Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3134332e3230322e32342e302f32322d3234203d3e203237373932.roa
File:                     3134332e3230322e32342e302f32322d3234203d3e203237373932.roa (raw, json)
Hash identifier:          Jp0iS0sdJk2eZRhOURliPE+bJaH8Q+VueY85135uMsc=
Subject key identifier:   FE:E3:3D:9F:9E:81:DF:10:0E:E9:79:DB:12:10:70:64:DD:E7:9F:90
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       219E9184D8CCD23E92EF0F401E4D257048AE2FB6
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3134332e3230322e32342e302f32322d3234203d3e203237373932.roa
Signing time:             Tue 05 Mar 2024 17:56:44 +0000
ROA not before:           Tue 05 Mar 2024 17:51:44 +0000
ROA not after:            Tue 04 Mar 2025 17:56:44 +0000
asID:                     27792
IP address blocks:        143.202.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9e:91:84:d8:cc:d2:3e:92:ef:0f:40:1e:4d:25:70:48:ae:2f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Mar  5 17:51:44 2024 GMT
            Not After : Mar  4 17:56:44 2025 GMT
        Subject: CN=FEE33D9F9E81DF100EE979DB12107064DDE79F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:c5:85:69:53:66:3e:db:1a:82:15:f1:a9:
                    2a:1d:e6:4b:86:67:a5:11:a2:f7:21:bb:73:37:07:
                    09:a3:1b:b2:db:e8:dd:88:8e:10:56:31:69:02:60:
                    4f:e2:a1:e3:37:80:50:82:d5:86:48:30:df:38:f8:
                    c7:6e:01:96:c5:09:52:5b:69:59:f9:4e:4a:7b:4a:
                    ef:2b:01:bd:08:fb:23:f4:3e:61:82:39:c8:a0:49:
                    fc:80:2d:48:e5:ef:39:3a:49:32:d3:c3:d6:10:30:
                    ec:47:50:de:23:c8:71:4a:31:12:1e:ff:7b:8b:ba:
                    0c:24:eb:60:a2:64:40:92:69:05:f5:b4:0c:40:43:
                    af:4a:eb:7b:17:f4:39:35:44:3c:ee:c2:76:98:57:
                    e9:ce:82:ee:ca:ab:ad:08:f2:fd:4c:01:6e:e7:d7:
                    0a:3d:01:cc:2b:95:00:20:e4:52:b1:a3:6e:2f:29:
                    45:b9:7f:2f:26:7d:44:a5:dc:db:52:ee:ea:ff:16:
                    77:64:85:3f:d0:5b:22:bc:4d:cd:83:67:0a:22:64:
                    f4:ad:37:80:a7:2e:b7:69:ea:16:68:84:6e:d6:c8:
                    1c:84:e5:5a:6f:c4:45:d8:99:3b:4d:24:e3:41:57:
                    97:07:07:18:16:2b:45:2e:2e:2f:fe:38:47:2e:e3:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E3:3D:9F:9E:81:DF:10:0E:E9:79:DB:12:10:70:64:DD:E7:9F:90
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3134332e3230322e32342e302f32322d3234203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:3b:b1:e9:a3:2f:5b:e6:68:17:23:3d:47:39:61:9e:fc:32:
         3e:92:62:05:60:f5:7b:52:27:a4:2e:9e:f9:a0:d7:19:03:26:
         00:b7:c3:97:d4:31:f9:2e:59:4e:49:3a:01:40:34:ef:cf:06:
         3d:5c:c1:c1:4b:be:8e:36:3f:00:f7:6b:fd:59:c9:d4:e1:71:
         79:07:e9:c0:cc:34:a6:54:09:6d:3f:f3:7a:96:d4:f1:0f:26:
         69:fc:7a:8a:3e:48:9e:32:19:dd:e4:15:7c:c7:79:99:ab:23:
         99:bb:eb:2c:34:78:5d:17:b7:e1:68:6d:41:de:af:0c:aa:80:
         ab:98:cc:2f:95:b8:39:93:6b:40:3a:b5:8e:be:fb:1b:f9:c0:
         3e:61:1d:f0:12:c9:d9:57:a2:87:93:90:2c:6f:ee:8c:4a:32:
         ea:62:f6:a3:09:77:3d:3a:fa:48:18:eb:9d:24:61:42:95:9e:
         54:50:99:a9:1b:4b:65:ba:cc:2a:07:59:f1:fc:be:d7:08:a4:
         1d:5e:ba:f1:3b:50:7c:2f:ed:98:8b:a2:99:81:8e:b4:fe:84:
         a5:6a:d2:92:5a:06:f2:d6:fc:7d:39:f9:80:e8:07:10:b1:90:
         09:e1:5e:f7:0d:e5:8c:85:9d:32:84:83:89:bd:4e:d5:43:d5:
         ac:43:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org