Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3234203d3e203131313732.roa
File:                     3134332e3230322e3135362e302f32322d3234203d3e203131313732.roa (raw, json)
Hash identifier:          9E9UF7n/HtFBksRCxEbwkhjJSIHdjHudWVRbFFw1P68=
Subject key identifier:   65:AE:0D:9F:20:7D:A9:D8:E3:E8:9C:0E:61:A4:08:DE:7A:9E:EE:F6
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       2C4CB07B74C7A439D56FC5D377245B25C48E68E5
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:36 +0000
ROA not before:           Tue 05 Mar 2024 17:49:36 +0000
ROA not after:            Tue 04 Mar 2025 17:54:36 +0000
asID:                     11172
IP address blocks:        143.202.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4c:b0:7b:74:c7:a4:39:d5:6f:c5:d3:77:24:5b:25:c4:8e:68:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:36 2024 GMT
            Not After : Mar  4 17:54:36 2025 GMT
        Subject: CN=65AE0D9F207DA9D8E3E89C0E61A408DE7A9EEEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:da:4b:6d:2b:f7:9c:f2:e9:b2:c7:34:1d:
                    f8:a5:ec:6d:b6:54:89:f4:8f:90:96:ec:03:20:ff:
                    55:01:c0:83:80:ac:d7:a9:9e:4f:1c:aa:09:44:20:
                    99:a6:7b:96:a2:d8:22:a0:2a:ad:a6:53:ab:e8:ba:
                    88:d9:7d:2a:01:06:7d:f0:50:57:48:59:78:71:85:
                    b5:4f:9f:ab:99:31:26:f6:7b:4a:1f:15:a5:54:bd:
                    80:b1:d2:33:ed:bc:63:87:48:47:a2:53:c4:89:73:
                    bb:09:d2:c5:cc:f8:f7:1f:7a:51:1e:39:ff:f2:ef:
                    7a:48:13:1e:c1:8f:18:7c:ba:60:7b:59:fc:6e:cb:
                    4b:2b:96:b1:4a:d4:ef:d8:fb:01:4c:cc:4b:4e:5e:
                    27:55:cb:df:54:f2:8d:c9:66:e6:49:d6:9c:d3:52:
                    bf:30:b8:9c:a2:6b:8c:98:05:c9:35:7e:38:45:b7:
                    84:34:b7:6e:5c:04:9a:7a:14:2b:79:01:8a:68:99:
                    e9:7c:90:ce:ca:84:c7:3e:63:fd:a9:d9:a1:51:90:
                    a6:d3:f7:8d:28:25:b8:37:6b:0e:d2:58:16:cf:4d:
                    b3:b0:0a:64:15:9f:ea:30:5b:a6:10:7e:ba:65:f8:
                    4f:6f:ba:4c:62:9b:15:db:0f:2d:ce:e3:93:e6:4b:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AE:0D:9F:20:7D:A9:D8:E3:E8:9C:0E:61:A4:08:DE:7A:9E:EE:F6
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:a4:c9:57:4e:32:d0:0b:d3:bd:48:d5:06:0f:8d:d8:9f:
         5f:42:11:3f:95:39:ca:09:08:c2:e1:e2:d6:ff:3f:66:a7:42:
         59:03:ec:22:fe:10:67:f3:b4:b5:28:80:2b:43:b6:73:cb:0f:
         b8:da:2b:f7:b0:c8:f2:d5:67:18:eb:f6:89:42:37:a9:aa:f6:
         82:df:54:bd:c2:40:df:71:1a:00:6f:24:8e:17:4c:53:a4:55:
         57:a3:50:50:ce:15:0a:09:bb:a3:dd:9e:52:47:4c:ba:10:a6:
         bb:32:df:e4:b7:b9:a8:37:c3:51:d0:77:ca:cd:6b:08:60:6b:
         ad:85:ac:38:6f:69:4b:c2:16:82:1d:18:f3:e9:4a:43:88:9e:
         89:c8:6b:f4:21:a6:7e:76:27:17:8b:b4:a5:a8:26:0b:f6:ea:
         36:d0:9f:d6:9c:39:ab:48:91:ab:a3:20:bc:d9:5e:ea:53:48:
         6b:a7:76:05:b9:7e:56:d6:a7:37:d3:20:05:13:2f:9e:8c:50:
         44:2f:d2:08:72:97:ca:da:55:ec:00:0b:1b:8a:e9:b4:ba:fe:
         79:f6:3b:25:f0:f9:10:2b:23:77:da:05:03:6c:df:28:c8:3b:
         a3:a1:ab:4b:92:bf:0f:f5:0f:17:b7:fc:bd:7b:10:27:0a:33:
         6f:18:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org