Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234332e302f32342d3234203d3e20323632393331.roa
File:                     3139312e3130322e3234332e302f32342d3234203d3e20323632393331.roa (raw, json)
Hash identifier:          V0hUfHVIwgm//1lkCS2loVMERBbwHVcw5vYaZDWU4gM=
Subject key identifier:   F7:DA:99:46:33:99:DF:3B:14:B0:D7:CF:29:10:E9:50:37:BD:D9:BB
Certificate issuer:       /CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
Certificate serial:       02BB7B5D0ED23DD28221D552BCF6C6738E48F271
Authority key identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234332e302f32342d3234203d3e20323632393331.roa
Signing time:             Tue 05 Mar 2024 18:20:59 +0000
ROA not before:           Tue 05 Mar 2024 18:15:59 +0000
ROA not after:            Tue 04 Mar 2025 18:20:59 +0000
asID:                     262931
IP address blocks:        191.102.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bb:7b:5d:0e:d2:3d:d2:82:21:d5:52:bc:f6:c6:73:8e:48:f2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
        Validity
            Not Before: Mar  5 18:15:59 2024 GMT
            Not After : Mar  4 18:20:59 2025 GMT
        Subject: CN=F7DA99463399DF3B14B0D7CF2910E95037BDD9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:92:84:f9:b4:1c:7a:bb:c8:ba:be:6a:fc:
                    6b:96:b8:62:06:af:58:7c:8f:4d:01:83:de:59:02:
                    8b:74:71:ec:a5:1f:44:dd:a6:ae:05:fb:98:da:04:
                    ad:d8:fe:c3:2a:3f:3a:5d:4b:88:11:22:11:ae:ee:
                    5f:27:ae:41:1f:54:ea:0c:0c:5f:ea:4b:30:a7:f2:
                    ee:9f:fd:3a:e0:8c:c3:45:d6:8c:b1:67:67:a4:e7:
                    7e:c7:14:e5:ea:18:c0:1a:e1:77:dd:e4:28:a3:f9:
                    99:99:9b:7b:ba:da:0e:bd:01:25:c8:27:e7:11:d0:
                    06:f0:65:14:06:51:dd:ac:79:a9:98:31:6a:cc:17:
                    b5:a4:28:87:24:b2:d7:3d:59:76:a0:6c:fb:d2:70:
                    8b:87:86:47:24:73:7b:2c:ee:e2:93:61:2a:5a:12:
                    85:02:10:2a:9d:eb:17:d2:0e:55:41:7d:08:00:ae:
                    4f:00:4f:9e:13:b6:ce:18:7b:71:4e:ae:70:02:db:
                    9c:ce:50:7f:cf:68:f9:83:78:0a:ee:36:eb:c3:c9:
                    30:b9:73:ec:3c:dc:53:ab:f2:b0:f9:d4:0a:cf:8e:
                    0d:a1:a5:80:00:75:f7:fc:76:cb:c6:c8:a0:bb:fc:
                    51:8f:7e:3b:a9:13:54:ce:bc:a5:2b:cb:9f:71:18:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DA:99:46:33:99:DF:3B:14:B0:D7:CF:29:10:E9:50:37:BD:D9:BB
            X509v3 Authority Key Identifier:
                keyid:A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234332e302f32342d3234203d3e20323632393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:94:08:0f:02:00:1b:db:dd:4e:56:2e:3e:e5:d4:42:a1:59:
         b1:ca:af:fc:47:3b:fc:b6:fa:56:e8:a1:df:99:af:2c:e2:e4:
         6e:5a:f6:2b:19:5d:1a:51:53:e2:4c:7b:f6:4f:36:9f:f8:7a:
         af:d5:73:10:6b:64:b2:70:2c:0a:73:48:9c:8b:5f:ed:91:78:
         c2:3c:a4:a6:cc:d7:f8:c4:ce:93:88:e6:f5:47:5a:8b:a3:dd:
         34:88:0c:ba:e3:21:2f:30:44:56:46:f6:65:5c:42:f6:0d:f1:
         aa:ba:c5:69:d3:85:77:13:42:d6:1d:d3:1c:0a:45:72:8f:f5:
         7c:2f:0d:8f:fc:0a:9d:3e:aa:9c:7c:58:b7:46:8c:24:09:a7:
         79:b0:c1:2d:5c:71:b3:ff:a0:d8:91:a8:cb:47:44:e4:e8:91:
         fb:29:fd:61:d3:c7:75:4b:8f:33:5b:3a:84:2e:08:c4:8d:7f:
         0b:d4:88:1c:36:cb:a3:38:ba:a8:c9:52:f8:01:f1:f4:b2:fe:
         09:73:97:bb:92:6b:21:8d:65:59:eb:62:6d:43:22:2e:a8:39:
         17:4b:43:e6:fd:c0:87:5c:fd:27:cc:cb:19:8c:53:fc:ca:02:
         09:3c:44:26:ee:ef:5e:77:28:b5:12:c4:ea:26:d3:2e:32:4b:
         33:f3:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:23 2024 by rpki-client on console-fra.rpki-client.org