Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e32392e302f32342d3234203d3e203138373437.roa
File:                     3231362e3234312e32392e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          XcJJeAiUn5mUV+TZkG+IWHOggBKiwtpFl5DjbFqNsPI=
Subject key identifier:   9B:3B:FC:35:1A:B8:CF:1E:23:5D:CD:FD:98:BE:D7:AD:BE:E1:DD:F6
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       467178D7FE76950AFE44737A81F60E763064A536
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e32392e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:58:58 +0000
ROA not before:           Tue 05 Mar 2024 17:53:58 +0000
ROA not after:            Tue 04 Mar 2025 17:58:58 +0000
asID:                     18747
IP address blocks:        216.241.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:71:78:d7:fe:76:95:0a:fe:44:73:7a:81:f6:0e:76:30:64:a5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:53:58 2024 GMT
            Not After : Mar  4 17:58:58 2025 GMT
        Subject: CN=9B3BFC351AB8CF1E235DCDFD98BED7ADBEE1DDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:22:18:96:f3:b7:7b:04:6b:88:f1:44:d9:
                    9c:4c:da:32:98:e4:ea:03:1b:47:5d:1c:75:f1:33:
                    fa:49:05:16:69:2d:26:e5:24:6a:00:55:13:73:b1:
                    48:07:ac:56:cb:14:64:cb:18:73:f7:dc:96:c7:ac:
                    b2:5f:27:ea:ea:6f:04:a6:b8:0c:89:2d:5c:1f:94:
                    75:a0:30:4b:14:70:a8:25:59:76:ec:74:4f:90:48:
                    fd:26:54:63:8a:f5:6c:aa:40:fd:db:1c:36:cc:6d:
                    48:b4:97:e6:54:9e:21:24:15:94:80:6a:b6:05:16:
                    2e:9a:eb:95:a1:77:cb:60:1f:06:08:64:03:f7:9d:
                    dc:3e:f1:ba:a5:d5:d1:e3:ab:4a:12:d2:67:43:e0:
                    39:64:2d:13:b5:9d:cd:bb:dd:9f:ff:8d:6d:dc:8f:
                    ac:1c:15:28:83:98:12:b3:bb:64:42:01:de:af:6d:
                    55:21:7f:52:7e:ca:b0:de:25:24:4e:1f:c2:b3:d8:
                    8d:78:98:2b:18:87:1d:9a:1b:15:3b:d8:f8:ed:3d:
                    08:99:83:6b:0e:bb:33:f9:74:c2:13:1a:ff:c2:52:
                    55:bf:43:42:22:9a:5a:87:7b:c1:d8:30:c3:20:88:
                    29:79:b2:a9:d5:c0:9c:f5:87:a9:68:2d:da:68:0a:
                    33:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3B:FC:35:1A:B8:CF:1E:23:5D:CD:FD:98:BE:D7:AD:BE:E1:DD:F6
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e32392e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:6f:df:34:6c:7a:85:2a:fa:32:49:dc:5d:04:72:68:8b:18:
         d4:54:15:82:b8:4d:2d:18:92:9e:38:a5:a1:48:f2:c1:77:27:
         8c:70:73:4f:e5:6d:97:d0:6a:7c:16:28:08:c2:4e:1c:06:73:
         ce:3f:b3:c0:72:20:e5:3c:c0:af:c8:da:09:27:41:c9:55:b0:
         72:1c:6c:57:31:78:e0:0c:63:44:fe:dc:54:a3:96:98:8f:5d:
         f6:1c:96:f6:a1:5a:83:cb:22:64:8c:25:60:ee:6a:61:43:92:
         56:8d:c5:ee:eb:3d:1b:d1:15:09:ef:58:81:09:85:34:3e:cf:
         d9:48:07:fa:db:2f:57:9f:69:61:da:c5:36:af:59:00:18:fb:
         7b:59:b9:57:96:0d:b3:b0:a6:e9:82:ae:88:8c:fb:f5:c1:37:
         4c:00:07:8d:03:02:f4:c3:8f:74:95:e1:23:28:0f:b5:5d:bc:
         36:a9:d7:b4:39:84:99:2c:e3:1e:ca:9a:42:2e:02:16:62:3e:
         78:1d:95:8e:84:7c:14:e9:8c:1e:d9:df:d4:1a:9b:66:09:88:
         32:5b:92:65:c9:90:b7:64:c5:bb:36:cc:51:87:f4:5b:30:2d:
         a4:0a:b3:2b:e8:96:16:5d:64:41:48:eb:23:5c:d3:05:6d:08:
         4d:02:57:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:30 2024 by rpki-client on console-ams.rpki-client.org