Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa
File:                     3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (raw, json)
Hash identifier:          qUHzQx06QG2GPvy4ON0/Z7bPBdhbRW61el74dEs8TD8=
Subject key identifier:   1E:70:2F:FA:CC:18:51:EA:91:95:89:B6:F3:4D:55:2B:6B:C6:2D:E1
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       0463AE0929D8090A6571D592500CC84933DCB462
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa
Signing time:             Tue 05 Mar 2024 17:56:29 +0000
ROA not before:           Tue 05 Mar 2024 17:51:29 +0000
ROA not after:            Tue 04 Mar 2025 17:56:29 +0000
asID:                     52507
IP address blocks:        168.197.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:63:ae:09:29:d8:09:0a:65:71:d5:92:50:0c:c8:49:33:dc:b4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Mar  5 17:51:29 2024 GMT
            Not After : Mar  4 17:56:29 2025 GMT
        Subject: CN=1E702FFACC1851EA919589B6F34D552B6BC62DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:bc:7d:03:b2:b7:bf:ba:32:3e:a5:5e:9f:
                    b5:60:3e:7e:3e:67:5c:3c:d6:a1:a1:d5:d1:c4:b8:
                    da:2f:78:10:28:3b:11:42:a2:41:18:52:d6:9a:ad:
                    39:63:25:e1:46:f3:31:b7:06:e5:54:e8:4a:d4:91:
                    d4:3c:4a:63:ea:65:59:45:51:ac:f4:d9:4c:6d:7c:
                    96:30:0c:a6:7e:6c:9e:51:d1:61:80:4c:ee:ab:b3:
                    8f:42:79:dd:79:4f:d9:b4:2b:d7:12:cf:c2:78:be:
                    11:ac:3e:85:80:01:9c:fd:d1:d9:77:dc:d0:3e:5b:
                    73:09:21:ca:a4:96:0e:94:ff:99:3b:c5:2e:93:d7:
                    d7:2c:d2:74:d3:d9:bb:01:55:ea:54:1d:86:06:14:
                    8a:b9:66:44:4f:33:62:a8:30:76:ac:67:be:28:bb:
                    04:0f:18:d0:1e:ae:e9:93:16:05:95:8b:e9:ef:9c:
                    3e:d1:52:ce:fb:c7:04:e6:a0:b5:63:63:05:7f:61:
                    6c:98:89:61:d9:33:89:e9:1d:2f:a5:96:7b:d7:2d:
                    25:b1:21:11:65:39:52:6a:0a:74:b8:4d:31:33:64:
                    9b:9e:d3:7c:7b:5b:63:30:24:63:57:7a:e7:0f:1d:
                    e0:af:86:de:85:bb:e1:5e:2c:c7:80:ef:17:09:e8:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:2F:FA:CC:18:51:EA:91:95:89:B6:F3:4D:55:2B:6B:C6:2D:E1
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:32:be:f0:26:53:06:0d:94:65:0c:9d:4d:94:3d:7b:54:6e:
         f0:e5:0c:86:fd:90:6d:c8:4d:24:b0:7f:43:b7:4f:a4:58:5e:
         00:3f:fc:06:2d:61:44:ff:03:cf:a1:0d:79:93:b5:51:ca:02:
         28:1c:48:e2:5b:9e:28:80:a0:dd:16:dc:c1:a7:48:db:60:f2:
         db:62:3e:97:ef:7a:36:45:b3:34:b1:0b:d3:10:03:0e:f6:23:
         1e:91:36:96:83:66:8e:29:16:04:a7:98:91:00:56:c1:a0:b6:
         7c:73:59:a6:2c:06:8a:9a:65:8c:9c:45:68:51:03:2e:0c:58:
         31:a1:47:39:60:89:1b:fd:4d:da:e5:da:8a:8a:f5:65:32:a6:
         9e:94:ae:13:0f:4f:50:8b:5c:1e:67:55:16:fb:05:7a:6f:b0:
         a9:2b:10:6c:84:08:a3:6d:fe:23:94:df:57:bd:bd:cd:b3:32:
         69:a1:3d:a8:47:f0:fc:81:26:e0:f7:ab:8c:7a:c6:a1:9b:69:
         1e:1f:ff:f5:11:27:90:88:19:63:96:36:c9:68:02:3e:fb:07:
         dd:b9:4e:6c:8e:fb:5d:a1:2f:f9:d3:0b:41:d6:cd:7f:82:fc:
         01:dd:7d:f6:e7:27:13:41:1a:0e:93:a9:98:43:ed:27:74:8e:
         a7:42:d0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:44:41 2024 by rpki-client on console-ams.rpki-client.org