Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3235312e302f32342d3234203d3e20323634373031.roa
File:                     3136382e3233322e3235312e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier:          +rZQCEKgLNzCIMR0+a04OXH5RAC3JCvUqvppavxLQSw=
Subject key identifier:   EC:83:DF:3D:37:A1:81:AC:70:CE:2D:0B:B8:BE:ED:D9:E1:D1:DB:67
Certificate issuer:       /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial:       1272EF26FA9D2DE2A96FCE65CC6440C77DDE7086
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3235312e302f32342d3234203d3e20323634373031.roa
Signing time:             Tue 05 Mar 2024 17:59:07 +0000
ROA not before:           Tue 05 Mar 2024 17:54:07 +0000
ROA not after:            Tue 04 Mar 2025 17:59:07 +0000
asID:                     264701
IP address blocks:        168.232.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:72:ef:26:fa:9d:2d:e2:a9:6f:ce:65:cc:64:40:c7:7d:de:70:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
        Validity
            Not Before: Mar  5 17:54:07 2024 GMT
            Not After : Mar  4 17:59:07 2025 GMT
        Subject: CN=EC83DF3D37A181AC70CE2D0BB8BEEDD9E1D1DB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:b3:11:93:77:95:b9:8f:2a:5f:16:ef:5a:
                    ba:88:1a:3b:1e:a5:8c:cc:e2:2a:d1:e1:16:ba:28:
                    d6:2c:1a:d0:80:f0:c0:5f:de:6f:bc:1d:76:c1:57:
                    2d:16:b8:14:f6:80:93:85:98:83:5f:70:98:38:d2:
                    32:c6:7c:90:b4:ef:f3:db:62:b5:f8:49:66:95:bc:
                    2d:8c:55:38:0f:0a:83:19:a5:58:04:ee:35:ec:b0:
                    d3:d3:8c:95:82:99:c1:8a:7d:4b:c0:90:a6:2d:54:
                    4c:a7:83:2a:40:ad:8a:8c:6e:24:99:bd:98:97:1a:
                    a2:2b:4b:38:6b:7f:67:00:e4:72:f4:c8:0d:0f:15:
                    36:5b:be:c9:0d:52:89:4c:0a:b9:49:17:c4:90:37:
                    77:eb:80:c2:c7:f1:4a:37:0c:47:40:e8:2e:a4:30:
                    57:42:d3:d6:ef:4c:94:08:ce:58:e0:4c:f9:3e:84:
                    06:65:ef:9c:e0:46:42:d7:ac:7d:35:ba:8d:d6:6f:
                    01:93:cd:7f:c8:9d:0e:6b:1c:d4:76:9d:69:98:04:
                    44:31:e8:f6:5e:d3:37:a6:3f:4e:fa:90:c2:52:22:
                    92:25:22:4f:25:81:72:bd:f7:81:5c:8a:12:98:22:
                    1e:c7:df:ea:db:27:4b:f8:65:99:d6:46:ac:2d:47:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:83:DF:3D:37:A1:81:AC:70:CE:2D:0B:B8:BE:ED:D9:E1:D1:DB:67
            X509v3 Authority Key Identifier:
                keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3235312e302f32342d3234203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:25:e2:47:61:05:17:12:a8:24:59:f2:95:d3:24:3b:25:73:
         b2:7e:15:9f:be:a0:19:e2:52:84:51:a5:e8:02:05:2d:09:93:
         c4:64:d0:e1:75:4c:a0:21:ca:13:3f:5e:9f:3d:aa:49:ad:32:
         14:bf:04:e9:73:4b:f8:a5:15:36:10:74:95:b7:3e:64:18:4b:
         d0:21:24:53:b9:2a:9b:7c:6e:0c:cc:c7:57:7d:b5:e2:d6:7f:
         cf:db:b1:ae:ce:15:6b:2f:7d:34:31:e6:64:2b:c1:df:36:0c:
         12:37:67:69:62:ce:68:44:fe:b6:35:1f:cd:c5:12:06:4e:b8:
         f1:60:fe:ca:90:cd:1d:0f:71:6e:9b:e8:42:f3:c8:e3:90:31:
         ad:a1:f3:9f:fb:ca:1a:06:fd:38:65:e0:00:58:a1:63:62:ad:
         0d:d1:be:62:ef:54:7e:7e:61:4d:f2:82:fa:2c:cf:b1:77:ab:
         bc:52:0a:dd:cf:41:c0:64:a8:5c:f0:76:b9:ca:f7:e3:e9:05:
         5a:75:37:a7:dc:a9:92:40:fc:a1:8a:05:db:f8:36:25:43:82:
         cb:b1:11:d3:20:e5:e3:23:32:8e:38:c5:f6:21:b1:44:e9:28:
         f6:ea:61:3f:02:e4:72:9d:be:a0:ca:c2:a1:47:87:50:de:68:
         ef:11:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:11:29 2024 by rpki-client on console-ams.rpki-client.org