Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e302e302f31362d3234203d3e2036353033.roa
File:                     3138392e3230362e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          tner/bYY2Bfd1+H0NLmQPs9hcnXWq6Sfy/NGJd4e3zk=
Subject key identifier:   57:FF:D1:2F:E7:25:61:5A:6C:73:7F:C7:58:09:7F:86:9B:D2:58:5A
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       444F087124D615658342A6E0BA40E8438A3D1C8B
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:33 +0000
ROA not before:           Tue 05 Mar 2024 17:49:33 +0000
ROA not after:            Tue 04 Mar 2025 17:54:33 +0000
asID:                     6503
IP address blocks:        189.206.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4f:08:71:24:d6:15:65:83:42:a6:e0:ba:40:e8:43:8a:3d:1c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:33 2024 GMT
            Not After : Mar  4 17:54:33 2025 GMT
        Subject: CN=57FFD12FE725615A6C737FC758097F869BD2585A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:df:f4:84:e1:f8:09:b5:dd:fa:b3:d2:cd:0e:
                    90:91:9f:f2:9a:c4:34:22:58:f7:f9:a0:d5:25:0f:
                    62:65:b1:84:91:fc:24:5f:85:3f:c6:bc:18:eb:6a:
                    be:6d:a5:58:fb:7f:50:85:b2:31:21:96:e8:0d:1c:
                    dd:ae:16:52:fe:0b:8a:36:b4:2a:d3:87:be:fc:1b:
                    90:f7:c6:95:48:f4:42:ac:01:d5:6b:6f:b5:13:5c:
                    10:27:6b:1e:17:26:48:8f:f5:99:c5:78:f1:54:58:
                    02:1d:9e:8f:47:68:f5:e3:d4:4a:de:b8:7e:5a:f1:
                    8e:92:25:99:dd:21:35:f0:2e:ae:c2:39:1f:05:d9:
                    7a:20:37:c3:eb:0c:52:6e:f7:a1:22:69:ca:97:02:
                    4a:27:9d:88:fd:4b:a8:06:18:9a:18:e9:2a:af:4f:
                    a0:b6:32:b2:e1:81:97:4e:ac:6c:68:07:61:9c:d1:
                    a5:5c:92:89:67:07:2a:1f:6b:c6:c0:f9:b6:38:51:
                    4b:1c:38:9e:1b:57:90:8c:db:f7:67:2b:10:ee:67:
                    74:8e:0a:f6:00:8e:1f:f9:7b:b3:27:0f:00:88:00:
                    95:1c:e0:a7:27:5f:9a:ae:6a:0a:89:5c:1b:a4:ee:
                    53:fd:b7:73:85:51:9e:a2:7d:a7:13:cf:28:9f:3a:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FF:D1:2F:E7:25:61:5A:6C:73:7F:C7:58:09:7F:86:9B:D2:58:5A
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:27:91:2f:41:1c:a7:de:0d:2e:0a:09:3e:09:f3:c9:f9:49:
         14:34:14:44:f2:50:b5:12:60:22:1e:db:2e:35:64:6a:31:b4:
         13:fb:a3:f4:18:96:de:3e:6a:0c:0a:89:83:18:e3:bf:7f:80:
         86:67:4f:eb:8c:43:4a:a7:95:21:46:14:65:10:f7:f8:27:3c:
         ca:bd:9e:2f:a8:91:1e:85:6f:18:d2:ad:87:de:70:33:28:6e:
         f3:e5:61:5d:4d:a2:20:32:04:f2:f7:d1:e1:31:14:58:6a:c9:
         a0:8f:58:d4:70:57:ce:e5:ca:91:22:80:37:8e:00:36:66:d6:
         a9:e3:a1:f1:69:d3:9c:1c:a8:0a:ca:81:76:95:4a:e6:63:49:
         43:8f:85:78:50:a2:c5:8f:09:5f:8c:17:86:07:47:60:af:63:
         42:87:69:c4:d5:e4:94:0c:2b:38:11:3f:30:3c:6a:6e:2e:ea:
         92:0e:80:7f:86:fb:7a:82:a7:98:f9:b9:05:be:2a:55:16:c8:
         c2:bf:11:0c:31:5d:d8:c9:64:d4:55:7d:60:d7:99:f5:f5:1d:
         3f:e9:4c:3d:d7:8a:7e:e5:41:f9:a5:1b:ce:22:3a:8d:83:fb:
         82:83:d7:d6:22:e5:bd:53:2b:f8:3d:a5:41:ce:a9:ee:58:5a:
         71:83:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:09 2024 by rpki-client on console-fra.rpki-client.org