Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa
File:                     3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          dDL79zyharG8vKPvLn8zvLEQmcmSgGQs3kv2ym4z41Y=
Subject key identifier:   48:94:E9:80:43:95:2D:00:31:F9:8D:CF:84:4A:3A:06:61:05:4D:A7
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       45D611F7A328F2494A70065C3BECCC500E02E2C5
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa
Signing time:             Tue 05 Mar 2024 18:01:30 +0000
ROA not before:           Tue 05 Mar 2024 17:56:30 +0000
ROA not after:            Tue 04 Mar 2025 18:01:30 +0000
asID:                     269822
IP address blocks:        103.219.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:11:f7:a3:28:f2:49:4a:70:06:5c:3b:ec:cc:50:0e:02:e2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Mar  5 17:56:30 2024 GMT
            Not After : Mar  4 18:01:30 2025 GMT
        Subject: CN=4894E98043952D0031F98DCF844A3A0661054DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:41:17:4a:bf:51:9c:00:17:88:5d:20:a4:
                    41:c8:fd:51:72:c0:92:f5:54:dc:99:77:6f:28:e9:
                    82:d1:be:45:54:99:be:31:00:10:1c:ac:aa:af:be:
                    22:a3:05:3f:4a:11:fa:7d:05:73:c9:5a:85:49:96:
                    51:89:56:69:f7:79:1a:3b:33:d5:d4:ea:d6:58:ed:
                    5c:74:2d:12:91:0c:40:44:04:85:a7:a8:e1:59:9c:
                    15:f8:bb:2a:78:b5:a5:8c:2d:ae:c6:bc:f1:22:97:
                    89:d5:60:be:c3:9f:7f:f1:75:92:b0:73:68:13:3b:
                    99:10:e2:b6:c2:b6:39:a7:fe:be:f7:8e:9e:e5:bc:
                    55:df:65:3c:42:b1:0d:8b:76:1a:9e:10:70:4a:89:
                    6d:78:02:1b:94:cb:2b:08:e0:68:2f:35:3d:79:67:
                    44:df:8f:43:5b:4d:5d:e5:af:7f:89:2a:75:59:7d:
                    6a:cb:db:4c:eb:a1:ae:5b:93:e7:de:b1:73:84:1a:
                    f4:f4:da:e0:67:92:13:e6:0e:e4:ac:23:26:84:3a:
                    d5:b2:4f:ab:61:88:60:32:f1:df:7d:68:64:d5:30:
                    57:b3:aa:20:94:7b:28:02:2e:23:76:9f:23:d7:a5:
                    64:47:f8:55:ba:73:8d:c0:fa:a5:b0:e9:ed:48:c2:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:94:E9:80:43:95:2D:00:31:F9:8D:CF:84:4A:3A:06:61:05:4D:A7
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:31:97:df:0d:df:52:30:41:44:31:1c:2f:c7:95:a6:b0:
         1a:8a:2b:38:a9:ed:00:bb:f6:31:98:e6:04:8b:8f:6c:f5:15:
         94:e2:3a:4b:61:1d:fe:be:b0:78:8e:b5:94:7e:d6:50:35:a5:
         5f:dc:2a:96:85:dc:01:35:e3:da:a9:bc:45:d2:8c:79:f7:07:
         7f:23:f3:e6:3b:7d:e4:58:85:f0:ed:9c:b8:31:00:4a:bd:49:
         e8:11:8c:7a:6b:ee:34:ad:fb:51:7a:74:a0:f4:d5:d6:d9:40:
         94:43:b3:f7:3c:33:af:71:4f:2c:5d:b7:d3:9e:df:99:8c:cd:
         02:a2:7d:c4:98:bd:d9:ed:1b:99:08:80:78:79:cd:9c:e1:c7:
         48:f6:a0:c9:b3:29:8e:3c:c0:a4:c1:51:28:2e:18:7a:6e:bd:
         b7:64:45:0c:54:2f:08:d1:b2:34:17:de:d6:b4:01:9e:b4:75:
         72:7c:4b:74:30:a9:75:0b:78:4c:1e:e1:01:9d:11:0a:69:76:
         7c:76:5b:80:e3:41:f7:76:89:f2:0c:25:b7:88:08:2f:03:96:
         5c:2c:69:64:89:c3:e6:ce:ef:c6:7a:29:41:b8:f3:05:d7:a5:
         38:81:e0:99:43:c0:b2:97:db:04:29:94:f9:3c:3f:d2:aa:59:
         f8:05:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:50 2024 by rpki-client on console-ams.rpki-client.org