Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234372e302e302f31362d3234203d3e20323738.roa
File:                     3133322e3234372e302e302f31362d3234203d3e20323738.roa (raw, json)
Hash identifier:          e81tNBOxSmyCwKWZ2w7VO9PgmD4J6zxPxtAvL+jjsNU=
Subject key identifier:   B6:79:7A:0F:22:47:AA:48:2D:60:9D:F4:CF:41:72:97:89:45:E4:67
Certificate issuer:       /CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
Certificate serial:       13B5CD7063FDE35BE3331544DEB256C42B69D081
Authority key identifier: 7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234372e302e302f31362d3234203d3e20323738.roa
Signing time:             Tue 05 Mar 2024 18:02:08 +0000
ROA not before:           Tue 05 Mar 2024 17:57:08 +0000
ROA not after:            Tue 04 Mar 2025 18:02:08 +0000
asID:                     278
IP address blocks:        132.247.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b5:cd:70:63:fd:e3:5b:e3:33:15:44:de:b2:56:c4:2b:69:d0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
        Validity
            Not Before: Mar  5 17:57:08 2024 GMT
            Not After : Mar  4 18:02:08 2025 GMT
        Subject: CN=B6797A0F2247AA482D609DF4CF4172978945E467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:18:0d:e5:a3:d6:ec:e1:41:ea:27:11:97:
                    d5:cc:2f:57:c3:fa:de:dd:b8:a3:97:17:16:4f:50:
                    29:ea:0b:28:3a:a4:a1:fa:14:71:e1:c3:28:fc:aa:
                    a9:39:16:1d:43:f9:f1:bb:be:cf:ed:04:a1:01:77:
                    b9:ae:09:82:81:7e:80:94:68:77:e3:e7:16:ce:80:
                    60:e3:de:45:a2:17:66:49:00:96:62:11:52:84:2f:
                    17:e9:d9:5f:25:9e:cb:81:8c:cd:db:9a:80:6f:9a:
                    69:56:24:81:68:5f:d7:e5:f1:7c:65:e8:c0:68:c4:
                    dd:a1:7d:d4:c4:2d:58:59:6a:9d:1b:0d:4a:7b:52:
                    38:53:89:c4:63:95:26:6a:69:3a:03:f5:40:20:e9:
                    0e:92:03:32:ec:39:d8:49:10:cc:e6:b2:d4:5d:02:
                    bf:5e:00:c9:45:fa:2c:2f:02:5d:c4:f1:55:dd:2a:
                    04:b4:03:c9:eb:de:c8:4f:3e:fc:11:ff:ad:59:c2:
                    11:80:84:a9:ed:ac:c7:82:e1:52:77:28:fa:86:48:
                    62:6f:a0:45:0f:0f:6d:21:4b:c9:0e:85:83:25:5f:
                    2d:ae:62:d4:b7:4d:43:c3:61:58:19:d9:48:6c:7e:
                    44:b6:79:e7:91:80:2e:e1:fc:ad:96:0c:be:a8:ad:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:79:7A:0F:22:47:AA:48:2D:60:9D:F4:CF:41:72:97:89:45:E4:67
            X509v3 Authority Key Identifier:
                keyid:7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234372e302e302f31362d3234203d3e20323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:67:04:31:55:e8:d5:ce:96:22:65:0a:f3:d3:fa:b3:19:f5:
         ee:64:b3:29:06:37:f3:84:98:59:31:ec:64:60:3d:2e:6d:b8:
         91:7c:d8:97:ff:f1:cb:cf:5a:61:83:1e:ca:d5:b4:85:32:0c:
         e2:07:d1:f5:43:3c:bd:dc:4e:4d:56:31:6c:ae:bd:02:7b:33:
         d6:8c:81:dc:8d:fe:df:d8:f2:c1:07:8f:8f:73:c7:54:70:ac:
         b0:15:be:10:71:48:62:1d:ee:fe:14:81:80:e3:99:c2:ab:90:
         8b:aa:c7:f1:b5:e3:72:b2:14:3e:7d:12:2b:97:cb:e5:9a:53:
         c4:df:b3:7d:aa:3e:2f:37:b2:de:27:14:1e:3b:36:c2:a4:cd:
         99:93:59:6e:06:1a:14:bf:46:11:5a:c3:96:55:3e:8d:c1:5f:
         b5:46:44:7a:e3:9e:ef:e9:59:d6:23:c2:3e:0f:30:44:02:47:
         53:13:5c:dd:c7:0d:a9:a3:dd:70:bd:9d:0a:d5:40:b6:1f:90:
         04:26:d3:db:66:6a:16:15:f9:0f:58:52:ed:77:fa:32:c6:18:
         ff:74:95:f1:19:bb:3b:6d:d5:cf:71:50:75:05:9b:9c:c2:85:
         31:e4:fe:a0:46:16:a3:79:e4:91:c1:48:b7:73:d3:72:55:d5:
         d3:ac:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org