Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3136382e39302e39362e302f32322d3232203d3e203532343835.roa
File:                     3136382e39302e39362e302f32322d3232203d3e203532343835.roa (raw, json)
Hash identifier:          lWyPAkblWVUc0JM+B0UNdfFBCFw9jBnSm/gm7MaGQCk=
Subject key identifier:   19:04:4B:8D:AD:17:0E:20:B3:F7:7A:39:21:1D:9E:68:BB:03:1A:3B
Certificate issuer:       /CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Certificate serial:       61A248DDBD103CDCFB5D0D3C532F0AE5EA263699
Authority key identifier: 09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3136382e39302e39362e302f32322d3232203d3e203532343835.roa
Signing time:             Tue 05 Mar 2024 18:12:42 +0000
ROA not before:           Tue 05 Mar 2024 18:07:42 +0000
ROA not after:            Tue 04 Mar 2025 18:12:42 +0000
asID:                     52485
IP address blocks:        168.90.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a2:48:dd:bd:10:3c:dc:fb:5d:0d:3c:53:2f:0a:e5:ea:26:36:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
        Validity
            Not Before: Mar  5 18:07:42 2024 GMT
            Not After : Mar  4 18:12:42 2025 GMT
        Subject: CN=19044B8DAD170E20B3F77A39211D9E68BB031A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:ab:5f:37:8a:82:0b:4c:cb:45:3e:9e:c3:
                    1a:c6:5a:ec:1a:ac:29:f2:0f:cd:2b:5b:10:9a:3f:
                    44:59:40:a3:f1:69:d7:3f:5a:69:fb:1e:39:0b:b7:
                    fe:2e:a7:63:b5:da:a1:37:dd:f7:fd:45:a7:e7:50:
                    05:82:ca:da:5c:5f:45:30:61:f2:37:4d:17:9e:70:
                    a8:e8:a2:01:17:64:78:d9:01:5b:0a:ff:cc:81:5b:
                    a8:af:19:b2:a6:ba:b9:cf:12:c0:d6:f9:24:32:25:
                    e1:a3:61:bd:f8:d0:4a:4d:44:d3:fb:db:95:ae:60:
                    79:1b:18:92:f4:f6:ff:3a:5d:09:16:d8:1d:91:34:
                    b3:3c:98:b8:23:e6:27:4b:87:1e:9b:66:ee:7b:c5:
                    13:bb:7e:bb:0c:d1:09:1e:04:0b:bf:aa:1a:74:54:
                    83:9b:56:b5:45:62:3c:27:b9:d0:4d:0b:89:0a:18:
                    f3:e0:53:99:ba:3f:85:12:03:f0:8e:3a:8a:44:bf:
                    42:68:af:65:28:f8:da:2f:3f:96:4b:1d:ff:b9:9f:
                    4b:98:c5:54:96:62:d0:19:0f:75:20:08:d6:5f:5f:
                    2e:ff:36:ad:93:43:53:19:3b:62:7e:53:e6:ef:b0:
                    2d:1a:26:1a:ba:4d:4d:9f:93:9a:fa:b9:45:9c:24:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:04:4B:8D:AD:17:0E:20:B3:F7:7A:39:21:1D:9E:68:BB:03:1A:3B
            X509v3 Authority Key Identifier:
                keyid:09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3136382e39302e39362e302f32322d3232203d3e203532343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:93:16:25:e6:31:cc:12:72:76:8d:af:68:89:12:0f:84:26:
         cb:81:96:51:49:59:bb:f8:82:d2:4d:9c:45:c7:e6:ff:b1:02:
         09:d8:a5:d2:df:8e:c7:f0:9d:29:80:88:da:6c:15:2f:b2:15:
         8d:ce:b4:bd:99:2a:c1:13:84:04:bd:a2:71:2d:b4:4f:86:cd:
         6b:f8:dc:3a:6c:22:1d:e9:cc:4e:58:b1:f4:67:1e:fa:c9:5c:
         b0:7f:c4:35:ce:31:24:45:f9:dd:bb:4c:2a:e7:85:8f:ef:c5:
         4e:86:8d:f5:90:a8:99:d2:58:39:d0:52:b6:91:99:27:9d:f6:
         d7:76:74:33:f2:ad:17:46:fa:c0:a5:4b:3b:05:02:21:4e:6b:
         ea:77:ce:db:53:66:e8:0b:04:30:23:97:f2:5e:9c:6d:46:40:
         86:b6:14:31:71:b8:77:8a:83:21:61:39:5a:74:10:88:5c:31:
         37:bf:99:e3:33:74:f9:74:15:a3:7c:9a:ee:80:60:f7:20:ae:
         07:52:11:d3:19:f9:77:f6:98:b5:53:ab:f5:52:89:48:ae:b0:
         25:6f:5e:6e:89:f9:88:09:52:dc:a6:34:65:b6:c3:66:57:2a:
         e2:b6:de:76:d4:69:b1:07:d2:e1:a0:a4:83:3b:7b:e2:ef:a7:
         59:51:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:16 2024 by rpki-client on console-fra.rpki-client.org