Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f32332d3233203d3e2033363430.roa
File:                     3135382e39372e36342e302f32332d3233203d3e2033363430.roa (raw, json)
Hash identifier:          qnHQatHnUzS7rEcw1DB4Nd+NXDLvygamomWDqSMkbQI=
Subject key identifier:   49:CC:4D:FB:E1:96:02:3E:FA:7B:62:5A:3C:B5:48:E2:B7:DD:65:42
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       0131E5C918980E02502639B0B662CBBD91BF9D27
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f32332d3233203d3e2033363430.roa
Signing time:             Tue 05 Mar 2024 18:23:28 +0000
ROA not before:           Tue 05 Mar 2024 18:18:28 +0000
ROA not after:            Tue 04 Mar 2025 18:23:28 +0000
asID:                     3640
IP address blocks:        158.97.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:31:e5:c9:18:98:0e:02:50:26:39:b0:b6:62:cb:bd:91:bf:9d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Mar  5 18:18:28 2024 GMT
            Not After : Mar  4 18:23:28 2025 GMT
        Subject: CN=49CC4DFBE196023EFA7B625A3CB548E2B7DD6542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:c9:9b:4b:61:c0:44:fa:5c:17:89:18:b6:
                    79:12:35:73:1c:f3:8d:7c:bd:aa:82:a4:87:18:cc:
                    9b:07:53:41:02:a9:36:04:3d:e4:11:7f:d2:db:7b:
                    81:17:41:e4:7d:c0:b0:81:57:aa:ad:a0:53:c0:87:
                    32:34:7a:1d:e4:51:46:22:9a:bb:17:cd:3d:6c:08:
                    df:75:17:fe:3b:fd:62:40:c1:03:68:7a:51:c0:bc:
                    3f:eb:3a:a9:ef:8d:ea:e8:fc:37:c1:23:f6:db:bc:
                    0c:3d:4e:50:2b:aa:63:15:94:3e:4e:83:36:ea:8b:
                    2d:46:b4:dd:3f:c2:4e:d5:7d:a5:d8:0e:aa:73:36:
                    64:cd:6c:55:8e:26:dc:15:ba:de:da:4b:06:06:6c:
                    71:42:87:05:f3:41:0b:4f:2b:d2:37:0e:d3:04:b9:
                    8d:fd:ad:ef:8c:9d:38:a2:3f:2e:e8:7e:b2:5e:23:
                    38:e9:fa:ec:a4:4f:f6:05:da:6b:b7:43:d3:f8:ce:
                    9d:89:0b:04:4d:b9:c2:14:ad:07:b0:c0:21:04:66:
                    16:c8:46:bd:59:8b:82:d4:eb:d1:63:76:19:ac:b2:
                    f1:2c:c4:35:ac:cc:0c:e3:38:88:2c:8e:37:44:37:
                    9f:45:bb:94:f2:a2:ce:c6:c6:c4:98:42:8d:e6:6c:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:4D:FB:E1:96:02:3E:FA:7B:62:5A:3C:B5:48:E2:B7:DD:65:42
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f32332d3233203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:32:86:e4:d1:11:4e:a5:64:bb:69:52:ad:84:5e:b4:e5:d6:
         66:61:69:53:0d:d5:8d:36:04:ae:40:cc:29:fd:c3:b9:75:6c:
         9f:0b:10:21:db:2a:48:e7:4a:0a:f7:90:53:da:10:52:9f:bf:
         af:1c:bd:2b:8d:b3:a6:8a:15:03:25:0d:e6:bd:76:3c:bc:b5:
         0d:d4:2e:a2:2a:36:2c:89:91:48:d5:b2:6a:38:aa:d5:13:2f:
         b5:4b:ac:e3:cd:a0:43:11:7d:24:18:88:fb:44:f3:2a:76:e3:
         80:a5:37:ad:cd:48:7a:45:3e:15:66:05:5a:b2:86:ae:b9:10:
         17:5a:1d:0b:3d:6e:7a:08:58:e0:2a:d1:a0:70:51:78:29:e6:
         a2:76:89:95:98:86:7b:55:e9:2b:dc:65:9c:e1:05:e7:60:0f:
         12:21:60:36:51:27:0d:d4:11:4b:ff:85:70:6b:ad:da:67:08:
         74:2e:f5:3c:93:b1:9f:0f:d6:09:a6:ae:eb:06:90:ad:f2:04:
         a9:66:6f:9c:f6:c8:02:70:70:d3:57:66:dd:65:d2:8d:ef:0b:
         cd:8c:61:5c:14:bb:3e:9d:82:7e:f1:3a:f2:ab:dc:d8:8d:bb:
         c4:fa:9f:f9:86:b8:98:c2:26:92:6b:b5:3c:8f:08:13:bd:c4:
         24:0a:bf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org