Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234322e302f32342d3234203d3e20323632393331.roa
File:                     3139312e3130322e3234322e302f32342d3234203d3e20323632393331.roa (raw, json)
Hash identifier:          86Vk1LR5f97FCPb7w9XwfwJDIJdLix1+fhtSEIDovMQ=
Subject key identifier:   AF:BC:1C:70:28:00:97:E1:17:C5:F8:63:AD:6C:EE:D5:6A:A7:29:2C
Certificate issuer:       /CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
Certificate serial:       3BEC0C08B055521C3AFE3F5A51C7BCF9D3CCFDB7
Authority key identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234322e302f32342d3234203d3e20323632393331.roa
Signing time:             Tue 05 Mar 2024 18:20:59 +0000
ROA not before:           Tue 05 Mar 2024 18:15:59 +0000
ROA not after:            Tue 04 Mar 2025 18:20:59 +0000
asID:                     262931
IP address blocks:        191.102.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ec:0c:08:b0:55:52:1c:3a:fe:3f:5a:51:c7:bc:f9:d3:cc:fd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
        Validity
            Not Before: Mar  5 18:15:59 2024 GMT
            Not After : Mar  4 18:20:59 2025 GMT
        Subject: CN=AFBC1C70280097E117C5F863AD6CEED56AA7292C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:ea:42:32:c3:3b:e0:54:f2:81:09:2b:45:
                    19:63:2c:c2:7b:de:78:fa:5f:f2:9b:6b:80:f1:07:
                    e4:11:31:18:a2:ae:68:52:aa:71:02:9a:6d:7f:90:
                    3b:16:51:03:be:c6:d2:34:85:6d:8a:43:02:2b:6f:
                    8e:d7:77:3c:cf:bb:42:d6:d3:ce:3a:66:f1:db:64:
                    d7:5b:28:3f:10:8f:dc:91:fb:07:c6:75:6f:e0:36:
                    60:bd:39:26:a3:46:a0:60:d2:c2:53:94:ab:cd:4c:
                    4b:1f:63:1a:d2:9e:f7:cc:bd:70:60:39:dc:dc:20:
                    8b:0d:1a:69:53:9b:10:6a:35:5e:d8:c0:14:06:c1:
                    06:f6:16:f0:d7:01:09:98:5a:f3:34:07:98:a4:a0:
                    ab:07:23:fe:ac:f4:08:73:b9:d2:a6:44:6a:4e:f9:
                    7c:3c:09:a9:aa:8b:f4:fe:72:9f:55:b4:d2:b8:0b:
                    b1:81:88:36:4e:04:d4:a3:9e:ab:a2:81:cf:ba:0d:
                    c7:0f:2b:bf:c1:bb:75:af:9f:73:5c:18:af:c9:62:
                    83:1b:13:e3:8a:1c:fe:29:d6:c0:e6:50:02:de:9a:
                    69:04:18:d4:f3:5c:18:f2:a8:b6:62:a1:72:b2:df:
                    44:04:25:4a:25:17:bb:d1:48:ba:fe:5e:1d:db:b8:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BC:1C:70:28:00:97:E1:17:C5:F8:63:AD:6C:EE:D5:6A:A7:29:2C
            X509v3 Authority Key Identifier:
                keyid:A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234322e302f32342d3234203d3e20323632393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:c3:b8:1a:33:8d:49:1d:8e:22:d2:6c:6a:d3:75:2f:94:24:
         f7:ee:d9:cc:ec:44:9f:33:2f:eb:74:06:e8:5e:c8:70:eb:c4:
         31:98:26:27:f0:56:e0:f6:75:45:fb:50:f2:66:cb:ee:4c:9a:
         50:23:cf:d9:e8:8e:70:7a:58:3f:c3:6e:91:c0:d5:50:c0:7a:
         a5:42:9a:f2:2d:67:5d:e3:06:0c:dc:4c:9b:6f:af:63:40:2a:
         d0:a9:cb:a1:d6:46:9a:d9:d0:ea:8a:1d:5c:c4:92:29:ba:bf:
         7f:0c:8f:2f:c2:e1:df:59:cf:50:dd:8c:69:9f:b0:2b:af:92:
         a5:45:37:b1:9d:79:20:ed:63:14:0c:31:29:7e:a9:5e:a2:a0:
         12:c0:20:69:24:a2:af:b0:ba:37:24:6a:46:fb:ce:0e:ee:96:
         ba:dc:ef:aa:84:b3:33:b3:13:4c:8c:74:7e:c9:e5:2a:76:9a:
         56:f4:c1:a5:d8:d5:ab:e9:bd:a2:66:c9:d8:7a:f1:5e:45:ad:
         c9:b4:c6:e3:ff:ca:40:d2:15:b5:03:9a:7c:a6:00:f9:01:94:
         4d:4e:12:84:7b:26:10:c3:bf:c2:8a:0c:e0:b0:38:0d:97:2e:
         58:40:23:50:12:57:c2:d7:74:35:a4:87:25:91:31:53:72:4c:
         73:ad:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org