Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32342d3234203d3e20323634373730.roa
File:                     3136382e3139342e3234302e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier:          tZEUPXM5ByR4WISpApkTMSuZM5Atop6ce/5pDrp+YxI=
Subject key identifier:   E7:17:93:3C:E0:9D:74:14:CB:5F:41:59:E4:25:49:BF:52:F5:CD:A6
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       43500296E91668A1E6D44491776C72949DE49FC6
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32342d3234203d3e20323634373730.roa
Signing time:             Tue 05 Mar 2024 17:57:36 +0000
ROA not before:           Tue 05 Mar 2024 17:52:36 +0000
ROA not after:            Tue 04 Mar 2025 17:57:36 +0000
asID:                     264770
IP address blocks:        168.194.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:50:02:96:e9:16:68:a1:e6:d4:44:91:77:6c:72:94:9d:e4:9f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Mar  5 17:52:36 2024 GMT
            Not After : Mar  4 17:57:36 2025 GMT
        Subject: CN=E717933CE09D7414CB5F4159E42549BF52F5CDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:df:57:de:80:b7:2e:92:d7:c4:cb:42:56:
                    b7:26:21:6d:5a:cc:f1:86:09:98:c7:09:8a:b8:e1:
                    f8:cb:e9:1e:eb:d0:d2:e3:7e:65:cb:c1:71:2c:9b:
                    89:de:28:1e:48:35:a7:f6:a7:de:50:e5:f7:14:cb:
                    87:92:14:78:0c:b4:2d:20:e5:d7:6b:3e:fa:94:3f:
                    3e:76:ff:9c:30:42:00:19:68:f5:5e:ff:e1:6c:4b:
                    40:8b:cf:53:cd:31:57:5e:b5:fd:46:80:7b:db:00:
                    b3:da:d7:9c:66:ee:1f:71:63:c9:a1:4f:d0:62:63:
                    0a:41:c4:5d:fb:91:e3:e7:23:ae:58:05:46:b7:65:
                    25:b3:41:7f:74:3f:26:d6:79:c8:ff:67:9d:ae:6b:
                    00:88:f7:fb:5f:9b:6d:fe:e6:3b:8c:85:c5:8a:8b:
                    2a:c8:db:ea:d6:59:82:1a:11:7a:d8:78:36:69:0a:
                    eb:c8:2d:25:a1:b9:dd:e1:c6:39:95:5b:2d:28:9d:
                    de:d5:75:2b:c5:a3:3d:e2:30:e9:4f:f0:cf:a4:f6:
                    f5:c5:6c:04:76:c4:a5:ab:5b:d1:67:a9:a4:f7:ce:
                    a6:3e:10:c1:21:49:a1:70:66:43:60:0c:b3:f1:aa:
                    43:2b:e0:eb:e7:c6:a3:b1:1b:93:43:79:0d:e2:e8:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:17:93:3C:E0:9D:74:14:CB:5F:41:59:E4:25:49:BF:52:F5:CD:A6
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234302e302f32342d3234203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:f1:52:02:6f:6b:a4:58:76:24:24:0f:e2:7f:e5:a5:b2:
         33:2f:d7:cb:30:84:43:21:c2:df:71:b3:04:58:d6:d6:ad:3b:
         0a:ac:7d:95:84:85:f6:ad:0a:a4:e7:2b:8b:3b:e5:44:e8:63:
         c0:35:a4:76:25:76:ae:92:08:7b:11:af:91:d5:ea:fa:ae:9f:
         69:60:6e:55:ba:e6:0d:4a:4c:03:34:61:ce:2b:a2:91:b7:c1:
         98:d0:fc:df:70:68:61:c2:49:8e:94:52:36:61:62:8c:bf:7e:
         8b:6d:23:e7:fa:e7:23:0c:43:fd:ef:97:c2:56:bc:05:0b:88:
         5b:6c:0c:da:96:f1:e8:4d:43:47:83:40:d3:d9:76:9d:1f:33:
         c3:09:72:43:e8:21:f8:42:fe:bd:f7:29:88:fb:d9:85:8d:73:
         b9:7c:0c:a7:3a:a2:7d:ca:b8:b0:73:f0:4d:da:3e:5b:30:d0:
         46:67:22:d3:e5:22:93:39:78:b4:77:7d:de:05:d9:be:3d:51:
         8e:b1:6d:55:17:32:18:c4:41:50:15:ea:2d:67:f1:44:f8:ad:
         db:7f:a1:9c:0a:27:ec:8e:29:8c:c6:a9:91:1e:97:35:b3:e9:
         a8:9b:a6:ed:db:c7:d5:f2:af:e5:ff:0f:96:d2:74:52:05:3e:
         4c:bd:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:10:14 2024 by rpki-client on console-ams.rpki-client.org