Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa
File:                     3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa (raw, json)
Hash identifier:          p45eibkAZEm4q5WSbcFyUPNSurYCuey20dlk0aTwN0E=
Subject key identifier:   DF:42:CB:02:DA:C7:F9:0A:01:7E:1C:BF:42:70:53:7F:80:6A:3A:60
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       3182809BB197DDAADBA08DA58E55A5B17B31226A
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa
Signing time:             Tue 05 Mar 2024 17:56:29 +0000
ROA not before:           Tue 05 Mar 2024 17:51:29 +0000
ROA not after:            Tue 04 Mar 2025 17:56:29 +0000
asID:                     264776
IP address blocks:        168.197.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:82:80:9b:b1:97:dd:aa:db:a0:8d:a5:8e:55:a5:b1:7b:31:22:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Mar  5 17:51:29 2024 GMT
            Not After : Mar  4 17:56:29 2025 GMT
        Subject: CN=DF42CB02DAC7F90A017E1CBF4270537F806A3A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:9f:71:fc:ec:0d:d3:3d:9a:aa:0a:8f:e3:
                    84:b3:b4:b5:76:bf:a5:8f:d1:a0:8b:3b:ed:a3:ad:
                    48:3d:16:b9:a1:89:6e:45:5d:b1:e9:e6:8e:ec:ab:
                    d3:5d:e3:38:bf:76:13:e5:94:74:25:15:e5:24:67:
                    1d:09:58:6c:8c:b4:19:bb:45:e5:54:26:1c:95:f0:
                    10:45:3f:28:3c:25:25:3f:d4:f6:b6:9a:c6:bf:0e:
                    84:67:29:98:31:a9:c2:16:d0:c2:fb:71:5a:37:b4:
                    3c:74:7b:cf:14:4c:c6:28:a6:13:17:17:77:b0:ff:
                    08:b3:68:00:1f:05:e8:e8:24:7b:3e:5f:be:fc:f3:
                    97:a8:37:f4:66:d6:b2:7c:0f:1a:b9:11:57:57:f0:
                    7e:03:46:3c:91:26:ef:7c:15:9f:87:8a:f5:e4:15:
                    09:96:27:8f:af:4d:dd:24:44:37:7c:f7:6a:08:49:
                    cd:13:7b:77:a4:aa:09:18:0e:5d:12:64:35:a7:31:
                    a2:24:17:c9:cf:7b:f9:eb:07:38:0e:e3:a2:b3:e8:
                    13:89:cb:2b:6f:07:ef:ab:4e:6f:13:e1:22:93:bb:
                    89:3a:3f:f5:ad:51:c3:75:90:72:0c:6f:be:8d:59:
                    a3:19:92:22:49:68:98:b1:eb:d1:4f:14:b2:ca:33:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:42:CB:02:DA:C7:F9:0A:01:7E:1C:BF:42:70:53:7F:80:6A:3A:60
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3234382e302f32332d3234203d3e20323634373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:85:6c:65:20:0d:4d:37:55:18:b0:84:b1:22:c1:75:51:
         4a:5e:9e:90:8c:13:0c:f9:b1:f8:44:81:e1:ed:c7:20:44:a6:
         e4:96:ad:b2:79:73:60:92:eb:18:64:1f:31:0f:bb:5a:76:1e:
         50:ac:0c:e7:88:68:f0:7c:87:aa:a9:00:15:d3:7e:d7:cc:a2:
         9a:d2:0f:f6:f0:db:ed:2a:cc:e0:cd:bd:6f:55:41:05:33:c6:
         34:9d:f3:81:15:45:91:58:9b:bc:34:d8:e3:a5:aa:bc:e4:eb:
         9e:c1:d8:58:45:8b:c0:a5:1c:2f:55:be:be:2e:6d:ea:2f:5d:
         cc:34:9a:86:f8:ca:b8:b0:f8:62:7d:41:92:5b:2a:3a:15:7b:
         b6:73:20:59:78:e1:c1:ce:46:d6:1c:62:e1:33:41:30:16:4a:
         76:26:dc:a6:b4:b2:87:39:a6:a8:2e:b6:5d:8f:07:e0:61:20:
         d8:00:3c:2e:e3:93:ab:e5:cd:bc:57:ae:6a:13:eb:43:c7:7b:
         ae:bc:93:cd:14:70:98:39:5d:9e:47:0a:20:6a:86:fd:64:ad:
         d7:04:4e:71:ca:e3:2c:31:b5:59:ef:12:be:42:63:bd:34:fa:
         a4:1f:27:e2:08:d9:a3:87:d0:35:ce:50:97:95:ec:bb:ed:d3:
         11:ab:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org