Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231322e38332e302f32342d3234203d3e20323639383232.roa
File:                     3130332e3231322e38332e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          dL8+brBXOYht941r/T7ClrkPwQesq52mp+baXHfzHsQ=
Subject key identifier:   B3:98:66:9C:AE:C7:3F:DB:94:02:47:A0:73:19:45:30:DB:39:B3:C4
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       4F0D80062A365CA327DEDA1D6134D7F6657015B1
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231322e38332e302f32342d3234203d3e20323639383232.roa
Signing time:             Tue 05 Mar 2024 18:01:29 +0000
ROA not before:           Tue 05 Mar 2024 17:56:29 +0000
ROA not after:            Tue 04 Mar 2025 18:01:29 +0000
asID:                     269822
IP address blocks:        103.212.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0d:80:06:2a:36:5c:a3:27:de:da:1d:61:34:d7:f6:65:70:15:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Mar  5 17:56:29 2024 GMT
            Not After : Mar  4 18:01:29 2025 GMT
        Subject: CN=B398669CAEC73FDB940247A073194530DB39B3C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:18:1e:3d:a1:c1:62:4e:11:f9:54:39:e8:
                    ed:cd:9c:18:4f:d4:bd:ac:ad:bf:c5:98:9e:be:96:
                    e8:73:41:7b:74:85:01:cb:24:e1:86:f8:9a:d6:dc:
                    32:b3:45:f9:f9:d5:a8:3a:2b:bf:13:f9:fc:3a:dd:
                    61:48:16:ea:d1:dc:70:96:27:e5:5e:b9:48:44:48:
                    56:79:6f:19:f0:86:3d:74:ff:2f:57:d0:a4:f4:9b:
                    d6:8a:f3:4b:19:91:27:b9:ef:02:eb:cc:75:ef:33:
                    e1:b8:e1:62:a4:bd:a2:92:46:fe:6f:36:12:e5:2b:
                    65:1a:24:9d:23:df:6b:79:34:92:fd:ff:eb:5a:dd:
                    95:8e:49:72:ba:71:3a:ff:45:8a:b8:be:ea:22:65:
                    cd:dd:f1:dc:5d:b6:df:5d:e6:28:0a:22:e2:52:13:
                    1c:d4:8b:06:d7:bb:3e:f3:ac:9b:8c:54:2c:73:74:
                    24:8b:b0:b1:23:c1:91:c5:bb:7e:aa:18:6e:b0:cb:
                    0e:21:68:cf:01:e5:ae:0d:fd:b9:e0:29:11:b7:a0:
                    9b:62:e0:d4:b6:85:8c:59:1e:fc:bf:6a:3a:6d:8d:
                    28:86:47:b4:df:3a:44:aa:59:f5:bb:bf:b8:c8:d8:
                    69:1d:36:f3:02:aa:6d:a4:5f:75:31:91:d3:ec:95:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:98:66:9C:AE:C7:3F:DB:94:02:47:A0:73:19:45:30:DB:39:B3:C4
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231322e38332e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:31:01:8f:e1:39:4c:03:df:d3:9d:29:0a:56:d6:0a:41:
         3a:df:66:08:4f:59:cb:db:0c:2f:26:df:93:cd:43:7a:fe:1e:
         9f:48:1d:df:a9:70:47:ee:65:3d:43:24:85:c4:3d:bc:32:a9:
         1d:4b:0c:81:7f:49:09:b4:34:b9:06:54:9d:e8:90:1f:f2:38:
         64:2b:58:8d:8f:03:7e:8c:9e:71:92:d3:e5:7c:9c:c0:fe:8f:
         c2:50:af:86:cc:92:6b:f0:e6:ca:ee:d1:3d:3c:61:37:46:88:
         84:45:93:e4:7b:72:05:c7:f2:e6:e0:f9:fc:73:31:eb:a8:f8:
         b3:c4:82:f0:a9:b1:e0:d4:a1:19:9a:d6:2b:f8:62:17:39:cd:
         74:06:96:88:52:ff:9b:16:dd:de:78:31:fc:0a:a3:44:aa:fb:
         6d:4d:78:d6:e9:60:dc:4b:1c:d8:68:eb:a6:ed:89:50:ae:ae:
         83:3a:f7:69:df:e8:2b:aa:a4:42:87:f6:55:dd:c6:da:17:79:
         8e:4a:62:97:ac:2a:69:8e:7a:7d:f9:de:bb:9f:7f:f6:8b:bc:
         37:b8:5f:48:92:ea:15:c4:ec:d9:c9:0d:2a:0d:ae:6e:b1:4c:
         63:16:3e:6f:ea:b1:69:28:55:9f:3e:5b:91:ad:40:1f:6c:58:
         76:53:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:50 2024 by rpki-client on console-ams.rpki-client.org