Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3233203d3e2036353033.roa
File:                     3139322e3230372e3230342e302f32332d3233203d3e2036353033.roa (raw, json)
Hash identifier:          Sv5NxnXlIjfAQymTXwe+hOlb2ezcxN2ADk4kvjr1vJY=
Subject key identifier:   D7:A0:01:6D:F1:6E:C5:E1:7D:9F:35:93:AA:F0:87:4D:01:66:42:86
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       78B7B0AEA571AF240696B36109E835F767BB6D84
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3233203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:33 +0000
ROA not before:           Tue 05 Mar 2024 17:49:33 +0000
ROA not after:            Tue 04 Mar 2025 17:54:33 +0000
asID:                     6503
IP address blocks:        192.207.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b7:b0:ae:a5:71:af:24:06:96:b3:61:09:e8:35:f7:67:bb:6d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:33 2024 GMT
            Not After : Mar  4 17:54:33 2025 GMT
        Subject: CN=D7A0016DF16EC5E17D9F3593AAF0874D01664286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:c8:8a:b0:a1:2d:b3:43:06:01:e7:86:4a:
                    87:36:b7:76:24:b6:56:9c:1c:61:9e:c2:33:e8:9d:
                    80:24:c1:51:ed:9c:2d:2d:7d:ff:4e:06:ae:d1:e6:
                    33:75:69:db:7a:73:5c:dc:af:92:ec:48:7a:9e:be:
                    d3:8b:2e:81:44:f7:1b:2f:cf:98:73:1e:f3:00:db:
                    84:0a:5c:4e:02:f2:cf:ec:ed:94:4d:17:bc:28:16:
                    93:76:96:f8:a8:f7:a9:f8:ea:72:d5:28:de:b4:46:
                    43:85:33:5e:e7:23:e0:10:3a:b0:7e:7a:fc:df:80:
                    90:f3:1e:33:60:de:9b:d8:db:e2:e9:bf:75:69:d2:
                    2e:ef:49:99:9c:c1:c9:48:d9:58:08:e3:1a:4d:da:
                    38:24:f4:e6:71:83:59:b4:c0:a2:2e:df:58:2b:fb:
                    ff:24:22:78:15:5e:35:8a:4e:25:68:db:8f:bd:36:
                    69:29:b0:30:4d:06:d8:04:94:19:1e:21:d8:9f:e6:
                    3e:ba:79:50:a0:cb:b7:df:98:52:5f:be:a6:dc:46:
                    c4:14:fb:f9:b4:75:41:16:ab:40:4b:fe:40:f3:c8:
                    02:3a:7e:7e:a2:70:8a:40:7f:e5:f8:4d:4f:fa:8e:
                    57:d3:51:29:0a:24:b2:c3:ca:c8:28:24:7f:d2:1f:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A0:01:6D:F1:6E:C5:E1:7D:9F:35:93:AA:F0:87:4D:01:66:42:86
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3230372e3230342e302f32332d3233203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:82:52:25:20:1a:3d:9e:56:c6:9c:15:db:91:38:79:20:8e:
         5c:c2:74:cd:6f:80:47:ee:8a:e4:ba:9a:0c:2c:9b:28:54:13:
         f6:da:e7:e8:0c:7b:c9:26:04:e2:1e:0d:4f:9a:11:19:38:f7:
         08:d7:3a:2a:fd:79:64:44:1d:1e:37:24:0c:83:6d:70:ce:94:
         a7:a4:1b:23:42:9f:de:fb:ff:81:66:10:73:6e:a4:85:e1:d2:
         09:13:0d:d7:9d:db:9d:c8:f8:15:57:f5:e7:da:e7:21:45:1c:
         0c:40:25:82:df:a2:82:d4:6b:76:39:5d:45:be:ea:d3:ff:da:
         42:bd:e6:f8:0f:34:17:63:86:18:6e:fc:43:66:a3:97:cf:89:
         b5:16:7a:f3:b3:71:34:0d:53:9c:16:96:b5:71:e5:a7:5f:49:
         47:52:05:c0:0c:a3:46:a1:b9:f0:59:28:39:d8:bb:3d:31:15:
         69:cb:cb:e1:91:8b:7b:ab:df:af:f4:12:23:e5:14:ae:06:66:
         f9:f0:e3:12:48:d6:bf:73:8d:ce:ff:9e:d8:36:e4:bc:c3:a8:
         a8:56:bb:c3:96:03:31:58:04:b8:a5:7f:a6:a5:42:4f:3f:b8:
         41:5b:a1:53:27:9e:07:db:a0:59:83:1e:d7:1b:6e:fa:56:1d:
         90:8e:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:00 2024 by rpki-client on console-ams.rpki-client.org