Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa
File:                     3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          96oUB7aSfISUCaprQimU4je1TitcxVCTeQRSUvovhas=
Subject key identifier:   A1:80:6D:3F:91:DC:AE:70:CB:B6:5C:95:E8:1B:79:E6:F8:91:E6:72
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       740F2509B06E82004EE506C5E23B1E91103F1135
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa
Signing time:             Mon 20 May 2024 13:15:00 +0000
ROA not before:           Mon 20 May 2024 13:10:00 +0000
ROA not after:            Mon 19 May 2025 13:15:00 +0000
asID:                     12127
IP address blocks:        168.243.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0f:25:09:b0:6e:82:00:4e:e5:06:c5:e2:3b:1e:91:10:3f:11:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: May 20 13:10:00 2024 GMT
            Not After : May 19 13:15:00 2025 GMT
        Subject: CN=A1806D3F91DCAE70CBB65C95E81B79E6F891E672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:c6:c2:d1:ad:82:5d:1b:e8:17:fe:a8:de:
                    ca:5c:c4:eb:a5:03:a3:79:f4:83:26:ac:5a:65:f6:
                    2f:6d:cc:82:65:c1:cf:d6:f8:af:dd:06:ed:92:d3:
                    d0:cd:98:df:36:3c:5a:17:22:34:67:49:d2:c8:8b:
                    dd:be:5b:7c:46:91:cb:c8:bd:23:28:17:66:db:9a:
                    8a:3a:5e:c1:6d:8c:ef:c1:45:0b:fe:ab:c3:d9:62:
                    1b:bc:10:26:9c:99:1a:07:eb:09:79:9a:09:19:2b:
                    4f:27:71:48:ec:22:a9:d1:99:79:26:a8:9f:19:38:
                    c9:70:c9:1b:c4:cd:ea:30:79:e9:4b:34:56:a6:0d:
                    80:4c:31:cb:df:ba:a3:49:fb:b0:18:15:2c:63:d5:
                    af:8f:b2:65:1a:b5:cb:72:0c:ca:75:42:08:f5:bb:
                    f9:16:bc:a9:31:e0:1d:70:94:7c:9b:9b:5a:90:fb:
                    d5:40:c9:be:b9:21:3c:96:22:e9:6f:26:a0:a7:02:
                    ce:ab:8f:20:c9:4b:ab:a2:b0:68:bc:c8:a4:43:3b:
                    13:e8:69:43:1c:48:1e:cc:8f:b9:83:27:17:0e:ad:
                    71:ff:37:c6:c3:ba:93:4d:ba:96:e1:6e:bb:23:db:
                    15:07:69:bf:c0:fe:1c:30:65:36:1a:a6:66:6e:3a:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:80:6D:3F:91:DC:AE:70:CB:B6:5C:95:E8:1B:79:E6:F8:91:E6:72
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:d1:0e:d9:d4:0b:d6:a4:1e:f5:c7:ad:45:65:bb:7e:71:
         9d:f2:b6:62:25:56:c3:e6:ca:83:c0:72:30:0b:a1:ae:6f:c5:
         8b:bc:3a:36:0f:a9:76:eb:e2:05:4b:07:3f:31:7f:29:c8:a5:
         b9:01:4c:6d:7e:a5:df:67:c3:70:44:99:1a:48:87:2b:3f:82:
         45:d6:cb:c2:d8:94:2a:61:4b:50:27:77:50:b0:1c:f3:c6:8b:
         ba:5e:80:8b:ac:d2:64:e6:82:ea:47:fe:40:fc:93:9f:33:bb:
         a1:c6:ae:e2:e3:ce:30:a5:1b:93:93:ac:90:27:f4:6b:07:71:
         83:9c:1c:ef:4d:76:8c:1a:8d:0f:70:38:ec:a1:c4:03:b7:ab:
         05:f4:b3:69:e0:03:5d:5e:7e:d5:2f:3f:07:2b:69:de:01:47:
         1a:1d:c4:c7:09:4d:6b:e6:14:5b:41:6e:d1:9b:30:3e:07:09:
         46:01:fe:99:6c:1b:c9:43:c6:ac:01:da:9d:db:d3:4c:a7:88:
         bf:a0:1c:00:cc:85:2f:ac:70:b5:cb:0c:2a:61:35:70:bd:53:
         9f:46:e8:af:54:0d:dd:f2:6c:56:a0:87:50:e7:3c:05:ec:4c:
         56:d2:c6:12:e4:c0:3d:6c:23:98:be:fc:cc:b5:30:79:06:c1:
         00:fd:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:09 2024 by rpki-client on console-fra.rpki-client.org