Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131322e302f32342d3234203d3e203237373733.roa
File:                     3136382e3234332e3131322e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          pTy3sjCxVUSPZJBOC5A31r0aVyaBQX7uXNbGR40L4RE=
Subject key identifier:   8C:CE:CD:CA:24:1D:C5:8D:B5:1D:70:7F:6A:A2:F1:C7:37:44:AB:94
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       0BB24511D0D05C839B53336825B32DFC4F92DD8B
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131322e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 17:45:36 +0000
ROA not before:           Tue 05 Mar 2024 17:40:36 +0000
ROA not after:            Tue 04 Mar 2025 17:45:36 +0000
asID:                     27773
IP address blocks:        168.243.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b2:45:11:d0:d0:5c:83:9b:53:33:68:25:b3:2d:fc:4f:92:dd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Mar  5 17:40:36 2024 GMT
            Not After : Mar  4 17:45:36 2025 GMT
        Subject: CN=8CCECDCA241DC58DB51D707F6AA2F1C73744AB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:de:3f:2c:99:1a:f6:10:6c:1a:85:2d:13:
                    cf:d9:79:08:e1:08:3b:41:9e:71:08:89:a0:8f:dd:
                    a2:8a:b0:7a:87:35:c2:8c:f2:7d:57:b9:46:c6:46:
                    95:11:f9:bc:16:26:b2:b0:c6:db:1b:45:3f:29:6c:
                    00:d7:7e:54:a6:1b:76:6d:cf:03:cd:e5:31:e4:ba:
                    98:3b:9e:99:f9:18:8e:c0:d7:6b:ed:28:cb:5e:8f:
                    76:58:57:b0:bd:6a:2d:4d:93:47:58:57:79:e0:19:
                    d0:a0:e6:68:30:3e:92:c1:56:e2:7c:9c:14:db:a3:
                    56:d9:fc:72:e9:eb:c6:3f:57:6b:a7:14:cf:6d:09:
                    9f:e3:18:7d:d2:8f:3e:43:5d:bb:05:fb:cb:0d:f3:
                    ac:cc:35:01:8b:24:93:97:95:39:d1:9d:92:0e:ac:
                    86:3e:e0:12:94:39:63:48:1e:0c:46:e4:b4:93:58:
                    7a:8f:b9:fa:43:c9:93:8c:28:49:70:a9:a7:94:fb:
                    08:84:3b:29:3e:fd:a8:cc:ef:3a:09:aa:e1:ae:42:
                    45:18:5c:42:b1:49:fd:48:aa:1d:1c:9d:cd:95:13:
                    ec:7a:ec:84:ef:eb:c7:ce:ad:eb:9f:33:88:cc:09:
                    29:be:72:10:39:88:38:bf:17:e3:3a:16:3a:9a:c0:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CE:CD:CA:24:1D:C5:8D:B5:1D:70:7F:6A:A2:F1:C7:37:44:AB:94
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131322e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:4e:12:8d:b3:16:57:9d:da:4b:bb:5d:14:f8:21:03:12:
         2a:1f:7e:fc:f1:55:a4:b2:81:a2:cb:e6:ad:c7:8e:4d:9c:aa:
         32:c6:5d:db:bf:ab:2c:04:f0:0a:e9:ea:75:a5:90:f9:2d:16:
         e0:f9:97:56:e6:9b:d0:48:8e:07:3e:a4:b3:41:e8:21:8d:45:
         52:ac:0a:88:55:d8:78:9e:ed:29:ba:85:4d:b7:01:ff:05:6e:
         a1:85:22:a5:c2:b0:49:6e:3a:1c:4b:28:55:db:e9:fb:a1:40:
         64:85:59:74:48:a6:4a:65:1d:eb:d5:e1:28:ea:d5:5c:60:a8:
         bc:f2:d9:07:44:35:86:87:97:1b:c6:5d:5c:68:36:41:26:0a:
         96:e6:c9:3c:40:aa:16:05:ea:96:9c:56:cd:75:b2:59:db:07:
         6c:6d:8d:5c:12:88:41:97:ee:87:46:6d:cf:c9:ff:82:10:a4:
         3e:22:86:84:a3:94:06:55:06:5b:ba:c2:e3:2d:73:13:e2:90:
         f1:9e:b0:f3:bf:3c:a6:33:fb:1e:38:3c:13:93:c2:66:54:03:
         ba:f8:00:74:ae:12:7d:fa:bb:d4:78:68:0e:99:d2:6d:b2:44:
         0a:64:99:0f:0c:80:48:ea:4e:5d:f8:bb:24:11:d6:9a:36:b0:
         07:71:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:30 2024 by rpki-client on console-fra.rpki-client.org