Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32342e302f32342d3234203d3e20323636383737.roa
File:                     3135322e3233312e32342e302f32342d3234203d3e20323636383737.roa (raw, json)
Hash identifier:          xjafGG0MMAsxsbw5cDDVwAdxda3R8zKWC3+qeQDFCH4=
Subject key identifier:   7F:21:EE:44:61:85:37:61:70:5A:C1:63:DF:B4:90:E5:94:A4:F8:57
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       70396C405521D29290F9D1A5D7170390569F7D4F
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32342e302f32342d3234203d3e20323636383737.roa
Signing time:             Fri 09 Aug 2024 20:40:01 +0000
ROA not before:           Fri 09 Aug 2024 20:35:01 +0000
ROA not after:            Fri 08 Aug 2025 20:40:01 +0000
asID:                     266877
IP address blocks:        152.231.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:39:6c:40:55:21:d2:92:90:f9:d1:a5:d7:17:03:90:56:9f:7d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Aug  9 20:35:01 2024 GMT
            Not After : Aug  8 20:40:01 2025 GMT
        Subject: CN=7F21EE4461853761705AC163DFB490E594A4F857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:ae:d2:82:a7:7b:d2:c1:b1:6a:74:3a:c9:
                    ec:5a:dc:29:a9:49:cd:bb:16:ea:25:6e:b5:3a:a8:
                    66:65:9d:2f:24:ec:53:3a:26:19:26:c2:29:83:0d:
                    30:2a:25:94:52:3b:da:c0:19:f2:21:76:f4:88:a9:
                    7d:14:32:6f:0d:d8:73:0d:6a:61:dd:3c:67:de:41:
                    7b:cf:1e:25:d7:0c:ae:c6:ca:bf:f6:33:c4:44:c4:
                    d4:b8:a5:55:fe:7b:c7:0a:77:65:6d:42:81:3c:e5:
                    7b:a0:03:b1:8a:5b:3f:fa:a0:d1:52:2f:26:81:0f:
                    81:56:8e:41:42:71:10:20:b4:63:22:c6:e6:c8:1a:
                    0e:9c:31:e0:3b:04:2c:b3:91:cd:ad:ea:44:2a:66:
                    f0:16:17:f9:11:cc:7b:e2:5d:7e:23:20:00:9c:97:
                    1b:e0:3b:12:65:bf:cb:ce:0c:1c:77:3f:6b:16:4e:
                    d2:31:93:98:e0:d4:c0:2d:64:79:02:a0:d7:79:41:
                    be:c0:a1:1c:6b:85:90:5c:a5:38:56:19:ec:3e:e3:
                    0e:28:1e:d2:93:24:29:15:c7:2b:6d:b1:66:3b:e9:
                    09:5f:38:bc:a7:38:ff:63:89:19:ec:3b:21:f2:fc:
                    33:7c:8d:4d:70:de:0c:e4:d2:24:99:56:24:93:fb:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:21:EE:44:61:85:37:61:70:5A:C1:63:DF:B4:90:E5:94:A4:F8:57
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32342e302f32342d3234203d3e20323636383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:b8:63:57:df:2c:3f:5e:6f:fa:f9:cc:c4:19:5f:34:3c:a3:
         77:d0:3e:9b:37:55:66:39:40:9f:65:74:81:a4:c9:4d:f5:8f:
         71:50:88:0f:6a:cb:47:58:00:15:34:19:d6:7b:aa:2a:53:7f:
         29:ec:4d:34:83:25:bf:94:33:9b:f5:f5:1d:7f:d1:4f:5d:e6:
         08:14:f8:02:79:39:b7:90:72:93:bf:67:08:40:ec:c4:b0:19:
         85:13:48:db:07:fd:6a:06:5e:61:86:fc:59:b1:db:30:37:95:
         15:88:ca:24:ad:58:c1:f3:4d:71:a8:3f:07:e9:88:56:a8:4d:
         51:eb:25:8e:f8:9b:1a:92:5b:88:0b:84:db:90:a4:4a:78:44:
         f1:b5:5a:c1:4a:3e:8d:96:66:54:13:75:2b:cb:ed:5d:97:05:
         03:06:22:57:c7:86:ad:6b:4e:9d:80:2d:7a:c8:d4:7b:56:b2:
         08:3e:cc:0d:a9:7c:a2:ed:79:c6:90:56:9a:34:58:ba:50:74:
         1e:76:1c:11:64:a9:00:4c:77:07:c5:94:e1:6f:dc:c7:fc:d0:
         82:48:c9:45:29:f8:a3:b7:46:7a:ef:53:33:e0:84:1a:3a:1b:
         76:83:ea:48:32:42:c4:b6:e8:15:b6:6a:f7:0f:04:24:ce:91:
         9c:e6:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org