Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136382e3139352e37362e302f32322d3232203d3e203532343439.roa
File:                     3136382e3139352e37362e302f32322d3232203d3e203532343439.roa (raw, json)
Hash identifier:          cyNM9Ji8QxViZ1wOaJWA0vUHqNjvJ47WJSuyk2DdOyg=
Subject key identifier:   1D:FF:CD:7C:56:E1:8A:7F:80:79:E5:A3:40:C2:6A:B7:6F:E9:AF:66
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       1FE8E9C319736EB2B0F9004458AAA1E00705BA51
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136382e3139352e37362e302f32322d3232203d3e203532343439.roa
Signing time:             Tue 05 Mar 2024 18:06:41 +0000
ROA not before:           Tue 05 Mar 2024 18:01:41 +0000
ROA not after:            Tue 04 Mar 2025 18:06:41 +0000
asID:                     52449
IP address blocks:        168.195.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e8:e9:c3:19:73:6e:b2:b0:f9:00:44:58:aa:a1:e0:07:05:ba:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Mar  5 18:01:41 2024 GMT
            Not After : Mar  4 18:06:41 2025 GMT
        Subject: CN=1DFFCD7C56E18A7F8079E5A340C26AB76FE9AF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dc:43:3f:e0:5b:01:3c:92:57:3f:68:ef:5f:
                    53:61:40:b5:88:48:43:a9:58:da:11:22:0c:31:39:
                    c0:e9:ae:c7:65:33:a3:49:1b:98:58:9d:5b:03:08:
                    fc:59:78:96:e1:0b:7f:54:59:04:6f:17:8e:33:06:
                    71:c0:76:2a:a9:57:c1:7c:19:b0:b7:c7:e4:8c:b1:
                    3b:74:fe:77:ba:1b:b5:9c:4d:c8:b5:8d:34:ad:72:
                    39:2b:49:ef:3f:35:dc:ce:42:0b:bf:35:7a:06:a5:
                    4d:4c:35:e5:1c:ed:8d:3f:71:98:d3:4e:a5:5f:d2:
                    47:af:d9:cc:9b:5f:23:ab:f2:42:ea:dd:90:71:f1:
                    39:4e:c2:6f:45:62:21:aa:96:18:c1:6c:fc:0e:f6:
                    00:0d:1a:1a:58:d9:5a:3a:10:3c:0c:4c:cc:c9:2f:
                    3a:15:bd:eb:22:c5:bf:ea:f3:28:6d:38:83:ed:09:
                    1b:ad:d2:13:21:b7:44:3c:3d:53:fb:b8:09:03:68:
                    44:1c:66:04:10:b2:66:39:ae:c0:eb:a8:26:56:68:
                    9e:d9:f7:6f:93:95:85:8f:9e:31:66:da:d5:b7:43:
                    7b:01:09:ac:99:e0:12:94:85:8a:69:40:aa:11:f1:
                    6b:80:ed:75:9e:d5:3e:a9:e5:77:35:0c:10:fa:6b:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FF:CD:7C:56:E1:8A:7F:80:79:E5:A3:40:C2:6A:B7:6F:E9:AF:66
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136382e3139352e37362e302f32322d3232203d3e203532343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:82:1c:f8:03:1c:f4:15:e3:45:4d:76:63:2a:6a:ac:24:
         b2:c2:3f:50:54:1a:6f:e4:7a:fd:75:0f:c1:b6:bb:8c:ec:2a:
         1c:5e:b7:d4:b5:0b:23:8f:71:83:e1:3e:cd:b2:c6:9f:e2:b4:
         06:6e:25:6f:e1:80:23:e2:3d:8d:4a:62:e0:ae:1e:ca:ad:09:
         2c:a8:c1:25:a7:98:c2:a8:aa:5d:3a:3d:48:7d:b4:c1:ba:fa:
         01:2a:67:07:37:12:21:0e:cf:43:7d:97:ce:91:05:83:a0:f4:
         14:53:af:98:3b:8a:7e:60:84:2e:9e:02:17:2c:6a:68:59:22:
         18:7a:16:b4:75:fa:27:d7:3b:8e:7e:1f:3d:43:8c:e3:86:63:
         44:63:ba:33:d7:cd:28:18:0c:e6:e3:79:a3:1b:cb:6b:2f:ca:
         7c:9f:b1:38:b8:64:78:2d:59:7f:9a:79:31:1d:f9:33:48:4d:
         c9:54:ce:ca:21:52:78:04:b3:0c:01:18:31:02:f3:a1:68:66:
         f5:85:ec:12:ac:75:5a:26:65:37:0a:17:8f:fd:dc:e2:ad:00:
         d9:62:37:15:fb:01:be:76:8e:a5:c7:cf:5c:37:48:a8:68:88:
         09:74:cc:34:07:f0:99:32:2d:8e:37:01:97:63:cd:cc:44:d2:
         12:d5:0a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org