Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa
File:                     3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier:          7YsnJ+ROEItzN79seoYbZoQipPsZHjG8LtdTokXtGaY=
Subject key identifier:   64:55:C6:AB:48:2D:98:2E:D2:E3:50:0C:1B:EF:16:69:B0:F8:BF:2D
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       10607C05F3C15134A5150A378476755882BE2C10
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa
Signing time:             Tue 05 Mar 2024 17:57:38 +0000
ROA not before:           Tue 05 Mar 2024 17:52:38 +0000
ROA not after:            Tue 04 Mar 2025 17:57:38 +0000
asID:                     264770
IP address blocks:        168.194.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:60:7c:05:f3:c1:51:34:a5:15:0a:37:84:76:75:58:82:be:2c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Mar  5 17:52:38 2024 GMT
            Not After : Mar  4 17:57:38 2025 GMT
        Subject: CN=6455C6AB482D982ED2E3500C1BEF1669B0F8BF2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:7c:29:7c:74:72:64:ec:b0:2e:8a:d0:ba:
                    f4:2d:86:2f:3b:c2:80:dc:cf:2c:2b:d5:9a:c5:55:
                    a9:aa:1f:d0:69:bd:02:4e:82:b5:17:13:60:1d:5e:
                    d2:e4:f1:2e:2e:c2:e4:eb:01:fa:7e:76:87:09:f0:
                    0b:d7:13:9a:bf:7c:a9:db:b1:e3:67:c1:e1:35:00:
                    04:c1:0b:4a:e7:af:62:27:7b:06:02:4b:ce:38:3a:
                    06:fc:77:77:11:50:24:61:c7:f3:1b:1d:37:a1:ce:
                    c6:9d:97:50:2d:05:c2:b9:88:25:df:a4:45:16:95:
                    e2:5b:89:6c:b8:f3:b9:24:e2:fc:7b:d6:6d:fe:6f:
                    6b:a2:a3:b7:1d:29:09:ff:7a:f3:3b:94:3a:9c:dc:
                    8e:92:68:04:55:1d:55:66:a8:99:9d:1e:5f:d5:e1:
                    0d:2d:f7:ae:ce:24:cf:70:6d:cf:f3:64:42:b5:56:
                    03:55:d9:61:f6:0d:40:4d:35:8a:80:11:15:06:74:
                    47:f5:2b:5e:5b:b4:ea:e5:df:56:b1:32:cd:0d:44:
                    c3:8d:98:50:83:81:38:56:40:3e:56:e1:16:6b:af:
                    30:25:e7:8d:84:bd:b0:ee:f0:01:4d:e4:c0:01:f9:
                    e8:fe:55:1d:b7:16:22:ae:75:e0:3b:94:e0:f2:79:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:55:C6:AB:48:2D:98:2E:D2:E3:50:0C:1B:EF:16:69:B0:F8:BF:2D
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3136382e3139342e3234332e302f32342d3234203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:66:7a:4d:dc:3d:09:9a:6e:9c:c3:25:53:f6:94:d9:8c:2b:
         bb:4c:93:5d:f4:9a:06:14:12:57:3c:08:be:8b:42:77:9f:a4:
         e1:16:5d:1b:5c:90:ca:6d:48:a9:22:cc:cc:14:88:b0:1b:97:
         ed:bc:f2:ca:83:e8:b1:52:ca:6e:f7:4e:a1:d8:1a:c3:19:35:
         72:9a:7c:c0:de:3a:fd:07:fe:a6:9d:0a:48:28:55:da:fb:b4:
         91:d6:56:3a:3d:e6:8b:ae:d3:82:71:b8:31:b6:28:bd:2f:09:
         0c:65:9c:10:d2:d0:3f:39:f3:d9:fa:12:38:dd:ad:6f:c2:4e:
         f4:15:f0:7d:01:d3:cd:fd:3d:d4:41:d2:0d:c1:c1:b8:05:2e:
         6c:ec:1a:23:c5:34:ed:9a:0d:1c:e1:22:93:56:65:97:c2:34:
         3c:3a:bb:f0:6d:23:14:b6:8c:d6:a4:52:15:e0:66:fc:49:43:
         a3:ad:01:81:37:94:44:25:10:59:89:9c:55:4e:0a:b0:5e:11:
         17:38:aa:68:61:74:f0:3b:ba:15:45:9c:3a:10:4d:bf:83:e8:
         49:eb:81:36:60:89:7a:fe:f3:0f:bc:bf:a2:6a:d4:f1:10:27:
         cd:92:38:34:7b:0d:fb:d9:56:ae:5a:b8:a1:0d:bf:6d:65:6a:
         29:fd:48:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:47 2024 by rpki-client on console-ams.rpki-client.org