Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e20323632353839.roa
File:                     3135322e3233312e32362e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          zx4x/7Y1Uy0vKFbYk6k5x7/OoyYc8wQO0xdqiDzcyHg=
Subject key identifier:   E6:0E:AF:52:C9:A3:33:8A:1D:5B:89:74:1E:2D:83:D8:BD:6C:65:09
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       14C65D9DAF05E1F0C7C17E1B67FB886FEF63343A
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:16:28 +0000
ROA not before:           Tue 05 Mar 2024 18:11:28 +0000
ROA not after:            Tue 04 Mar 2025 18:16:28 +0000
asID:                     262589
IP address blocks:        152.231.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c6:5d:9d:af:05:e1:f0:c7:c1:7e:1b:67:fb:88:6f:ef:63:34:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Mar  5 18:11:28 2024 GMT
            Not After : Mar  4 18:16:28 2025 GMT
        Subject: CN=E60EAF52C9A3338A1D5B89741E2D83D8BD6C6509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:ad:5c:0b:58:0d:4b:ca:17:49:e9:7b:0d:
                    4d:5d:a6:10:47:64:e3:e2:32:f7:9c:53:dc:0a:ac:
                    e9:60:af:76:82:d0:19:a2:6e:ff:82:ba:7d:fc:69:
                    b9:e5:9d:13:c3:5f:b8:73:4f:c6:44:b1:7a:01:73:
                    e9:9d:b8:49:d5:39:e3:1b:03:57:b2:d1:c6:15:83:
                    13:44:0b:27:c6:01:7d:d2:c6:9a:83:25:f5:20:8a:
                    54:4d:ae:9c:a1:9d:81:c9:13:c8:48:60:bd:a3:a9:
                    a5:4e:2d:02:35:08:4b:9e:7f:bc:85:de:bc:62:49:
                    e0:2c:08:e6:11:e2:37:13:f9:ed:35:4f:9f:7d:19:
                    f6:ee:41:08:44:0b:90:d3:65:52:2b:30:dc:9d:0e:
                    c6:62:b4:68:2c:42:12:10:0c:3f:3d:a3:b9:8b:22:
                    96:10:c4:d2:5a:e7:44:06:c9:fd:d4:ec:92:75:b2:
                    b3:c1:78:20:6d:2d:1d:36:f5:ee:c7:f7:9d:14:3f:
                    79:7d:ab:83:b2:4c:2a:fe:8d:be:71:43:a1:ab:a1:
                    28:eb:7f:01:fc:85:1b:8f:fc:4f:2b:3c:75:aa:a1:
                    9f:ad:4c:75:df:81:e9:f5:6a:5c:90:7b:f2:e1:01:
                    28:d6:86:ae:1c:cd:7e:69:73:dd:de:1d:47:08:94:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:AF:52:C9:A3:33:8A:1D:5B:89:74:1E:2D:83:D8:BD:6C:65:09
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/3135322e3233312e32362e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:13:2b:bf:9b:c0:8c:17:5d:ee:15:88:f8:00:c3:cc:46:19:
         65:8d:b6:82:45:91:7d:c1:45:51:5d:7e:2c:bf:d5:82:f7:7d:
         47:b7:7f:ae:d8:bc:66:f2:d9:cf:5a:35:29:3d:96:3f:2c:8f:
         ed:36:f0:28:36:be:55:14:00:8c:7d:a0:e3:79:6b:d0:40:b5:
         5e:f5:1d:3d:a9:9c:39:2c:ac:78:7e:1f:e7:ff:19:bb:e7:ff:
         5e:aa:40:f4:29:67:c5:20:af:df:13:0d:f7:85:34:af:ce:86:
         50:d1:0d:f6:08:80:0c:c3:de:f3:0b:de:27:5c:28:31:cb:c1:
         a2:a6:01:50:7d:d9:e8:95:04:51:75:89:a8:f3:d4:44:89:1f:
         a0:97:10:9d:b3:c6:13:49:e4:e1:6f:70:05:88:13:27:da:80:
         82:60:3a:82:e9:7b:b0:eb:4c:06:04:a9:fc:cf:b6:2b:13:ea:
         aa:f1:2f:47:31:01:6b:92:9b:58:38:9f:9e:99:3b:7c:6a:82:
         69:f4:95:fc:18:95:12:36:4c:a1:06:90:6a:a6:b8:de:c4:79:
         27:1b:ad:2a:0b:65:c8:88:2d:8a:81:c1:18:b9:62:d9:db:95:
         3c:c3:31:20:08:24:7d:fe:f9:ea:c2:7b:97:fe:53:de:37:d7:
         27:a3:ad:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org