Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3135322e3230362e302e302f31352d3232203d3e203237373235.roa
File:                     3135322e3230362e302e302f31352d3232203d3e203237373235.roa (raw, json)
Hash identifier:          v+LbiUgJ87GOu52dkijwpcg6ZnzqLGZZALTo3+E1yfc=
Subject key identifier:   B8:3B:40:AA:C0:5E:73:22:05:54:10:C4:BE:C0:7B:40:B4:33:A1:F4
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       364F0FBD6686075B7AD9CC36F893EA28870C9FD8
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3135322e3230362e302e302f31352d3232203d3e203237373235.roa
Signing time:             Tue 05 Mar 2024 18:04:55 +0000
ROA not before:           Tue 05 Mar 2024 17:59:55 +0000
ROA not after:            Tue 04 Mar 2025 18:04:55 +0000
asID:                     27725
IP address blocks:        152.206.0.0/15 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4f:0f:bd:66:86:07:5b:7a:d9:cc:36:f8:93:ea:28:87:0c:9f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Mar  5 17:59:55 2024 GMT
            Not After : Mar  4 18:04:55 2025 GMT
        Subject: CN=B83B40AAC05E7322055410C4BEC07B40B433A1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:25:a4:f9:38:50:8b:ec:f7:01:4e:60:73:
                    16:c4:f5:bc:c9:49:61:bb:ac:15:c8:25:58:ad:d6:
                    22:11:df:41:f0:11:76:60:24:13:ee:f4:26:f0:d2:
                    8e:59:7a:d5:fc:94:e7:2a:3f:05:1d:44:f3:88:d6:
                    23:dc:aa:02:c6:5b:cb:ca:e8:61:a7:63:c5:1f:42:
                    ce:ff:98:b8:6d:f3:e9:58:d5:e7:bd:d3:55:5b:0b:
                    e2:5e:75:c4:1d:ff:69:85:a6:be:95:ce:e0:0a:92:
                    dd:2b:07:c7:61:e1:27:ba:5f:d4:aa:4e:46:76:89:
                    36:c2:5b:af:2e:79:fe:a0:97:a3:02:7b:18:d9:8a:
                    76:10:48:52:0f:74:b3:50:c5:d6:8b:dd:be:42:fc:
                    1a:9b:43:6d:de:3e:26:ca:10:ce:4c:44:08:15:7d:
                    96:4c:c5:60:77:c2:9f:dc:13:1f:cc:d0:45:46:63:
                    8e:b0:00:4f:4d:fd:39:33:d7:7e:69:62:d7:64:3f:
                    6f:a6:ef:8c:5c:c4:61:0c:6a:8e:90:8d:1c:3a:18:
                    65:8d:0f:3b:12:51:6f:ff:f0:ac:0c:de:a0:96:79:
                    fd:94:d2:44:6b:5c:2c:9c:20:ba:47:e2:bf:6f:31:
                    d4:cd:b8:0f:8b:62:2a:ff:9e:6e:b1:4d:43:53:94:
                    ad:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3B:40:AA:C0:5E:73:22:05:54:10:C4:BE:C0:7B:40:B4:33:A1:F4
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3135322e3230362e302e302f31352d3232203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.206.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         ac:c0:dc:99:3c:e3:79:f2:eb:7d:71:2e:90:99:fd:c9:d6:ba:
         42:39:82:c0:a1:c2:f1:38:ad:12:0b:2f:c7:eb:3e:a5:a3:55:
         58:b4:b2:0d:fe:8a:bc:68:c6:59:df:0f:f8:62:6c:92:fa:a1:
         18:d0:97:16:d9:e8:20:52:37:48:11:8b:46:db:b9:5c:03:62:
         b7:99:65:55:39:a1:e2:b6:e5:bc:f6:44:3c:77:3c:ed:ef:36:
         01:7d:85:ad:ad:e0:29:04:e2:e9:34:90:4d:e9:cd:29:7c:49:
         f5:d0:27:91:cb:49:fa:31:c1:38:2e:ae:8b:b7:35:f7:41:8d:
         fa:73:ee:39:21:09:19:ba:9b:a0:8f:3f:18:29:72:20:d2:86:
         4c:aa:3d:ec:e4:0d:2c:07:69:53:33:69:25:72:75:5f:8e:5d:
         2d:8e:8f:6b:01:86:9b:f3:46:0f:4a:30:e3:98:01:67:aa:c8:
         27:88:6b:89:fe:88:83:74:91:11:df:e0:85:eb:78:7c:cc:94:
         93:ef:c1:4e:dc:0e:0b:c8:78:69:9b:f4:86:57:ba:66:06:a0:
         ef:1e:0b:98:0b:26:e3:a2:96:5a:69:9f:5d:2c:ff:6d:8c:91:
         c2:28:ef:76:62:1b:44:ce:41:ab:3b:dd:2b:91:6a:af:12:81:
         8d:d8:bf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org