Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e32362e302f32342d3234203d3e203138373437.roa
File:                     3231362e3234312e32362e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          jHaINwpt65Xa6+13EfQCnNND/1JV1Fr73Cmfkfr+iRw=
Subject key identifier:   BF:AF:64:DD:13:20:AE:45:37:A9:42:CE:9A:3E:DC:02:79:8F:23:E0
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       76260C5917ABA53F324DF8C9B72A0369C8929EC7
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e32362e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:08 +0000
ROA not before:           Tue 05 Mar 2024 17:54:08 +0000
ROA not after:            Tue 04 Mar 2025 17:59:08 +0000
asID:                     18747
IP address blocks:        216.241.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:26:0c:59:17:ab:a5:3f:32:4d:f8:c9:b7:2a:03:69:c8:92:9e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:08 2024 GMT
            Not After : Mar  4 17:59:08 2025 GMT
        Subject: CN=BFAF64DD1320AE4537A942CE9A3EDC02798F23E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:61:32:44:9b:9b:35:af:70:4b:d0:0b:87:
                    36:81:1b:57:05:b5:d6:cb:58:8f:00:a2:f9:71:bf:
                    e9:b2:25:77:eb:dd:51:05:aa:89:99:07:b5:76:6d:
                    68:33:87:99:3e:1f:6e:b1:7a:e0:45:34:a7:08:71:
                    e5:c2:86:21:5e:f9:5a:68:5d:47:4b:2f:3a:4c:70:
                    85:44:64:ee:d0:55:8c:62:81:f7:73:a0:08:36:09:
                    3a:6e:96:97:d1:a0:7f:7b:26:42:de:e8:12:d1:b7:
                    5f:38:33:72:75:20:79:53:97:97:39:f0:33:3c:d4:
                    32:a1:3a:dd:4c:96:ee:b6:0d:50:8a:ee:f1:67:b7:
                    01:b3:6d:27:ae:0d:5c:71:af:39:1c:45:06:ed:96:
                    d6:cb:ef:a2:16:65:62:40:4c:bf:b8:1c:cb:49:f6:
                    cc:d3:eb:4a:f7:93:e1:a9:1c:11:b9:56:1c:b5:9d:
                    6a:8a:69:d3:34:84:15:ef:08:72:65:eb:c8:c5:49:
                    bb:b2:d5:86:06:08:64:b5:26:0a:8e:be:08:6a:ab:
                    bf:19:57:e7:49:88:1b:6d:fc:e9:44:53:bc:fb:de:
                    5a:ad:16:6e:1b:b5:f8:aa:60:5d:44:76:d4:20:b7:
                    fb:d7:1c:c8:d0:d7:2d:88:be:31:88:47:22:74:04:
                    ef:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AF:64:DD:13:20:AE:45:37:A9:42:CE:9A:3E:DC:02:79:8F:23:E0
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e32362e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:da:b6:e3:2c:81:65:15:98:37:10:a5:8f:a1:60:00:e0:c0:
         75:c2:a4:92:e6:56:f2:9c:1f:67:cd:b9:2d:8b:d4:3c:4b:67:
         a9:32:de:79:8f:e4:6c:26:18:31:14:7c:88:42:30:31:3e:1e:
         2a:f4:fe:8b:77:62:f3:bf:8e:a0:8d:cf:88:5f:76:13:ef:6e:
         7e:6d:66:d2:cc:f7:1e:d1:13:f0:0f:fe:0a:3b:06:d8:2b:3c:
         57:ad:8d:1c:0c:95:da:fa:e6:6c:29:0d:87:f8:c4:24:1a:c0:
         27:ac:9b:75:c3:4d:0c:71:22:b7:f3:f2:4e:d3:a3:e3:e2:30:
         5c:bf:9b:81:23:c5:a2:69:93:ab:aa:51:08:d2:c0:6b:a7:ed:
         b2:fa:b2:02:c5:9d:29:cd:a7:b7:2d:6a:81:b7:0f:05:d9:af:
         7d:e3:ed:02:9c:b7:95:5b:5b:c7:b5:ef:91:ac:08:41:1f:3a:
         78:4b:72:20:de:cb:26:3a:1f:3d:e6:59:15:96:04:56:29:bc:
         de:fa:91:a6:ae:b4:7c:9b:16:3a:94:f3:fa:7e:2b:3b:d1:fc:
         80:86:3e:d0:c3:cb:17:fa:78:b9:81:6b:04:ac:6b:79:c8:b0:
         09:fe:b9:a1:88:cb:79:06:68:60:d1:c9:c8:d0:21:f4:1f:ba:
         8e:c0:43:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:30 2024 by rpki-client on console-ams.rpki-client.org