Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/3136342e3136332e3132342e302f32342d3234203d3e20323034333030.roa
File:                     3136342e3136332e3132342e302f32342d3234203d3e20323034333030.roa (raw, json)
Hash identifier:          73J+Do4Eu/FvwfvfdUDm5k2x4mRegmsVEiD9BA+enVM=
Subject key identifier:   53:22:1E:2B:2A:9A:B1:62:1C:17:EA:DD:7D:7F:ED:5F:3C:F4:EC:B8
Certificate issuer:       /CN=6F2E85684756BECBED992F0B17433B71F691DBB2
Certificate serial:       1CF417634EA60D0C9AF386B4A4EB2E3DA45D76F4
Authority key identifier: 6F:2E:85:68:47:56:BE:CB:ED:99:2F:0B:17:43:3B:71:F6:91:DB:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/3136342e3136332e3132342e302f32342d3234203d3e20323034333030.roa
Signing time:             Tue 05 Mar 2024 18:03:25 +0000
ROA not before:           Tue 05 Mar 2024 17:58:25 +0000
ROA not after:            Tue 04 Mar 2025 18:03:25 +0000
asID:                     204300
IP address blocks:        164.163.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f4:17:63:4e:a6:0d:0c:9a:f3:86:b4:a4:eb:2e:3d:a4:5d:76:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2E85684756BECBED992F0B17433B71F691DBB2
        Validity
            Not Before: Mar  5 17:58:25 2024 GMT
            Not After : Mar  4 18:03:25 2025 GMT
        Subject: CN=53221E2B2A9AB1621C17EADD7D7FED5F3CF4ECB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:61:be:3b:df:ba:4d:3f:4e:7d:1b:8b:75:
                    bc:df:2d:b0:92:62:15:38:b7:d2:55:29:94:43:20:
                    70:87:e4:3c:e7:ef:c3:cb:f8:3d:96:ac:47:d7:8d:
                    b2:49:4f:a5:22:0f:0e:30:d0:38:b6:c4:dc:86:a1:
                    23:a6:c6:de:9f:ea:31:65:86:f8:83:09:9d:76:1e:
                    a2:f8:90:76:88:bf:d7:ab:53:b3:52:84:b6:be:bf:
                    bf:93:09:34:95:62:f4:81:9a:e6:1e:2c:1a:40:ae:
                    12:a8:60:84:e5:01:e0:57:72:1b:10:22:65:75:2d:
                    0d:e7:d1:07:52:a6:45:a8:f5:a6:3d:e9:65:13:c5:
                    f7:62:40:12:ce:e7:ba:c7:fb:b6:a6:dc:c1:56:55:
                    e9:ce:78:7e:7a:fe:68:65:c0:c9:6c:4d:3c:db:48:
                    29:1a:c1:15:7b:13:f1:dc:fb:71:6d:7c:03:da:50:
                    78:38:58:c1:b2:12:7c:b0:4e:14:da:90:92:dc:c6:
                    8c:6a:c8:e9:56:58:78:15:5a:c4:5a:0c:26:10:70:
                    b6:49:ed:9b:3c:5e:26:2d:f4:a1:3f:8b:e2:4b:b9:
                    19:59:6e:d3:8d:cb:80:fc:12:43:39:f7:9d:75:93:
                    30:f3:b2:50:ac:e0:a7:14:ff:79:48:8f:df:f6:09:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:22:1E:2B:2A:9A:B1:62:1C:17:EA:DD:7D:7F:ED:5F:3C:F4:EC:B8
            X509v3 Authority Key Identifier:
                keyid:6F:2E:85:68:47:56:BE:CB:ED:99:2F:0B:17:43:3B:71:F6:91:DB:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/3136342e3136332e3132342e302f32342d3234203d3e20323034333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:54:97:d3:f3:3b:64:21:2a:5f:f4:54:41:d9:52:d7:7a:d0:
         d5:14:bf:70:8f:70:80:e0:af:d0:f3:1e:91:ce:22:bc:e4:56:
         ba:59:2d:cc:8b:61:17:79:09:68:75:65:c0:70:5e:b5:38:e3:
         ed:f3:5b:fa:c8:9f:56:f3:a9:4a:0b:ce:34:24:e2:33:6d:06:
         17:14:6c:d7:95:8c:1f:29:e5:34:f5:29:4b:d9:87:6c:57:df:
         69:e4:57:39:8e:60:3a:36:2f:10:0f:8a:24:d3:18:6e:04:86:
         f5:53:73:92:57:83:0b:54:84:f9:1a:77:e5:7c:6c:4f:dc:b9:
         b2:ae:10:5d:dc:ed:87:29:11:fd:fa:6c:98:44:0d:91:97:9f:
         29:84:76:8f:79:51:d9:29:2c:d0:ae:60:29:37:b5:e7:b3:30:
         71:84:33:ca:80:55:9b:29:d4:f9:53:cf:dc:76:6e:60:65:29:
         f8:fb:7e:15:2e:7d:0c:46:e5:7c:ee:33:d9:8e:2f:aa:7e:3e:
         a6:24:3e:b7:dd:9b:3e:7a:8a:72:5b:93:64:94:e4:1c:79:db:
         fc:50:e2:b2:8c:9d:f0:7f:8f:d3:49:17:b4:96:10:b4:6b:d7:
         6d:73:e7:bf:cc:e0:ed:80:55:19:3b:c0:4f:49:c2:f7:46:97:
         6e:ef:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:44 2024 by rpki-client on console-fra.rpki-client.org