Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231322e302e302f31362d3234203d3e2036353033.roa
File:                     3138392e3231322e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          Zv7Yhh627nS3TX4b7rWu+QcrjwY2PtS4DjVG4xNV/fE=
Subject key identifier:   4B:E5:DE:51:E1:79:2D:39:B4:47:F5:5D:F3:F9:A6:BE:8D:27:02:A4
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       7B3468D3D998EFE2AF86DDC5BE90A4AFA44BBD51
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231322e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:40:21 +0000
ROA not before:           Tue 05 Mar 2024 17:35:21 +0000
ROA not after:            Tue 04 Mar 2025 17:40:21 +0000
asID:                     6503
IP address blocks:        189.212.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:34:68:d3:d9:98:ef:e2:af:86:dd:c5:be:90:a4:af:a4:4b:bd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:21 2024 GMT
            Not After : Mar  4 17:40:21 2025 GMT
        Subject: CN=4BE5DE51E1792D39B447F55DF3F9A6BE8D2702A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:52:b9:aa:9c:98:7a:61:9b:45:7d:5d:f9:
                    a2:db:62:4b:ad:d3:80:fe:7a:1e:e5:11:2a:13:31:
                    43:58:ca:81:6f:25:ef:91:60:44:cc:15:0f:ff:af:
                    0c:7a:65:38:01:d0:26:32:49:76:05:cd:ef:18:24:
                    92:29:cb:49:a5:56:36:21:d4:5f:00:de:3e:38:69:
                    26:98:74:c4:ba:17:74:33:de:5c:18:71:40:bb:3a:
                    86:7d:bf:f6:75:a8:30:a8:b3:d7:29:e3:0c:1f:07:
                    f0:c2:b6:6a:76:4f:82:3d:f5:a2:21:e1:87:df:cf:
                    8d:53:36:c6:bb:2c:e4:b5:a9:8d:b5:a1:ce:7e:57:
                    5c:91:d4:33:aa:a9:e5:a9:7a:dc:dd:ee:d6:b6:a9:
                    9e:25:d9:6e:82:25:58:c7:0b:06:01:f0:d7:da:f2:
                    61:61:c5:3a:d9:f9:bc:d3:35:d5:d4:4e:c5:1a:93:
                    af:86:62:10:84:7f:d5:32:60:39:b0:55:52:65:bf:
                    48:db:ee:a6:8c:ab:cf:9e:f8:1d:ec:e2:5d:91:34:
                    1d:65:a7:8a:d5:12:ce:07:28:3c:2f:01:b8:74:64:
                    bc:0e:fd:49:cb:d6:ee:ef:4f:7b:61:d3:63:1c:aa:
                    e0:d3:92:08:b7:c5:65:1f:fc:7c:90:a0:47:24:c0:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E5:DE:51:E1:79:2D:39:B4:47:F5:5D:F3:F9:A6:BE:8D:27:02:A4
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231322e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:57:1d:56:f7:5c:dd:80:4f:1f:a1:eb:4e:ba:0c:0a:83:
         13:8b:55:b5:e8:60:e2:3f:b3:dd:96:5e:24:44:5a:8f:00:12:
         ca:59:dd:9d:81:a9:e2:d1:4d:55:94:1a:bf:85:72:b1:6d:66:
         bd:e6:a4:5b:59:dd:4b:31:62:c7:b8:03:69:d0:7e:82:b7:b8:
         0d:e6:c4:c7:49:c2:52:08:a1:12:4a:4c:a2:98:00:a1:97:e7:
         b5:be:ab:ac:3d:65:5c:6c:d6:9f:55:a8:90:ab:5f:52:82:30:
         db:d5:da:ed:85:0d:29:5b:0c:3c:c0:77:eb:2d:d0:3b:70:d0:
         f5:af:25:74:c4:47:99:5a:7c:21:e0:29:2b:7c:4a:2a:48:2f:
         5a:da:77:4d:9f:32:df:09:5f:73:34:5a:3c:5b:44:45:4d:b8:
         56:e0:82:42:4d:20:28:30:5a:8f:62:b0:c6:b7:13:ce:b2:e0:
         75:ed:f3:a4:65:55:d3:a6:1d:df:ca:26:e6:e4:46:38:9e:cb:
         d1:ee:42:1b:6f:c1:e6:3a:53:d8:ef:01:c6:b1:93:95:0f:43:
         57:fa:d9:b2:fa:97:29:6e:79:73:84:54:a1:44:89:08:6d:4a:
         7f:fc:16:bf:47:d6:62:fc:6a:ca:d4:a3:c6:3b:e5:4f:6e:41:
         f1:cd:66:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:38 2024 by rpki-client on console-ams.rpki-client.org