Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/3138392e38352e3130302e302f32322d3234203d3e20323730313130.roa
File:                     3138392e38352e3130302e302f32322d3234203d3e20323730313130.roa (raw, json)
Hash identifier:          DlPVejbLw0z6jJMdBhk/Os6c+amXUgCX/MQGzquLq1I=
Subject key identifier:   6F:AD:63:3C:0B:67:4F:BD:C0:D8:28:CE:21:54:1A:B4:09:92:A5:1D
Certificate issuer:       /CN=6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443
Certificate serial:       1B0B931806D46AC66B89AB77551A5BF859401D90
Authority key identifier: 6A:87:DF:E4:B3:8F:32:D9:EB:47:89:BB:7B:E2:DA:27:A3:98:84:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/3138392e38352e3130302e302f32322d3234203d3e20323730313130.roa
Signing time:             Tue 05 Mar 2024 18:21:48 +0000
ROA not before:           Tue 05 Mar 2024 18:16:48 +0000
ROA not after:            Tue 04 Mar 2025 18:21:48 +0000
asID:                     270110
IP address blocks:        189.85.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0b:93:18:06:d4:6a:c6:6b:89:ab:77:55:1a:5b:f8:59:40:1d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443
        Validity
            Not Before: Mar  5 18:16:48 2024 GMT
            Not After : Mar  4 18:21:48 2025 GMT
        Subject: CN=6FAD633C0B674FBDC0D828CE21541AB40992A51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:61:7f:56:32:17:a9:7c:f8:1d:de:4c:30:bb:
                    d1:a8:b6:17:b8:4c:35:e6:35:dc:cf:2c:be:6f:9d:
                    6a:90:2f:0b:3a:bd:c0:98:c0:0a:b1:05:91:70:cd:
                    6f:7b:a7:a5:7b:08:60:93:ec:52:8d:7a:1a:e0:bf:
                    43:ee:d3:cb:9f:07:0a:f5:8a:2f:c0:7d:cd:66:da:
                    cd:97:fd:c2:37:ed:bb:b9:de:9a:99:06:2f:63:bc:
                    95:1c:1c:85:ab:75:65:53:a6:89:84:3b:46:d1:fd:
                    6a:61:1b:bd:9c:37:41:df:f4:8f:3f:10:a6:dc:bd:
                    d6:db:8a:98:c9:28:48:25:52:7c:13:09:a3:5f:db:
                    d2:28:73:e2:c3:f5:89:99:c4:f4:6c:ed:7b:31:73:
                    f7:0d:07:3f:d0:f6:e5:60:a3:a1:3f:5e:01:2c:66:
                    cd:8a:54:ae:4b:e6:65:b3:21:4f:e7:6b:9b:3f:73:
                    c5:b1:a5:25:39:ce:f5:f6:82:08:f0:ee:8d:f1:c1:
                    81:db:c2:5c:a0:db:aa:05:24:54:63:63:84:e1:bb:
                    7d:2e:1c:93:16:43:92:7b:98:f1:bb:74:d1:38:61:
                    46:08:74:09:05:ba:e9:8a:ba:ac:36:7d:8a:ea:5b:
                    89:5b:79:23:64:21:66:2a:79:58:3c:5e:ab:a3:a7:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AD:63:3C:0B:67:4F:BD:C0:D8:28:CE:21:54:1A:B4:09:92:A5:1D
            X509v3 Authority Key Identifier:
                keyid:6A:87:DF:E4:B3:8F:32:D9:EB:47:89:BB:7B:E2:DA:27:A3:98:84:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/3138392e38352e3130302e302f32322d3234203d3e20323730313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:6e:96:29:81:bd:da:96:05:6c:28:fb:33:41:18:a2:9c:31:
         83:6d:11:66:fb:14:48:e0:b1:36:e4:33:a9:0f:6a:31:1c:be:
         33:92:15:a7:c4:61:f2:14:f8:15:66:b8:cc:24:1e:97:e6:9d:
         11:24:31:c9:52:2c:6d:33:ea:aa:ef:fc:8d:0f:74:76:2d:d2:
         dc:5f:a3:2a:e7:3c:38:79:0d:3e:92:ca:e8:70:1b:b6:71:7b:
         50:78:41:f4:df:d3:a6:f9:3f:7b:e0:b3:f9:bc:0d:05:6d:b2:
         7e:a1:15:a0:51:f1:ce:c1:63:cb:8c:c1:67:ea:5d:5b:00:a9:
         9e:b5:60:2d:bc:d5:95:bd:74:09:66:76:76:f6:d3:6b:08:20:
         29:fd:19:99:35:2f:a6:46:de:fb:58:ec:4d:49:8e:ad:a0:7a:
         b2:e8:e0:34:98:ac:a7:47:50:65:52:72:2f:12:61:58:8e:bc:
         41:ad:f9:d9:1d:43:28:5b:7b:42:f6:d9:de:d8:8a:ef:b4:64:
         b4:a9:4f:70:25:f2:91:f7:ad:41:04:e3:32:ba:72:d8:0f:e7:
         ea:22:b4:98:1b:79:24:48:77:44:23:48:52:55:d1:3c:9c:ab:
         33:0e:16:4f:48:6a:0a:e9:df:c7:c6:2d:92:e5:6c:cc:54:76:
         40:3d:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org