Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133362e302f32342d3234203d3e203238303637.roa
File:                     36342e32382e3133362e302f32342d3234203d3e203238303637.roa (raw, json)
Hash identifier:          DnKWN8lBaoZJRm/ysciOK8vvFZz5Uu6jDteNOKdW7Sg=
Subject key identifier:   99:06:8C:1A:58:0F:6C:3D:FD:28:2A:4B:B9:8A:D2:7E:03:6A:B8:09
Certificate issuer:       /CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
Certificate serial:       7A2CAF63812D811F11F393AB8A23C452B92808B2
Authority key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133362e302f32342d3234203d3e203238303637.roa
Signing time:             Tue 05 Mar 2024 17:48:42 +0000
ROA not before:           Tue 05 Mar 2024 17:43:42 +0000
ROA not after:            Tue 04 Mar 2025 17:48:42 +0000
asID:                     28067
IP address blocks:        64.28.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2c:af:63:81:2d:81:1f:11:f3:93:ab:8a:23:c4:52:b9:28:08:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30
        Validity
            Not Before: Mar  5 17:43:42 2024 GMT
            Not After : Mar  4 17:48:42 2025 GMT
        Subject: CN=99068C1A580F6C3DFD282A4BB98AD27E036AB809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:58:6d:51:b6:62:7d:fd:01:a4:33:66:94:
                    7a:a1:16:5f:5b:9a:34:0b:d9:73:dd:ac:b1:de:d5:
                    b4:e4:e0:a8:b7:76:eb:f4:2d:a4:84:f2:0f:f3:61:
                    39:fb:ce:6c:77:c8:e5:5f:8a:0d:8d:92:6b:73:39:
                    3d:15:72:84:1a:e3:40:19:57:34:f7:54:34:08:9e:
                    83:3c:90:a9:78:94:8b:8f:36:7f:be:e6:3e:29:3b:
                    9a:1a:bf:6d:71:a2:08:2a:10:41:68:c4:53:28:de:
                    34:3f:de:ff:59:1c:e4:1b:d7:7b:28:2a:c1:dc:b4:
                    06:67:0e:54:a6:5e:33:31:8c:6c:a8:07:20:ed:4b:
                    3b:2b:03:b8:2e:d9:f4:1f:45:8a:74:e8:11:95:66:
                    bf:02:68:c5:b8:82:e7:f5:b5:0b:b3:a1:6a:2f:39:
                    9a:6e:e9:07:0e:83:6f:38:64:92:aa:58:11:34:51:
                    6a:09:2b:d7:92:9e:02:20:95:de:a7:bb:7c:59:4e:
                    3a:25:a1:28:6f:5e:04:84:43:e9:e9:58:1d:02:0c:
                    44:b7:ee:13:90:fd:21:86:8c:40:55:a8:12:3a:a2:
                    d4:d0:b8:64:b2:f3:0a:70:66:71:a0:29:9e:84:44:
                    09:15:67:0a:ec:bf:21:1a:46:55:7d:7e:a3:ab:8b:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:06:8C:1A:58:0F:6C:3D:FD:28:2A:4B:B9:8A:D2:7E:03:6A:B8:09
            X509v3 Authority Key Identifier:
                keyid:8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/36342e32382e3133362e302f32342d3234203d3e203238303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:b4:0c:f7:6c:ef:82:56:8d:16:6c:46:98:aa:24:5a:57:a2:
         4b:ef:48:9b:49:07:79:ce:4b:89:de:51:31:ff:7e:ae:09:1d:
         78:92:a5:b5:35:20:f7:7d:2a:9b:07:23:61:35:a0:9c:00:18:
         65:a8:5a:f0:2e:cd:2d:07:f0:93:ed:85:f8:47:13:94:2c:41:
         12:d7:26:ec:9f:91:79:34:be:3d:6c:9a:8c:4a:aa:0f:75:7e:
         46:18:c6:b7:80:65:a4:51:15:d4:be:2b:3e:fc:13:69:a0:28:
         b4:66:11:c6:2f:71:12:5c:fd:12:cf:72:6f:a2:a0:e3:1c:77:
         81:7d:49:a3:49:90:bc:4d:6b:4b:ba:d1:81:9c:ba:48:fc:c9:
         c5:a0:26:60:45:d1:93:40:7d:14:76:bd:a4:a3:be:28:b9:80:
         f6:de:9f:84:96:a1:d0:86:08:e6:4c:37:a8:2e:40:78:da:72:
         87:63:39:c9:d8:83:e9:dc:91:7b:70:51:b9:33:4a:ea:cf:b7:
         17:d8:10:7a:72:11:4f:c8:8c:a0:80:fd:8b:33:64:08:46:8c:
         10:68:8b:c1:29:15:e3:c5:09:c2:ab:9e:b8:ac:6c:f9:59:93:
         53:8b:31:62:bb:f0:63:54:5e:8c:a4:2a:ab:24:e6:1e:86:aa:
         6e:4a:eb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:33 2024 by rpki-client on console-fra.rpki-client.org