Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130362e302f32332d3233203d3e20323635363735.roa
File:                     3134332e3235352e3130362e302f32332d3233203d3e20323635363735.roa (raw, json)
Hash identifier:          lU4T7geqUdbWmqiDZTJx4+6Ds6l+TCIilZ40n8+/4eY=
Subject key identifier:   BE:79:84:61:6F:F6:16:FC:8F:A4:E6:75:CD:03:79:92:DC:61:57:9A
Certificate issuer:       /CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
Certificate serial:       69FDF2DE15F47C529CE39E234F04E3A6B2E3414A
Authority key identifier: E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130362e302f32332d3233203d3e20323635363735.roa
Signing time:             Tue 05 Mar 2024 18:00:15 +0000
ROA not before:           Tue 05 Mar 2024 17:55:15 +0000
ROA not after:            Tue 04 Mar 2025 18:00:15 +0000
asID:                     265675
IP address blocks:        143.255.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fd:f2:de:15:f4:7c:52:9c:e3:9e:23:4f:04:e3:a6:b2:e3:41:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
        Validity
            Not Before: Mar  5 17:55:15 2024 GMT
            Not After : Mar  4 18:00:15 2025 GMT
        Subject: CN=BE7984616FF616FC8FA4E675CD037992DC61579A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:00:9b:93:20:a4:4d:61:e2:bf:9d:00:31:
                    b9:9f:6c:2e:02:e0:a3:44:f6:a0:3c:60:9c:2e:a5:
                    15:24:32:bb:9f:b9:35:c5:44:5b:06:8b:87:74:1c:
                    19:de:0c:2f:88:89:3b:40:a8:20:61:c5:5c:74:1b:
                    11:9a:5e:38:cd:0f:b7:71:0e:ba:e6:9f:a7:29:8f:
                    e7:7e:f2:6e:0f:af:cf:b6:55:b3:da:9b:75:b4:a2:
                    26:f2:4b:3e:cd:cc:b2:9d:be:4c:ef:08:59:96:c0:
                    cf:ae:bd:24:70:79:37:8d:d6:38:c5:ef:48:e9:55:
                    55:ca:97:99:36:c3:90:70:d5:53:3c:7d:08:90:fc:
                    56:cd:26:3a:1f:17:a8:bd:e4:60:f0:7b:e1:af:bc:
                    f8:89:f4:17:63:ed:7c:20:c0:62:a6:6f:93:15:27:
                    74:a8:36:b4:f2:49:cc:87:3b:86:c0:42:d1:b5:86:
                    92:f1:cf:c3:e7:d8:ec:e6:88:b4:92:06:d9:e9:69:
                    70:bd:14:68:a1:df:da:51:85:73:b4:bf:a2:59:ce:
                    e5:63:0f:99:b9:02:1c:37:02:37:d5:a7:ea:b4:11:
                    bb:2c:34:1f:a2:8c:ac:aa:6b:56:4a:3d:bc:15:7d:
                    e3:05:03:39:d4:be:da:4e:d5:60:92:0a:74:f8:41:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:79:84:61:6F:F6:16:FC:8F:A4:E6:75:CD:03:79:92:DC:61:57:9A
            X509v3 Authority Key Identifier:
                keyid:E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130362e302f32332d3233203d3e20323635363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:e5:05:63:a6:a7:a0:9a:29:21:6c:4f:92:58:c5:61:ea:c1:
         54:ea:f6:ce:a9:cb:98:35:06:91:77:70:ab:62:4f:39:98:69:
         d7:2b:6c:a9:21:85:44:e4:86:0c:4a:cf:0e:ed:5b:24:1c:f1:
         ef:ae:55:9b:18:42:87:19:b9:b9:5a:04:35:86:71:59:be:a5:
         42:0e:9c:1a:9a:9d:86:a1:11:f4:6f:91:77:38:dd:01:88:e4:
         94:e2:03:9c:5f:68:dc:6c:9e:df:6d:9b:2e:df:37:d3:dd:bb:
         d4:74:dc:f0:71:ca:47:e9:6d:68:67:2c:21:15:fe:26:bd:a2:
         1e:ec:d1:38:01:a1:a8:60:d8:3c:1f:6d:0a:09:8c:a3:64:12:
         5d:70:76:8d:2b:e8:da:85:14:1b:67:dd:c3:a8:73:16:8a:b7:
         38:cd:0e:c0:10:c7:29:b0:1c:28:df:a1:54:95:52:3a:5a:45:
         63:6f:d4:8b:fe:93:a5:d6:bc:f2:96:cd:52:4d:33:ed:67:46:
         56:0f:b2:b0:e0:16:4b:d7:c4:fe:dd:9a:77:f2:4a:c3:c5:3b:
         df:99:75:45:27:48:e8:65:81:e5:79:ee:63:a6:92:5c:bd:38:
         53:20:df:ea:51:6c:44:d9:90:59:bd:40:a8:8c:b7:f6:5c:e7:
         d3:6f:2b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org