Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e3132382e302f31372d3137203d3e2033363430.roa
File:                     3135382e39372e3132382e302f31372d3137203d3e2033363430.roa (raw, json)
Hash identifier:          gt5QMhI0rVLbUf3z7mHpk9nCPiP3j1t9RTiHjQGtinA=
Subject key identifier:   80:91:09:0A:EC:E1:F7:F5:4E:CF:87:D0:47:6F:4A:01:74:85:87:34
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       412EF143DC2F48BFB05F353D35CAF7C2B9C6FE9A
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e3132382e302f31372d3137203d3e2033363430.roa
Signing time:             Tue 05 Mar 2024 18:23:27 +0000
ROA not before:           Tue 05 Mar 2024 18:18:27 +0000
ROA not after:            Tue 04 Mar 2025 18:23:27 +0000
asID:                     3640
IP address blocks:        158.97.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2e:f1:43:dc:2f:48:bf:b0:5f:35:3d:35:ca:f7:c2:b9:c6:fe:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Mar  5 18:18:27 2024 GMT
            Not After : Mar  4 18:23:27 2025 GMT
        Subject: CN=8091090AECE1F7F54ECF87D0476F4A0174858734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:05:8c:c9:86:0f:2d:cc:64:69:9b:ce:48:
                    ef:d4:5f:2a:8b:4c:d6:4f:b8:29:d3:b8:61:2e:3f:
                    6a:9f:6a:13:3b:b3:94:24:ba:f9:12:6e:94:58:af:
                    9b:1f:b6:e0:64:9c:18:01:ac:fd:ae:db:b9:a9:3e:
                    31:8d:a7:5d:49:54:a6:6e:83:eb:05:35:69:c6:58:
                    0f:4f:f8:a3:7f:c8:9e:01:ef:74:92:cf:52:9d:6d:
                    82:be:eb:f1:fe:ce:22:bc:bc:74:08:8c:66:e7:30:
                    c5:cc:ef:9e:b6:7d:3b:7e:93:2b:58:59:b2:69:7c:
                    e8:f7:c2:c0:46:d7:6f:be:74:1a:66:3d:b3:0b:2f:
                    0d:38:bd:a8:08:45:6c:20:3a:1f:b2:f7:94:c1:d0:
                    4b:bd:e3:05:92:b8:4a:a1:b7:0d:f5:2b:30:bc:d0:
                    bf:48:60:20:0b:93:9f:9d:c9:87:6a:5f:0f:9f:e1:
                    77:d7:f4:e8:75:e1:29:17:6f:e1:eb:2b:32:c2:ab:
                    17:a8:00:9d:45:ce:e1:8e:aa:98:2c:22:db:ec:51:
                    ee:35:14:5e:04:b5:c1:3f:c9:50:ba:9d:ea:19:8b:
                    4b:20:17:7d:42:e1:6c:eb:e4:2b:0d:13:c4:6f:31:
                    57:64:07:2c:72:8d:cb:93:f9:0b:35:ca:5a:fa:88:
                    f5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:91:09:0A:EC:E1:F7:F5:4E:CF:87:D0:47:6F:4A:01:74:85:87:34
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e3132382e302f31372d3137203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         70:b4:54:86:4c:9a:c8:ac:93:01:ed:e5:2b:05:49:02:c7:9c:
         87:3e:21:6e:40:a5:a8:6e:c2:7d:59:2e:9b:c8:60:22:78:d7:
         f4:bb:93:45:fd:0a:8d:c9:de:62:98:e4:5c:85:ec:6f:11:a1:
         e8:8e:d5:da:a1:56:d9:c7:a2:d4:f5:80:a5:ca:f6:b4:cd:59:
         f9:1b:f1:cf:dd:c6:db:ee:f8:88:e7:6e:9d:3a:6d:86:d3:69:
         f0:a8:68:93:bc:7f:9c:02:6d:ad:fb:9b:54:7e:60:e4:a1:b2:
         0d:50:43:94:f4:e8:c7:45:fa:41:5a:67:bd:fa:e4:d8:96:c2:
         46:21:a8:9e:be:a1:1c:11:73:e5:82:f1:cf:87:c4:fd:f9:86:
         f0:85:0b:f2:a3:6b:8c:77:f3:f8:88:bb:93:3d:72:04:7e:ee:
         8b:d0:b1:f8:2c:53:85:c3:85:b6:4e:e1:dd:f4:8c:9c:5e:73:
         e0:2c:f4:79:2f:a9:f7:6f:0f:6e:0a:7c:19:df:53:2b:c9:65:
         f5:a6:a6:b4:9c:08:8c:dd:8c:ff:c8:f5:44:60:49:a3:46:8b:
         65:52:c7:82:ed:33:dc:73:0b:8c:c8:9a:7b:fb:bf:38:27:7f:
         a4:e2:12:16:88:c2:95:f3:da:10:19:9a:ff:ef:e7:2d:82:f7:
         e6:d4:10:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:35:37 2024 by rpki-client on console-ams.rpki-client.org