Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3139312e3130322e302e302f32302d3234203d3e20323632323230.roa
File:                     3139312e3130322e302e302f32302d3234203d3e20323632323230.roa (raw, json)
Hash identifier:          ae2GLYYtlDI8Oqjz0wyEvBfHe1BTLBMm21Ac4tnJ4/U=
Subject key identifier:   A1:51:7A:C4:B6:4E:A7:84:2A:5A:B0:CC:7A:EA:0E:AA:FA:50:92:F2
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       6434D3E58D449E286D167939D0334E2EFFC57B5B
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3139312e3130322e302e302f32302d3234203d3e20323632323230.roa
Signing time:             Tue 05 Mar 2024 17:57:38 +0000
ROA not before:           Tue 05 Mar 2024 17:52:38 +0000
ROA not after:            Tue 04 Mar 2025 17:57:38 +0000
asID:                     262220
IP address blocks:        191.102.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:34:d3:e5:8d:44:9e:28:6d:16:79:39:d0:33:4e:2e:ff:c5:7b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Mar  5 17:52:38 2024 GMT
            Not After : Mar  4 17:57:38 2025 GMT
        Subject: CN=A1517AC4B64EA7842A5AB0CC7AEA0EAAFA5092F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:ad:23:b4:34:3d:cc:f7:72:63:ec:cb:7d:
                    96:42:23:ed:c1:fc:d3:41:68:40:d9:7b:fe:3e:b5:
                    0d:43:43:75:09:f4:87:f9:37:47:34:f9:3e:c6:46:
                    74:03:59:b8:76:aa:5f:ae:c1:a7:6b:a9:d5:93:60:
                    f9:44:91:eb:84:17:3f:be:c1:29:d0:c8:79:fe:9f:
                    fd:6f:fa:6b:90:53:0c:e8:3f:12:35:a7:14:89:4b:
                    45:82:7c:41:b7:ed:f4:99:61:91:c5:80:9c:f4:96:
                    bc:f2:43:ab:ec:6a:0a:88:8d:9c:8a:d7:62:10:68:
                    2e:5f:de:d4:3e:e0:42:09:12:4c:8c:06:cc:f7:a0:
                    a4:2f:20:74:6d:17:5a:ff:c8:4b:f3:60:32:0a:c4:
                    3f:19:c3:33:ab:04:ca:08:7a:88:7a:83:25:0d:56:
                    2e:8a:53:25:e9:98:93:cc:b3:6b:22:c8:f6:9e:ca:
                    f9:07:69:98:bf:05:03:cb:23:04:96:0d:fc:81:e9:
                    b6:bc:e0:1a:c5:1f:43:24:9b:9a:0f:59:80:18:e3:
                    58:b5:59:aa:ee:aa:a5:b1:94:29:ca:66:ce:23:d3:
                    05:f1:19:6f:db:08:a0:a6:cb:0b:68:bc:40:86:e6:
                    22:db:49:3c:ef:a8:17:78:04:e3:81:36:d3:c3:36:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:7A:C4:B6:4E:A7:84:2A:5A:B0:CC:7A:EA:0E:AA:FA:50:92:F2
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3139312e3130322e302e302f32302d3234203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:ad:e1:e6:3b:08:41:7a:b2:e5:80:07:0c:27:c6:91:8e:
         94:b2:c5:22:84:85:d0:1d:bb:27:cf:a6:6e:ff:25:19:18:bb:
         b9:fc:23:56:65:ed:4d:b1:38:56:74:57:7b:22:d8:10:cd:d4:
         30:9a:4e:f4:45:6d:1f:ff:01:83:95:4a:9b:28:d3:86:61:2e:
         17:fc:cb:ca:5e:da:53:3d:6c:f6:10:ae:d4:f8:ed:87:19:da:
         79:46:07:5a:56:10:e9:5c:27:0a:ac:b5:21:40:e6:04:e7:a1:
         d9:b0:f0:95:40:79:63:36:da:ed:e9:2f:6d:63:6b:e5:8f:94:
         77:4f:45:23:20:6a:22:c4:51:b3:41:16:eb:0d:f7:35:ea:6c:
         c4:c3:30:8d:11:32:c9:f1:b7:b6:32:9b:9b:76:39:1b:e9:87:
         3e:7e:d5:8c:c0:73:de:82:33:2a:92:e4:ef:2c:99:d8:00:8c:
         6a:74:78:4e:4d:31:59:59:51:85:4f:f8:8d:b6:da:c7:24:8a:
         23:64:15:19:93:3b:fe:36:cb:34:a6:05:1d:01:2d:ea:f4:22:
         b9:e5:14:05:7b:e3:97:2e:b7:da:0c:1e:5f:c8:fd:f2:9d:5d:
         5f:77:9e:6c:f4:f5:01:48:d9:32:6d:5a:d9:a5:1b:0c:9c:2b:
         11:b8:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org