92:77:27:7b:e7:b9:53:bb:1a:0d:7d:77:7f:03:4d:c9:
         9f:d9:7b:d4:56:9e:13:b2:53:3a:c8:d3:5a:c5:ca:49:17:1e:
         02:72:b3:54:58:56:3b:52:dc:fd:72:03:13:f5:fc:3d:c4:60:
         ba:24:de:ad:9b:e3:21:71:5c:d8:2c:b0:d0:22:fb:86:39:29:
         c4:ac:d9:51:8d:41:57:df:33:a3:cc:a4:07:55:03:1d:b4:29:
         5a:f8:c0:e9:94:0b:46:6e:55:ac:b1:a4:06:2f:8e:26:71:9b:
         57:6c:7f:ff:d9:04:92:8b:86:81:3a:d4:b1:49:2e:1f:19:20:
         d5:54:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org