Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e32342e302f32322d3234203d3e203236363137.roa
File:                     3136382e3234332e32342e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          0pDnv2HVZCi/5J36+NFpgyd+CHmf3YESJ4IT16IzyYg=
Subject key identifier:   90:38:29:D8:4E:A9:1B:2A:69:B2:95:C9:C7:38:7D:3A:8D:F3:66:6B
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       1F0216472B9594666EE8AD90775C0C961E353703
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e32342e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 17:45:37 +0000
ROA not before:           Tue 05 Mar 2024 17:40:37 +0000
ROA not after:            Tue 04 Mar 2025 17:45:37 +0000
asID:                     26617
IP address blocks:        168.243.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:02:16:47:2b:95:94:66:6e:e8:ad:90:77:5c:0c:96:1e:35:37:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Mar  5 17:40:37 2024 GMT
            Not After : Mar  4 17:45:37 2025 GMT
        Subject: CN=903829D84EA91B2A69B295C9C7387D3A8DF3666B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:be:2a:d9:32:e3:cd:ce:56:16:7e:7b:34:
                    49:99:f0:a2:9c:7f:db:64:cf:2c:cd:fa:55:0b:70:
                    b4:27:a1:9e:8a:2a:94:94:c5:27:20:d8:d4:e5:42:
                    16:f7:d9:cf:83:36:0e:ff:46:5a:80:74:55:b6:40:
                    f0:1e:9b:b7:3a:20:d2:7d:d0:bb:21:f1:16:a3:2a:
                    85:38:51:ee:34:ce:57:3f:af:0f:27:96:86:ee:a0:
                    38:7f:ca:ba:5f:98:97:f8:45:3e:bc:00:49:2c:ba:
                    e3:be:a9:26:85:75:68:1c:81:0e:fd:63:99:59:2d:
                    c9:4d:72:df:6c:3d:f4:0c:da:f0:40:99:4e:12:85:
                    f9:fe:19:11:bc:20:3d:0d:68:ca:ad:fc:0d:b2:de:
                    c8:9f:b4:a6:f2:d3:1c:73:47:72:e0:1c:65:6f:de:
                    3f:79:af:5b:7d:94:4d:e6:86:94:16:8b:73:49:50:
                    8c:cf:8b:89:7b:ba:2d:87:e9:48:d8:8b:7d:7c:e2:
                    ca:fb:fb:ac:e0:ae:25:2e:ae:ed:19:b2:b8:fc:70:
                    5d:55:2a:41:8c:6e:9a:51:a1:6d:bb:fa:2c:ae:08:
                    9f:c5:53:ad:c1:1e:28:46:c6:cd:ef:4b:f3:d2:77:
                    b1:12:75:27:fc:26:c5:a6:5d:65:19:a1:b7:e3:24:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:38:29:D8:4E:A9:1B:2A:69:B2:95:C9:C7:38:7D:3A:8D:F3:66:6B
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e32342e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:0d:ec:e1:1e:f5:89:d3:74:d1:48:7b:9e:65:6b:0c:95:57:
         b2:e8:8b:88:28:25:f8:4c:70:0e:da:56:0c:28:d0:ad:b7:22:
         79:3c:2a:2c:02:93:10:d3:b3:4a:a7:f8:f5:66:95:6c:ba:f3:
         59:98:a7:f3:f2:43:52:f4:18:35:ac:dd:89:12:ed:ff:22:a3:
         00:b6:e3:93:75:55:fc:ce:a3:bd:2c:b0:ce:30:a1:09:91:e9:
         bb:a4:8f:50:ae:3b:45:a3:9d:4d:b2:a5:12:9c:39:3d:c3:4c:
         dd:bb:b3:5b:59:ac:cb:9d:3d:72:15:57:cc:96:17:54:81:f0:
         70:e2:07:76:44:c4:32:f1:7b:55:d4:ad:e7:4a:53:6a:6b:08:
         a3:40:33:09:d6:f4:a9:6e:7c:36:39:2d:63:42:4a:d6:a1:9e:
         ea:be:ca:86:f1:ae:91:db:26:97:4f:e5:b2:74:91:94:3c:36:
         87:3c:e1:c9:71:87:18:0e:46:e0:68:87:01:f5:37:fa:32:b3:
         95:44:0e:83:8e:ec:15:bb:f0:b1:08:1a:e1:c5:12:64:4d:cd:
         fe:48:34:46:8b:4f:3b:5c:14:7d:7e:f4:57:38:aa:57:cb:25:
         f7:75:ce:03:36:03:c6:19:60:5b:af:53:41:25:d8:eb:aa:1f:
         c1:5c:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:09 2024 by rpki-client on console-ams.rpki-client.org