Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138362e302f32342d3234203d3e203237383233.roa
File:                     3136382e3138312e3138362e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          mSs82NXWUn2Ab0mv6iyU9zrWviLx/yagXXo49/avRRw=
Subject key identifier:   19:2C:75:AD:A6:3A:AD:97:70:B0:93:59:04:8F:47:E1:BF:88:29:56
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       68FB61BA4004568245D517769799BA8390A0BB98
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138362e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:17 +0000
ROA not before:           Tue 05 Mar 2024 17:35:17 +0000
ROA not after:            Tue 04 Mar 2025 17:40:17 +0000
asID:                     27823
IP address blocks:        168.181.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fb:61:ba:40:04:56:82:45:d5:17:76:97:99:ba:83:90:a0:bb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:17 2024 GMT
            Not After : Mar  4 17:40:17 2025 GMT
        Subject: CN=192C75ADA63AAD9770B09359048F47E1BF882956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:50:44:fd:0f:b6:f2:3e:5d:5f:b0:af:62:24:
                    8c:ea:5d:47:a2:dc:54:54:21:6e:01:d3:c8:82:1b:
                    6a:6d:45:ca:78:03:eb:57:11:d1:96:bf:4a:5f:6c:
                    82:e9:78:5f:20:6a:87:b9:d9:46:ee:cf:e0:68:1b:
                    e8:7e:63:67:f8:28:82:13:f7:b8:bb:16:8d:db:55:
                    a2:52:90:74:b3:15:63:71:c3:67:5d:e9:98:c6:09:
                    ff:81:e3:7c:81:8d:5f:b5:50:e8:26:34:3f:9c:97:
                    a3:20:26:1f:56:7b:a6:72:ab:0e:de:4c:87:97:30:
                    cb:e7:71:28:bb:9d:56:65:01:af:23:f6:5f:46:db:
                    b8:ad:4e:2d:21:45:6e:c6:0b:5b:01:d1:33:b5:1f:
                    69:f7:fb:08:ff:52:f8:f0:da:7b:24:ea:cf:86:9a:
                    c4:5b:90:46:06:3a:c6:a8:71:91:97:8b:d3:96:fb:
                    ec:81:f6:43:86:0b:58:b5:92:da:db:e3:cb:46:c0:
                    37:7e:7f:b4:c3:1d:6b:d2:d3:78:04:e6:d3:80:51:
                    53:ba:d4:70:22:36:d6:bd:95:1e:97:e2:1f:06:16:
                    f9:0d:fe:af:df:05:38:7d:dc:0b:0d:9d:59:f8:ab:
                    b8:14:2c:aa:d7:f8:33:76:39:e5:9f:05:ea:8c:94:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2C:75:AD:A6:3A:AD:97:70:B0:93:59:04:8F:47:E1:BF:88:29:56
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138362e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:4f:d5:58:3b:1d:86:2d:00:ed:77:d7:3b:bc:a9:29:97:
         6e:a4:73:31:f3:1d:45:c0:07:2e:06:99:6c:cd:2c:5d:f6:b3:
         45:3d:6c:5e:65:1e:52:92:5e:ae:05:00:0c:68:38:91:53:2f:
         c3:d8:6b:8f:10:73:cb:cb:4a:50:18:35:20:8d:bb:ec:f1:af:
         10:df:23:18:31:4d:13:9b:54:8f:fe:6c:d5:7d:35:19:c6:d8:
         89:ac:ee:da:aa:94:c7:9b:44:2b:04:54:12:00:b7:6a:61:09:
         6e:86:ca:07:ea:8b:ed:77:c3:8f:3d:4f:c3:65:d6:4b:d4:8e:
         ca:fb:09:93:ca:58:6f:bf:bd:f0:86:23:b0:a6:bb:15:30:fb:
         22:af:59:4c:eb:09:fb:d0:c2:ff:b3:c3:0a:59:0e:04:90:9e:
         61:fd:7d:85:3d:37:ed:7b:ba:64:4b:d8:97:56:41:d6:e8:5e:
         3e:65:94:0f:6a:33:fa:42:27:e3:0d:5f:1d:3c:74:79:b6:53:
         46:b5:3f:98:be:67:1b:8f:eb:ca:a3:45:25:74:63:ae:cb:a7:
         9d:18:4d:bf:21:ba:b2:fc:3c:e1:f8:57:fd:d5:42:7c:0d:cb:
         c8:36:dd:3a:07:e7:b5:0d:0d:d5:99:2d:f5:25:9f:6f:4c:cc:
         b1:6f:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org