Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231332e302e302f31372d3234203d3e2036353033.roa
File:                     3138392e3231332e302e302f31372d3234203d3e2036353033.roa (raw, json)
Hash identifier:          nFi5coFnVTB8wj4vwl9IfIL13U/v9GLFSr7KWnN7aiw=
Subject key identifier:   22:A1:1B:8A:E1:8A:7F:5E:64:81:AB:D7:35:5C:41:11:06:23:36:1E
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       74BA63C23ECEFB07BF7496328C968E1EC81A6010
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231332e302e302f31372d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:40:20 +0000
ROA not before:           Tue 05 Mar 2024 17:35:20 +0000
ROA not after:            Tue 04 Mar 2025 17:40:20 +0000
asID:                     6503
IP address blocks:        189.213.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ba:63:c2:3e:ce:fb:07:bf:74:96:32:8c:96:8e:1e:c8:1a:60:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:20 2024 GMT
            Not After : Mar  4 17:40:20 2025 GMT
        Subject: CN=22A11B8AE18A7F5E6481ABD7355C41110623361E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:29:a6:0c:a9:22:e4:2c:fb:12:6a:2e:58:
                    42:21:30:c3:c7:3b:34:2f:01:85:83:9d:6e:70:dd:
                    77:d0:76:37:25:d1:b4:1b:34:7f:b2:85:a3:ca:43:
                    08:f8:f3:2d:cc:51:1d:d0:1b:40:83:1d:c8:41:79:
                    e3:81:66:69:8c:6c:e5:6a:49:8b:5f:80:d4:bb:86:
                    5a:da:d8:d9:a0:5d:72:a4:64:c4:14:5f:d0:5a:f1:
                    ae:e6:fd:b8:0f:e6:e5:d7:af:8f:97:bc:55:3c:38:
                    13:37:b8:1d:9f:b1:b1:c0:8b:b1:5c:64:08:7d:e3:
                    22:b8:75:6b:1b:de:db:c7:d6:26:80:12:43:b6:db:
                    68:5f:4d:f1:5e:4f:df:7e:9b:3c:f4:9c:e2:c3:08:
                    c6:98:4c:f9:be:d4:82:d1:d4:3b:3f:90:94:27:8f:
                    10:50:4e:e4:5e:90:10:59:6e:a1:a9:16:a1:00:65:
                    e9:de:4e:2a:14:d8:d0:4d:bf:87:50:72:9c:0f:f8:
                    e2:9f:00:25:ef:68:bc:26:60:97:f5:9e:78:00:63:
                    fa:75:6b:42:77:d8:b0:27:a9:04:cb:2e:4c:d9:c0:
                    2c:2c:09:f2:fd:d7:4f:7d:72:c4:d0:0f:ea:be:cc:
                    1c:4d:0b:02:56:86:2b:b7:e3:9d:d0:a6:c4:18:60:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A1:1B:8A:E1:8A:7F:5E:64:81:AB:D7:35:5C:41:11:06:23:36:1E
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231332e302e302f31372d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.213.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b7:67:65:38:b0:9b:a3:ba:e0:dc:b0:96:d2:6e:33:8e:fc:9c:
         66:a6:b7:b1:d3:c8:9c:f6:d3:e8:79:ec:3d:f0:a3:c2:07:3f:
         e8:38:06:f2:ac:97:7f:75:76:2f:13:17:08:30:29:c8:0f:1d:
         bf:5b:ec:43:30:86:2f:56:d1:96:8a:66:7b:fe:cc:96:ea:dc:
         d7:63:08:57:06:5c:ab:a9:90:b8:f2:c2:b3:0d:4f:7a:d8:1f:
         ad:66:91:3e:e8:55:5b:d8:7b:01:e7:6a:87:ef:e4:c2:27:1d:
         d4:aa:fc:20:15:4f:6a:1c:9d:61:b9:fe:97:83:e9:4f:44:19:
         24:6d:fd:47:79:38:c9:71:a4:e3:56:a9:62:3e:8b:c5:cc:b1:
         e2:4b:4d:d1:18:ba:ea:64:17:d8:e2:77:44:bb:8f:33:12:11:
         78:42:d3:29:0a:7b:5c:9e:d8:04:08:e8:25:2e:ad:5e:af:3b:
         88:05:0f:19:16:45:cc:6a:f4:81:b0:b6:57:12:45:f6:0b:89:
         52:cc:ef:a5:2d:a5:db:90:ac:f6:47:ca:47:8d:cf:e0:da:1a:
         f8:e1:59:be:8e:f7:03:26:ea:f6:7f:78:58:1a:79:56:cd:6e:
         de:d0:cb:3c:4f:b5:7b:04:40:59:16:54:05:ac:ce:dc:cd:12:
         86:5f:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:32 2024 by rpki-client on console-fra.rpki-client.org