Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38342e302f32322d3234203d3e20323633323138.roa
File:                     3136382e3234332e38342e302f32322d3234203d3e20323633323138.roa (raw, json)
Hash identifier:          YbVtWW+a6sYlgilrgIrbrmbQukTQG4MJNzDj6Wy4dy8=
Subject key identifier:   8F:76:8B:04:C1:A3:9D:60:9D:D4:C1:19:21:50:14:37:DC:D2:AE:12
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       72A6C1C948837FDED6A8F683D83D697156EEB20C
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38342e302f32322d3234203d3e20323633323138.roa
Signing time:             Tue 05 Mar 2024 17:45:38 +0000
ROA not before:           Tue 05 Mar 2024 17:40:38 +0000
ROA not after:            Tue 04 Mar 2025 17:45:38 +0000
asID:                     263218
IP address blocks:        168.243.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a6:c1:c9:48:83:7f:de:d6:a8:f6:83:d8:3d:69:71:56:ee:b2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Mar  5 17:40:38 2024 GMT
            Not After : Mar  4 17:45:38 2025 GMT
        Subject: CN=8F768B04C1A39D609DD4C11921501437DCD2AE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:3f:dd:a7:e1:21:29:2d:b9:66:e1:ef:12:
                    88:d6:04:06:8d:44:0e:f8:18:2d:03:aa:8d:a5:6b:
                    06:ee:68:40:d1:f9:12:36:2a:1e:84:7a:67:f9:80:
                    ba:5c:3a:65:12:93:48:c6:01:c4:3e:38:fc:68:32:
                    a4:2a:60:bd:31:12:04:45:8e:27:fc:3f:d4:59:ed:
                    7c:ba:bc:ba:ea:ac:ae:52:35:19:6f:6e:b6:a1:e7:
                    d7:5a:4d:b3:fb:ff:9c:b9:85:aa:c4:dd:5b:4c:0d:
                    40:9b:3c:0a:ba:94:bd:4b:06:80:d8:dd:f1:fd:0a:
                    76:5a:c7:77:98:78:78:68:58:f3:8d:49:6e:33:5d:
                    1c:bb:21:67:89:b5:a9:52:0d:05:bf:1c:dc:f4:ef:
                    c0:28:04:fd:e9:b7:b8:81:e9:8c:34:7b:32:34:c0:
                    20:c4:0f:a1:c6:ea:11:b8:67:3e:03:f7:73:cc:ab:
                    b5:ce:79:d5:15:bc:7e:4d:df:fb:35:2c:d5:51:0f:
                    1d:e1:60:c8:07:cd:5c:c3:d1:ef:19:6e:f9:8e:2d:
                    96:9e:df:1c:9b:84:f2:59:93:61:3d:17:38:6b:ea:
                    a3:6b:15:c1:b7:4c:98:4e:06:1a:36:fb:61:04:93:
                    a6:06:78:82:f9:6b:20:9f:19:e9:19:5a:40:83:d7:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:76:8B:04:C1:A3:9D:60:9D:D4:C1:19:21:50:14:37:DC:D2:AE:12
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38342e302f32322d3234203d3e20323633323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:ec:71:d4:35:99:2f:04:71:78:cc:71:ed:33:cf:2b:c5:12:
         9f:6e:32:62:6c:a2:00:72:de:17:68:bc:01:b9:bf:0f:1c:9b:
         23:37:97:04:3a:a9:69:91:b8:d0:e6:a9:f4:85:62:4d:5a:2e:
         59:89:3b:b2:c5:a7:57:be:2d:34:1b:40:cc:07:54:ae:3c:05:
         24:3f:aa:b8:e2:f3:bb:d4:38:af:83:76:83:66:10:e8:37:ce:
         85:f6:69:94:59:a6:8e:e5:7a:64:d4:79:e9:34:51:0c:ee:95:
         5a:23:ab:57:4b:93:c1:fe:97:7e:33:44:19:d3:00:b6:3b:e4:
         0c:ea:ff:a5:78:33:56:51:5d:6e:32:a4:9d:32:4f:b4:bf:c2:
         b4:10:61:e8:2a:5c:59:31:ed:68:e6:e9:42:41:56:d1:0e:72:
         3d:f2:ac:34:9f:9a:27:d2:35:51:96:5f:1d:d1:8b:30:13:15:
         16:22:28:52:97:48:f5:d9:79:e0:eb:4c:5e:2d:d9:28:cf:e3:
         d5:71:f6:8e:5e:ba:21:e7:39:ee:b0:d9:b2:45:d2:e4:a7:36:
         00:1d:ee:6b:7c:73:24:a9:49:f4:ff:54:e6:03:b4:6a:3f:41:
         4a:db:51:4b:b9:b7:18:00:59:70:3f:2d:54:de:b6:93:1e:1a:
         83:39:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:04 2024 by rpki-client on console-ams.rpki-client.org