Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3135322e3233312e3131302e302f32332d3234203d3e203237393836.roa
File:                     3135322e3233312e3131302e302f32332d3234203d3e203237393836.roa (raw, json)
Hash identifier:          kf+C/5dtoMqFw1t5R5LsA15+pIZdCNTSzmfNynUeU3o=
Subject key identifier:   6B:5B:6B:80:0A:5A:CE:92:5E:34:D9:D0:C7:86:50:E6:7B:4D:82:72
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       1062D216946AD2F7659252B25E761E581A1E1924
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3135322e3233312e3131302e302f32332d3234203d3e203237393836.roa
Signing time:             Tue 05 Mar 2024 18:14:57 +0000
ROA not before:           Tue 05 Mar 2024 18:09:57 +0000
ROA not after:            Tue 04 Mar 2025 18:14:57 +0000
asID:                     27986
IP address blocks:        152.231.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:62:d2:16:94:6a:d2:f7:65:92:52:b2:5e:76:1e:58:1a:1e:19:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:57 2024 GMT
            Not After : Mar  4 18:14:57 2025 GMT
        Subject: CN=6B5B6B800A5ACE925E34D9D0C78650E67B4D8272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:35:85:58:ba:03:e6:51:fd:ca:0f:9b:3e:
                    6b:09:f1:50:43:7f:52:79:20:f7:1c:03:81:b7:2e:
                    62:f6:9f:e6:c5:13:ed:54:f2:ef:5e:5c:05:92:1a:
                    24:f0:1d:4d:4e:ed:aa:35:92:ab:73:2e:f4:80:ce:
                    92:7c:dc:d7:2a:7a:c7:f4:07:c7:a0:d5:05:60:fb:
                    da:cf:78:1a:6c:f3:db:a3:64:dd:b9:19:f2:22:2c:
                    9a:f6:6d:4a:da:f8:b3:cc:6a:36:8c:2e:4f:ab:23:
                    a1:ec:27:f4:27:02:d7:a6:46:6d:ee:5e:b7:e1:da:
                    ae:55:47:c2:ef:76:ee:b9:44:ea:03:0b:8e:6e:3c:
                    e5:dd:85:0c:f2:d6:66:b8:b5:dc:4b:a3:40:ef:a2:
                    85:4c:51:14:52:c2:b0:15:fd:3c:1a:e3:47:a5:73:
                    77:07:9c:8c:ee:e8:79:a4:59:a3:10:90:55:a6:a8:
                    c0:99:02:f9:3f:ae:e9:6d:41:17:06:22:28:6e:1f:
                    cc:34:85:c2:2d:db:4a:f1:8c:98:32:08:f9:6c:62:
                    87:80:65:e7:e0:5f:ff:c7:fc:21:9e:a4:79:b0:4f:
                    80:04:e9:5e:2e:7d:5b:87:81:fd:62:95:9f:b1:89:
                    9f:6c:78:c8:65:f0:92:8d:f1:6f:18:78:61:27:6e:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5B:6B:80:0A:5A:CE:92:5E:34:D9:D0:C7:86:50:E6:7B:4D:82:72
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3135322e3233312e3131302e302f32332d3234203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:eb:63:bc:1d:54:a1:fb:cf:5a:7c:5f:24:8a:1a:14:7c:c5:
         32:f0:b1:93:b7:6f:47:83:5d:b9:ec:aa:90:7c:ad:ef:e6:02:
         5b:d9:c2:b3:de:49:ba:a1:96:e9:24:92:6f:d0:da:ae:3b:92:
         b5:48:d3:6d:f4:1d:84:4c:8c:2f:91:75:ea:d3:58:ce:82:5e:
         3e:6e:c0:f1:e1:c7:f3:fd:a9:89:5e:d7:e6:69:b0:b0:3f:12:
         cb:7b:30:c3:71:b7:a7:92:15:74:db:a4:84:d9:66:05:37:9b:
         b4:2e:c6:77:7f:ee:7e:8f:2c:f4:13:a5:ac:38:0c:97:c7:c2:
         81:71:11:7d:55:3c:63:3f:54:dd:55:fe:11:92:48:66:3e:b5:
         01:a4:39:4f:d6:e2:d5:25:bd:63:ed:c8:52:c4:79:c7:1c:97:
         a1:85:9e:40:68:c1:1e:b7:47:cf:02:47:d5:55:95:4d:ab:3a:
         e0:44:fc:b1:ee:9d:6a:a1:6b:d1:85:70:b7:89:30:95:e2:f1:
         50:81:78:47:cd:8c:53:0e:64:d1:fd:42:bd:f1:39:fc:d2:84:
         7d:4e:12:b9:56:ff:80:6a:16:4f:79:bd:40:53:9c:e7:e7:00:
         3b:16:c7:7d:e4:98:4b:f2:e9:b3:e7:c5:13:22:27:28:f9:c4:
         90:0b:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org