Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138372e3136322e302e302f31352d3234203d3e2036353033.roa
File:                     3138372e3136322e302e302f31352d3234203d3e2036353033.roa (raw, json)
Hash identifier:          eFbvEkDizNl6VFEGPuuaiyX08FPv1VJcE+38UUCWwmg=
Subject key identifier:   F3:EF:D5:DC:48:B6:89:88:DE:7A:99:7C:F1:D9:33:14:28:F6:A8:46
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       2EB54572E00F14CEF56C49C60CA383F274470DB3
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138372e3136322e302e302f31352d3234203d3e2036353033.roa
Signing time:             Fri 15 Mar 2024 00:00:00 +0000
ROA not before:           Thu 14 Mar 2024 23:55:00 +0000
ROA not after:            Fri 14 Mar 2025 00:00:00 +0000
asID:                     6503
IP address blocks:        187.162.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b5:45:72:e0:0f:14:ce:f5:6c:49:c6:0c:a3:83:f2:74:47:0d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar 14 23:55:00 2024 GMT
            Not After : Mar 14 00:00:00 2025 GMT
        Subject: CN=F3EFD5DC48B68988DE7A997CF1D9331428F6A846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8e:bb:78:2e:2f:6d:68:61:ee:3e:87:38:f8:
                    7b:17:32:24:29:68:95:7e:94:1a:69:55:8f:5d:d3:
                    e6:c6:3b:ec:62:09:b4:63:96:39:68:fb:f2:ad:74:
                    56:8a:18:f0:52:69:7e:7e:40:85:4e:8b:3e:f7:cd:
                    3e:5e:0e:5f:3c:75:57:71:05:d3:cf:b4:07:f8:6f:
                    12:29:90:a8:25:5c:09:ca:85:bc:24:0d:e4:01:f2:
                    4d:c3:5b:e2:57:f3:7b:d9:fb:68:d0:0f:94:7e:6c:
                    86:70:97:68:bb:af:fa:39:b3:06:b6:0f:f6:78:b4:
                    f9:e8:82:a6:0f:e0:e7:50:87:63:af:82:b8:35:88:
                    80:74:a3:fe:77:59:16:88:f2:00:a1:aa:eb:68:65:
                    35:c2:98:3c:fc:fd:85:49:0c:ff:5e:18:7f:02:4a:
                    cf:47:c3:15:18:e2:ff:87:4d:cc:b7:d3:76:6d:ac:
                    fd:cb:20:75:69:fc:cb:62:d4:60:21:5a:bc:47:bf:
                    9f:72:43:a3:3f:28:71:8a:bb:30:9f:23:d7:43:e8:
                    02:eb:c0:43:00:d1:fd:dc:1b:e9:1c:f9:bd:07:8a:
                    63:81:5a:05:82:8c:b7:a1:19:02:66:bc:d2:ff:82:
                    8d:74:18:73:c0:d3:07:16:e7:6d:5e:29:38:e0:74:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EF:D5:DC:48:B6:89:88:DE:7A:99:7C:F1:D9:33:14:28:F6:A8:46
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138372e3136322e302e302f31352d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:83:32:98:12:78:5c:35:c2:ad:9a:5e:7b:05:48:65:b7:
         30:d5:2c:73:e2:13:45:cc:a9:e6:61:6d:5b:cb:36:a7:fe:46:
         ee:0f:8f:ad:7b:76:c9:e8:97:2e:2c:17:1e:c0:40:04:32:2d:
         04:62:b7:be:69:9e:30:39:73:de:0d:56:5a:22:c4:41:28:52:
         f2:56:11:51:4a:ff:5f:14:ea:2e:5a:32:ed:7c:02:08:be:3d:
         81:37:22:30:87:ef:dc:5d:a3:98:43:61:c6:a4:ac:c3:03:14:
         11:07:6e:eb:3f:7e:7a:82:85:0f:3a:43:23:eb:67:ee:5e:56:
         6b:92:7c:71:30:3b:dd:10:18:09:05:07:c4:60:39:ae:0e:56:
         8b:15:1f:26:d8:98:a0:15:5d:ea:cc:d0:4a:57:48:5f:62:98:
         6d:ed:f5:7e:ef:3d:b6:d6:a1:f8:9d:c6:52:43:d7:7a:7d:cf:
         05:f6:9d:7e:16:32:66:f9:4d:6c:77:b8:3d:14:8c:47:b4:c2:
         8d:38:3a:61:e1:81:ab:d3:31:35:59:00:78:cb:51:e9:2a:f0:
         93:06:5b:10:63:23:2e:c0:7a:5f:e9:15:7b:49:86:33:b9:3e:
         56:4c:79:d5:69:74:14:ce:07:fa:cd:a2:bc:91:fa:00:8a:38:
         6e:dd:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:57:32 2024 by rpki-client on console-ams.rpki-client.org