Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/3134332e3230322e39362e302f32322d3234203d3e20323634363139.roa
File:                     3134332e3230322e39362e302f32322d3234203d3e20323634363139.roa (raw, json)
Hash identifier:          Mj6eljXWvEDbnkQtw1bJijRQtjqPsbLuTkanfGMwsO0=
Subject key identifier:   08:35:21:08:C5:3A:A0:75:E9:81:59:74:5D:17:8C:F6:F2:FF:A6:FE
Certificate issuer:       /CN=2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5
Certificate serial:       24EC1BCEEC2F991C809290F27448D09F421D63AE
Authority key identifier: 2F:EE:53:CB:4F:A7:FD:18:21:23:FA:FF:3B:70:9C:F5:75:AA:96:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/3134332e3230322e39362e302f32322d3234203d3e20323634363139.roa
Signing time:             Tue 05 Mar 2024 17:53:02 +0000
ROA not before:           Tue 05 Mar 2024 17:48:02 +0000
ROA not after:            Tue 04 Mar 2025 17:53:02 +0000
asID:                     264619
IP address blocks:        143.202.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ec:1b:ce:ec:2f:99:1c:80:92:90:f2:74:48:d0:9f:42:1d:63:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5
        Validity
            Not Before: Mar  5 17:48:02 2024 GMT
            Not After : Mar  4 17:53:02 2025 GMT
        Subject: CN=08352108C53AA075E98159745D178CF6F2FFA6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:da:d8:f4:54:90:fe:05:fe:9a:c1:93:24:
                    b6:ad:60:00:7e:de:6c:ca:d4:7a:03:a5:2b:32:68:
                    b0:de:d2:db:88:4c:51:5e:88:bf:5e:f2:21:63:83:
                    aa:b8:65:89:ff:e0:2b:a7:aa:9b:5d:05:73:da:66:
                    4a:f0:21:7a:a8:89:67:3b:02:7d:2d:89:4b:d1:f9:
                    df:ad:d5:da:45:0d:85:27:00:75:b3:6e:34:31:79:
                    75:3d:f7:b1:ab:e9:ba:14:3a:43:18:c1:16:5b:af:
                    15:75:58:e3:8f:60:22:67:4d:65:03:59:9e:57:96:
                    90:14:84:ac:30:1b:ba:95:81:e0:0d:af:00:ad:22:
                    72:5d:4a:15:91:23:36:06:f8:93:85:41:d5:48:2a:
                    6d:d6:4a:7d:87:54:11:f7:12:10:fd:0a:cd:8e:19:
                    bf:bb:c3:e4:7a:04:84:07:87:48:a6:d2:fd:f2:5e:
                    f0:ba:0c:22:58:21:df:b5:50:71:f6:3f:51:74:e7:
                    ad:6f:61:4d:f8:0a:a5:37:e7:94:dc:9d:3e:b3:c8:
                    6e:74:76:9e:60:40:80:0f:d3:0a:3c:15:9f:1e:56:
                    66:89:7f:63:6d:b9:2b:17:d3:8b:a6:20:17:c5:96:
                    0d:20:d0:bd:b9:19:95:77:18:1a:59:f6:9b:9f:e6:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:21:08:C5:3A:A0:75:E9:81:59:74:5D:17:8C:F6:F2:FF:A6:FE
            X509v3 Authority Key Identifier:
                keyid:2F:EE:53:CB:4F:A7:FD:18:21:23:FA:FF:3B:70:9C:F5:75:AA:96:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/3134332e3230322e39362e302f32322d3234203d3e20323634363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:1d:d2:c4:c1:32:e5:13:6d:48:66:35:78:a5:ea:1d:d5:4a:
         df:de:59:ed:2b:2e:6d:31:60:10:e9:39:40:d8:ff:7a:43:5e:
         22:9a:93:c1:0b:2a:77:26:86:62:bc:14:43:ce:48:fa:44:e0:
         97:7d:0c:3b:78:f2:f0:9e:86:90:0a:cc:06:6d:e4:8a:b9:38:
         25:cf:86:af:4f:24:47:3c:78:09:ea:90:61:48:b8:23:2a:d0:
         6a:e1:ba:28:10:47:a5:3c:d8:a1:fa:6b:74:be:85:51:99:df:
         10:b7:02:ea:d9:84:ca:e2:47:3d:22:38:1f:32:b8:e5:95:c1:
         9b:cf:52:40:36:9b:d1:f2:f8:7a:17:e2:9b:19:e0:b4:86:d0:
         f9:50:2d:5a:c0:e9:2a:6e:fe:de:a4:3b:f0:3c:e3:97:ca:20:
         af:4d:a3:28:62:5b:71:fc:c1:37:b6:a4:f9:9b:91:7a:2a:32:
         cb:66:eb:95:80:74:03:d3:37:5a:f8:c1:d5:a2:af:7a:98:c1:
         62:46:ea:7b:81:50:14:d4:a5:8e:74:06:df:22:18:77:4f:24:
         4a:87:fd:c7:e7:e2:b8:b1:00:99:b3:b9:23:16:3b:f4:7a:0a:
         d9:77:50:60:00:c6:2e:a5:ca:71:c0:c6:00:af:89:60:07:15:
         29:d3:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:32 2024 by rpki-client on console-fra.rpki-client.org