Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32322d3232203d3e20323634373730.roa
File:                     3136382e3139342e3234302e302f32322d3232203d3e20323634373730.roa (raw, json)
Hash identifier:          MvagGJPL5s/iX6I6kLKUro+mIU85LGshGYsbYcP+nuM=
Subject key identifier:   65:09:11:C6:45:65:14:35:5F:67:EC:8F:84:BF:B2:E4:1F:A5:53:91
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       796854C6286982EBA1081D1F5586E4C0B71FFF68
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32322d3232203d3e20323634373730.roa
Signing time:             Tue 05 Mar 2024 17:57:37 +0000
ROA not before:           Tue 05 Mar 2024 17:52:37 +0000
ROA not after:            Tue 04 Mar 2025 17:57:37 +0000
asID:                     264770
IP address blocks:        168.194.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:68:54:c6:28:69:82:eb:a1:08:1d:1f:55:86:e4:c0:b7:1f:ff:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Mar  5 17:52:37 2024 GMT
            Not After : Mar  4 17:57:37 2025 GMT
        Subject: CN=650911C6456514355F67EC8F84BFB2E41FA55391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:48:94:67:4e:f7:63:b9:bb:47:4e:3e:ad:2c:
                    65:0c:f8:97:97:59:34:02:94:2f:c2:c7:94:bb:56:
                    09:6f:cd:41:a1:b5:53:c3:a0:27:12:c9:6c:4e:eb:
                    11:aa:60:2f:98:05:dc:f5:27:30:a3:c4:a1:f2:4a:
                    62:7b:76:a0:4b:08:37:70:51:29:11:be:52:95:3c:
                    0a:47:92:ea:c6:df:9b:1e:b8:90:57:52:28:0b:fd:
                    1f:10:24:60:42:1f:6e:ca:f8:ac:da:d6:a9:c4:00:
                    c3:a1:03:ad:c6:c1:51:ce:92:6c:de:4e:20:bb:64:
                    ff:be:bf:f7:69:0a:07:5a:59:b0:cb:d3:78:74:72:
                    f0:3e:c7:0c:dc:86:c2:99:05:31:7b:c2:d9:3c:83:
                    43:6b:1a:87:c0:59:dd:66:fb:6e:69:85:7b:63:0f:
                    b7:8e:bd:3d:87:8e:3e:1c:f7:57:4e:c2:b4:d5:57:
                    7f:4c:00:b8:14:26:28:5f:1f:8d:ad:4d:ef:ae:83:
                    cc:6c:0d:55:39:eb:a2:0e:fe:d7:ed:fd:0c:20:5d:
                    42:f2:41:11:8d:22:2f:da:9a:a7:92:6b:aa:ce:54:
                    69:ad:ce:6a:8e:e1:c6:f9:b6:80:e8:a4:c7:6e:2d:
                    76:a1:5f:1c:60:b7:33:2b:bb:3a:89:d0:22:f1:86:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:09:11:C6:45:65:14:35:5F:67:EC:8F:84:BF:B2:E4:1F:A5:53:91
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32322d3232203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:4e:b2:c5:ed:a3:20:55:b8:ae:ec:32:f6:4a:e9:11:cf:56:
         43:9a:45:5e:72:6d:a3:1a:de:d1:54:f9:d3:fd:dc:c9:d6:ca:
         f7:42:b3:92:f2:5e:f1:2a:1d:54:6f:46:48:ee:5f:9b:e7:26:
         76:73:6b:c4:47:d2:9e:b4:a4:52:48:96:00:d6:3a:cf:52:c5:
         4c:5d:a6:4b:85:c4:ae:d3:49:b4:69:cb:d3:47:2a:6f:ef:36:
         da:29:ab:73:b4:c6:a4:15:e8:6a:4e:5c:1c:e4:26:19:2d:7b:
         e8:1e:07:03:e7:69:6d:23:bd:88:07:99:61:75:49:99:e8:93:
         04:18:19:0b:86:d9:bb:51:94:45:da:54:2a:6f:ec:35:92:45:
         62:38:c5:ac:0c:e2:96:3c:6b:ee:93:71:97:39:d9:4b:fe:ad:
         39:9b:73:c9:23:7b:2c:15:89:e0:6c:9c:68:94:ca:cc:c1:90:
         58:f7:e3:c9:14:bf:05:ea:25:e6:fc:cb:38:82:70:28:2b:c1:
         7e:c3:76:c6:48:c6:85:c5:8f:17:50:9f:a9:2d:e1:73:18:79:
         d5:86:61:ab:be:14:5b:1b:36:59:78:71:3c:b6:0f:6c:cc:fe:
         ab:af:b1:33:53:8d:ce:09:4f:b4:ac:80:35:21:9e:8d:a8:bf:
         4b:4b:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:23:55 2024 by rpki-client on console-fra.rpki-client.org