Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3135322e3135362e302e302f31362d3234203d3e203139343232.roa
File:                     3135322e3135362e302e302f31362d3234203d3e203139343232.roa (raw, json)
Hash identifier:          TO2gOFNL0Rk1JLjx8Bn9W9hjWviICunNCLirAYQ5G0M=
Subject key identifier:   DF:64:86:97:0A:82:21:65:4E:6D:2A:DB:D7:A9:CE:48:2B:4B:A5:BD
Certificate issuer:       /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial:       7750B0C9984B5611615C41849ACD71DD0A038CD3
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3135322e3135362e302e302f31362d3234203d3e203139343232.roa
Signing time:             Wed 20 Mar 2024 10:45:00 +0000
ROA not before:           Wed 20 Mar 2024 10:40:00 +0000
ROA not after:            Wed 19 Mar 2025 10:45:00 +0000
asID:                     19422
IP address blocks:        152.156.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:50:b0:c9:98:4b:56:11:61:5c:41:84:9a:cd:71:dd:0a:03:8c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
        Validity
            Not Before: Mar 20 10:40:00 2024 GMT
            Not After : Mar 19 10:45:00 2025 GMT
        Subject: CN=DF6486970A8221654E6D2ADBD7A9CE482B4BA5BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:6e:6e:3a:b3:d6:a1:b3:ef:53:4a:ca:d6:
                    f0:1c:ed:8d:eb:3d:bb:82:54:41:95:64:55:c4:8c:
                    8a:76:91:c9:26:b9:00:f3:ae:b2:2c:f2:0b:3c:f2:
                    e8:b4:ca:8b:fc:55:cf:f0:5b:77:22:a7:98:39:b8:
                    a9:76:34:5f:64:8c:c8:05:2f:8e:b1:e0:09:51:40:
                    2b:ae:fb:ac:4b:c5:48:66:22:9d:0a:b7:96:bc:27:
                    21:c4:1f:fb:ed:f4:02:c6:74:70:62:23:3f:1b:06:
                    f6:e5:c8:bd:48:94:ce:f3:fa:3c:37:11:52:08:be:
                    d9:55:c6:79:e6:d7:62:77:3a:b1:fd:ed:77:d3:14:
                    48:ee:9e:35:98:7f:3d:27:dc:0e:a6:df:6e:d5:dd:
                    80:55:76:43:63:5b:fd:5f:59:ab:47:c0:3b:27:e6:
                    2d:e1:f4:31:3d:09:46:43:74:10:05:fb:ab:4a:2f:
                    a5:ac:b2:64:85:4f:24:15:ed:68:c7:d5:4a:0a:06:
                    c6:27:63:1d:44:76:3f:97:3b:e7:19:07:f5:23:fd:
                    90:47:66:a6:5b:ee:2a:ed:9f:17:1c:48:46:93:e7:
                    d0:23:58:9b:98:9b:eb:26:e0:cc:21:b8:f1:53:ee:
                    06:c8:7f:95:db:e9:36:78:46:6a:81:47:a5:90:bb:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:64:86:97:0A:82:21:65:4E:6D:2A:DB:D7:A9:CE:48:2B:4B:A5:BD
            X509v3 Authority Key Identifier:
                keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3135322e3135362e302e302f31362d3234203d3e203139343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.156.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:29:bb:31:e4:45:a3:48:7a:21:d0:a9:12:5a:59:cb:e8:fe:
         8a:f8:45:ea:34:e6:1c:2e:48:9d:c5:bc:1f:3c:63:1d:97:73:
         b0:be:a3:0d:be:69:8e:9d:53:cc:3b:f6:48:0c:a4:55:01:60:
         a1:e8:07:9a:15:6d:d5:9e:9a:3e:f4:21:97:3a:00:bb:b3:56:
         8e:cf:e1:0d:35:f1:47:f1:90:11:a5:d4:6e:58:fe:a4:b1:9a:
         a8:6f:a5:d6:f4:90:24:ac:7e:16:b0:ac:6d:3d:8d:b3:3b:59:
         03:d2:0c:a7:42:96:36:27:86:64:af:b8:db:6a:e8:2c:bb:d6:
         e4:3c:8b:a1:d3:39:1e:46:06:cd:93:29:01:ba:00:f5:c2:6d:
         b0:82:c2:80:4a:2e:8b:6e:b8:6c:6e:1f:a9:2f:f6:5f:f6:c7:
         2d:3d:e3:ed:84:43:0b:7d:a7:10:3a:26:d3:3b:3c:e1:4b:36:
         1b:c9:a4:44:22:12:9c:22:a7:5f:a5:46:87:67:41:2b:5a:fd:
         ea:52:f1:1f:30:65:09:02:88:14:e8:14:09:57:2f:9c:85:ae:
         79:1d:1f:a9:2a:c7:87:38:ce:35:72:e6:1f:84:ce:71:58:08:
         d4:e7:d4:42:10:5f:df:70:df:a9:67:bd:1a:ff:e4:49:20:65:
         1b:3c:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:22:41 2024 by rpki-client on console-fra.rpki-client.org