Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3136312e302e3232342e302f31392d3234203d3e203237363635.roa
File:                     3136312e302e3232342e302f31392d3234203d3e203237363635.roa (raw, json)
Hash identifier:          eq+csIF6zb/JjNPWTbiK5DglGJNkhgOj2B8KghPTef8=
Subject key identifier:   4F:6A:33:01:34:91:E2:6B:3B:6A:4E:0E:5F:44:EC:EA:91:93:ED:07
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       0DFACB94F3784278BEA3F85CF60C0ECF388D83CA
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3136312e302e3232342e302f31392d3234203d3e203237363635.roa
Signing time:             Tue 05 Mar 2024 18:15:12 +0000
ROA not before:           Tue 05 Mar 2024 18:10:12 +0000
ROA not after:            Tue 04 Mar 2025 18:15:12 +0000
asID:                     27665
IP address blocks:        161.0.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 01 May 2024 23:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fa:cb:94:f3:78:42:78:be:a3:f8:5c:f6:0c:0e:cf:38:8d:83:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Mar  5 18:10:12 2024 GMT
            Not After : Mar  4 18:15:12 2025 GMT
        Subject: CN=4F6A33013491E26B3B6A4E0E5F44ECEA9193ED07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:85:1b:61:3b:03:c8:8a:76:1e:0f:28:9c:
                    8a:d2:f9:c5:9d:06:21:a6:80:c8:13:90:45:10:6b:
                    72:e9:42:68:17:a3:fd:95:1e:8b:da:40:a6:dd:7f:
                    a1:85:5a:4e:a3:17:31:ac:12:cf:f7:47:f7:fc:11:
                    4a:d2:cd:e6:45:d2:df:f7:5d:1e:84:8b:79:0d:08:
                    45:48:02:44:d7:3e:c1:6d:db:ee:74:09:bd:f1:28:
                    cf:55:ac:dd:ad:ca:ce:4f:48:fa:0d:c2:7f:a4:fa:
                    d2:70:27:0b:13:e2:d8:83:eb:96:f0:0b:3a:7e:17:
                    81:dc:e2:41:c0:75:d8:65:2f:20:53:ec:5b:6a:ba:
                    4c:0f:9e:d8:82:fd:e7:b4:15:e4:91:99:a4:e2:d5:
                    80:d3:e5:c4:7b:49:6f:04:b4:80:a4:c9:5f:aa:15:
                    01:87:93:37:90:d9:85:e3:98:21:ec:de:bb:55:b3:
                    52:e2:d5:0e:4d:16:b5:2d:fe:18:65:f6:1d:9f:4e:
                    7a:de:af:33:0e:fe:2f:1f:00:c3:0d:56:f5:7e:e1:
                    45:ba:75:68:d9:0d:16:43:aa:04:ca:f2:72:7f:b5:
                    ba:4a:13:8a:dd:2d:54:e2:ac:be:08:8f:dd:37:51:
                    22:83:44:63:82:b9:e3:d9:da:5f:39:d3:b0:f8:f7:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6A:33:01:34:91:E2:6B:3B:6A:4E:0E:5F:44:EC:EA:91:93:ED:07
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3136312e302e3232342e302f31392d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:0d:26:e1:66:dd:16:fd:d8:f9:ce:d8:5b:38:3a:6c:5a:
         7d:7c:29:a6:92:3f:a0:39:1d:3e:50:c1:8d:c7:21:1b:61:62:
         61:6d:d3:5b:fb:6f:49:eb:3e:c4:ba:4a:57:30:82:91:fb:31:
         d6:4a:07:70:c4:96:67:a5:e2:5a:eb:27:7c:48:32:44:e4:7b:
         8d:4e:39:3e:79:1b:94:7a:e8:4a:82:b2:82:4a:6a:40:da:52:
         80:7e:4c:b8:67:57:19:4b:a0:19:95:61:5c:60:c4:05:61:ad:
         26:1b:51:8f:9a:f5:da:7a:3b:02:04:37:5f:ff:4c:23:03:d4:
         d3:05:42:b9:2c:f4:a6:0a:01:18:2d:41:b1:1b:3d:04:e2:5f:
         f2:3c:2a:74:12:a3:17:7d:fc:78:26:4a:86:03:9f:03:b0:f3:
         3f:05:86:5d:95:05:d0:6a:ec:92:2c:03:35:10:4f:f9:f4:46:
         0d:2f:3e:b0:1c:73:f7:8b:58:c3:ce:c5:fa:8c:78:13:86:1e:
         54:2c:b3:07:64:92:d0:f7:eb:d6:9f:92:84:ec:43:6f:e1:2a:
         f6:28:5a:c2:2e:1e:fd:0b:8d:28:40:cb:70:f3:b2:f7:11:81:
         bb:ea:59:01:ce:4d:28:4d:89:f8:d1:42:a8:91:85:0e:1f:ce:
         51:aa:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 20:43:25 2024 by rpki-client on console-fra.rpki-client.org