Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131352e302f32342d3234203d3e203237373733.roa
File:                     3136382e3234332e3131352e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          s9XwY2mBEYndZAhFix27r+KY1fW24YX89PUahTg3APY=
Subject key identifier:   3A:B2:AD:3C:7A:55:79:6B:10:48:85:E6:52:0B:73:F9:D9:FD:A3:D2
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       38D753366CF99218665BEC19EFD37D63730C90CD
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131352e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 17:45:35 +0000
ROA not before:           Tue 05 Mar 2024 17:40:35 +0000
ROA not after:            Tue 04 Mar 2025 17:45:35 +0000
asID:                     27773
IP address blocks:        168.243.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d7:53:36:6c:f9:92:18:66:5b:ec:19:ef:d3:7d:63:73:0c:90:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Mar  5 17:40:35 2024 GMT
            Not After : Mar  4 17:45:35 2025 GMT
        Subject: CN=3AB2AD3C7A55796B104885E6520B73F9D9FDA3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:7c:a1:6c:03:3a:e2:ac:03:e7:23:1f:f3:
                    d7:12:5d:e1:01:58:ff:d3:fe:10:5a:9b:d2:79:07:
                    12:f6:a2:4e:55:b6:05:63:d0:36:53:1f:4f:35:b0:
                    41:c0:13:cc:1f:8a:51:18:96:0a:9a:29:5b:84:f1:
                    8c:3b:07:b3:67:26:a7:e1:1d:1e:d0:b7:ca:1b:af:
                    e8:fd:2c:03:a9:36:60:91:0d:b1:79:c7:a1:4e:95:
                    00:e3:ab:32:95:0e:ea:bb:29:13:b7:42:b3:aa:f3:
                    77:6d:7d:33:da:2e:9f:0d:5a:fd:07:94:57:07:83:
                    12:02:dd:c9:4a:c5:7c:5b:e9:c9:ea:24:3f:14:70:
                    77:65:3b:9a:ad:8d:54:b3:47:93:07:9d:1d:9c:fb:
                    67:80:c8:55:ce:d6:ec:4d:fd:bb:fd:92:89:5f:18:
                    e2:6c:2a:cf:b0:e2:80:0c:7e:35:70:a2:97:65:7a:
                    af:2f:2c:81:d6:61:b1:9f:ed:ab:2b:ef:1c:c5:ae:
                    e4:6e:ad:27:03:20:1f:2e:82:44:1e:fa:06:88:84:
                    21:6f:09:7f:30:3d:02:57:97:16:2d:46:40:8d:2e:
                    40:78:2e:79:bf:3f:08:09:8f:31:b3:8c:06:80:59:
                    3a:ba:26:89:94:80:01:bb:52:a6:62:54:5f:5b:7a:
                    f7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B2:AD:3C:7A:55:79:6B:10:48:85:E6:52:0B:73:F9:D9:FD:A3:D2
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131352e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:8d:a3:ad:32:43:0a:90:50:72:fd:58:b1:0d:68:4c:04:45:
         76:41:e7:b4:1e:c8:d5:ce:ca:50:d8:65:d8:9e:5d:1f:2d:a2:
         46:34:02:3b:55:58:84:3c:9f:2b:d9:45:95:3f:51:21:38:01:
         3b:fe:1d:39:fd:7f:eb:eb:99:41:cc:47:26:53:b5:54:37:e0:
         73:7d:bc:25:50:28:8c:06:03:52:6c:48:d3:02:8d:1b:5b:05:
         f4:95:00:17:ea:45:56:49:4b:75:60:7b:44:01:78:f7:bc:35:
         f9:5a:2a:8c:49:b6:fb:23:d7:a7:03:fe:f7:01:ad:d3:97:22:
         49:bb:ad:a6:3a:42:c8:59:d1:85:a4:bd:cd:bb:ff:2c:b6:94:
         b5:1a:8d:a5:b9:7d:9b:6c:c5:80:5f:ba:91:32:cb:00:92:27:
         5f:c1:12:09:2d:88:6e:0f:d1:0d:24:82:dc:26:4e:68:e5:3a:
         db:56:cf:e7:7e:e8:ba:f3:46:d1:b8:31:8a:db:44:25:7e:00:
         be:13:18:f8:89:6e:b9:86:3a:0c:fb:4d:b6:67:8a:a7:99:e0:
         88:2a:a3:2c:0d:07:b1:72:46:19:4f:e2:16:61:2e:bc:a7:0f:
         4e:44:6d:23:19:73:cc:48:70:05:73:f4:71:8d:07:22:05:44:
         58:ec:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:42:08 2024 by rpki-client on console-ams.rpki-client.org