Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e39362e302f31392d3232203d3e2033363430.roa
File:                     3135382e39372e39362e302f31392d3232203d3e2033363430.roa (raw, json)
Hash identifier:          DvpBbBulNBV5qtjssdGfuMHnEtOtDZsrMrLY/o2a2R4=
Subject key identifier:   CC:6B:32:50:CE:0C:F0:E4:F9:BE:AA:66:FE:A5:E5:7A:C3:06:8D:72
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       54133025F21C05417FFE28ED02AED303C0B88951
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e39362e302f31392d3232203d3e2033363430.roa
Signing time:             Tue 05 Mar 2024 18:23:27 +0000
ROA not before:           Tue 05 Mar 2024 18:18:27 +0000
ROA not after:            Tue 04 Mar 2025 18:23:27 +0000
asID:                     3640
IP address blocks:        158.97.96.0/19 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:13:30:25:f2:1c:05:41:7f:fe:28:ed:02:ae:d3:03:c0:b8:89:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Mar  5 18:18:27 2024 GMT
            Not After : Mar  4 18:23:27 2025 GMT
        Subject: CN=CC6B3250CE0CF0E4F9BEAA66FEA5E57AC3068D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:75:44:09:8a:ab:a8:2f:89:c5:45:ea:40:
                    5b:68:30:a1:7d:87:55:30:c7:eb:37:9e:ac:74:b1:
                    c9:38:28:cd:b0:60:32:91:a7:66:0f:ab:80:10:c7:
                    20:2c:dc:76:24:d2:4b:26:d9:ef:9f:00:35:c3:d2:
                    3e:fe:d0:c0:1f:2a:8c:14:3c:c5:a9:3e:f6:78:40:
                    d5:fa:ea:99:c9:68:83:0f:a9:47:3b:1b:56:a3:3f:
                    41:10:87:64:9c:b5:a3:53:32:7b:99:df:a5:37:fa:
                    a3:be:18:cd:02:8b:94:9b:b0:5c:37:cd:7f:21:aa:
                    9e:3e:1c:28:8e:35:ff:d4:17:e0:12:81:89:5e:1c:
                    1b:e4:04:12:87:fa:af:4a:2d:58:7e:a8:19:41:6a:
                    4d:6d:0d:1c:61:8d:d3:b5:61:47:42:7d:f7:d3:dd:
                    88:50:6c:04:01:d3:de:0c:4b:e8:b3:a2:7f:b7:8e:
                    13:be:98:fe:0a:e9:bf:36:e4:91:40:5f:94:73:11:
                    9a:e7:b8:47:f0:7e:a3:02:6f:93:13:d3:80:c3:78:
                    41:d8:0d:d4:e9:61:94:8f:7e:99:ea:63:2d:f2:0e:
                    24:cc:43:38:14:ca:c3:ba:7d:e2:d7:e6:fe:c5:75:
                    5b:6e:ec:8f:98:03:07:93:b9:13:e3:ea:91:3b:c0:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6B:32:50:CE:0C:F0:E4:F9:BE:AA:66:FE:A5:E5:7A:C3:06:8D:72
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e39362e302f31392d3232203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:3c:4a:78:36:5d:e3:f1:88:12:37:80:e6:0e:21:d2:01:
         7d:ee:04:35:74:c8:69:26:d2:4d:63:49:13:0e:3d:e1:9c:8a:
         ee:2f:c5:ec:21:ef:ec:5f:6a:37:ea:68:b9:7c:7c:dc:89:cc:
         89:67:03:65:59:93:5c:4e:d5:33:42:03:01:c7:e4:0b:0f:e4:
         ca:14:07:ed:c1:87:6d:55:e3:40:36:87:44:c8:14:16:1a:20:
         f6:40:3b:f3:52:e9:5f:6a:8b:7a:44:b7:74:84:0b:88:8e:68:
         95:4a:01:dd:a7:68:c9:14:99:17:74:be:7d:ee:c1:69:11:16:
         1a:e2:9f:dd:d5:3b:37:3b:e1:4d:d8:6e:0f:31:e4:9f:f7:4b:
         ba:cf:f5:b7:e6:f4:69:67:9b:5d:7e:f9:0a:a2:8d:28:15:53:
         44:01:99:d5:50:db:cb:1b:18:18:06:aa:f5:22:0a:74:3d:8d:
         f5:e3:d4:51:2a:9d:30:20:06:2f:e9:c7:7d:68:28:1d:88:4e:
         b8:2b:77:8d:98:ba:92:76:db:ff:4e:0e:41:e7:af:9d:6d:96:
         3c:85:f3:13:fd:03:d6:6e:7c:5b:9d:de:94:6f:45:95:2b:3c:
         de:da:10:ba:24:58:11:37:47:3f:1c:2a:49:70:b1:f1:03:7b:
         93:eb:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 11:29:30 2024 by rpki-client on console-fra.rpki-client.org