Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e302e302f32342d3234203d3e203138373437.roa
File:                     3231362e3234312e302e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          Dd55GvKnNhiLW9u8xnuXjJ98z4JOmn+9/ha24QhZKx4=
Subject key identifier:   F4:03:31:A2:28:F9:72:6C:1A:5D:9C:77:7F:4A:16:AA:C6:0D:2D:E1
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       4027706C75A4194FD97D69AE4CD6B0DCAA367B40
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e302e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:06 +0000
ROA not before:           Tue 05 Mar 2024 17:54:06 +0000
ROA not after:            Tue 04 Mar 2025 17:59:06 +0000
asID:                     18747
IP address blocks:        216.241.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:27:70:6c:75:a4:19:4f:d9:7d:69:ae:4c:d6:b0:dc:aa:36:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:06 2024 GMT
            Not After : Mar  4 17:59:06 2025 GMT
        Subject: CN=F40331A228F9726C1A5D9C777F4A16AAC60D2DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:63:5d:46:6f:96:be:6f:c5:db:92:b6:22:
                    6b:96:9f:e2:bd:fe:b0:32:f7:4a:63:3f:b2:d9:1c:
                    d7:f5:3a:75:a1:cb:7c:73:b4:c3:90:b2:dc:f8:6f:
                    76:15:b4:c5:e0:d3:59:6f:57:04:33:b4:eb:cc:aa:
                    21:34:3d:18:ec:07:ea:32:bc:2b:9b:41:bf:cb:9c:
                    f6:03:50:97:28:31:a3:22:a1:7e:a3:dc:d1:b1:ab:
                    6a:9f:f7:a9:dc:5a:e3:7f:a2:14:b4:73:9f:41:f6:
                    85:94:d8:e0:44:20:36:df:97:b4:66:41:b3:94:80:
                    35:23:cb:f8:ad:26:d3:86:8e:d3:72:12:23:19:e2:
                    69:38:52:69:00:a5:5d:ef:b1:64:7a:d1:26:50:4e:
                    0f:3c:da:0f:f4:db:ed:5a:1a:55:98:1b:b7:32:c4:
                    ab:5d:b3:1f:f3:13:91:30:c5:ed:7c:c0:07:d5:57:
                    5e:5b:9f:1b:c5:c8:72:de:af:0a:46:21:81:4b:21:
                    3d:f2:85:2c:b0:af:53:b2:52:44:4d:d5:e3:bb:df:
                    00:e9:41:c2:bd:af:97:32:43:04:9a:21:19:db:7f:
                    45:60:44:69:60:4d:44:bb:67:b9:3b:b6:d3:42:fb:
                    43:1a:09:2d:74:da:54:3f:44:7f:64:20:54:57:ae:
                    6c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:31:A2:28:F9:72:6C:1A:5D:9C:77:7F:4A:16:AA:C6:0D:2D:E1
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e302e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:dd:e0:08:db:ca:8f:3f:67:0e:78:4e:48:ff:9d:63:d4:06:
         0e:ad:75:47:5b:76:f1:7f:bf:db:1d:ab:eb:fe:b9:c5:ef:55:
         23:b3:07:2e:68:ba:1e:4b:84:ca:90:02:e3:21:42:24:61:60:
         6e:df:b0:3f:ee:ae:3b:17:e5:6f:28:39:f3:d8:d3:0b:fa:d8:
         4f:30:7f:98:e5:02:37:88:1c:9e:3c:ad:3d:b0:3e:d0:0b:6a:
         6c:d7:5a:42:31:48:b2:1d:2b:79:a7:25:b2:fc:26:95:f1:88:
         12:fb:d0:61:09:f8:1b:09:2a:b0:78:1b:cc:df:a1:06:8b:5b:
         38:c4:29:c4:16:02:f5:fa:eb:75:e9:7c:fe:ae:4c:28:42:8f:
         39:11:39:d9:08:7d:a1:41:30:f7:a7:ad:18:56:01:87:75:c6:
         94:85:ff:7b:5c:b0:1d:6c:cd:f9:c9:cc:f2:88:e5:2d:5a:ef:
         e2:5f:71:94:8a:7c:13:07:4f:4d:fa:0b:4a:e8:29:d1:ed:25:
         ca:de:d7:d0:07:a0:51:47:8b:7d:fc:ab:8e:ce:0e:66:95:16:
         f3:c7:80:06:35:a0:eb:72:99:ba:26:3a:a2:0a:a6:0a:e9:74:
         ff:b3:ba:be:f5:7c:02:8b:d0:2b:0d:1c:46:15:88:c8:55:89:
         d6:c4:c2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:18 2024 by rpki-client on console-fra.rpki-client.org