Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e34382e302f32322d3234203d3e203237383233.roa
File:                     3136382e3139372e34382e302f32322d3234203d3e203237383233.roa (raw, json)
Hash identifier:          Zk7z7Kpwpkeex9pN6xBkeyYTx3bWNmjESirMLfAjGPo=
Subject key identifier:   DC:29:C0:8B:8A:52:0B:58:8C:B2:D5:05:D9:5B:DB:D6:43:85:25:4F
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       305529870DC549AD081EB77146DF2565EC03A8AC
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e34382e302f32322d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:03 +0000
ROA not before:           Tue 05 Mar 2024 17:35:03 +0000
ROA not after:            Tue 04 Mar 2025 17:40:03 +0000
asID:                     27823
IP address blocks:        168.197.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:55:29:87:0d:c5:49:ad:08:1e:b7:71:46:df:25:65:ec:03:a8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:03 2024 GMT
            Not After : Mar  4 17:40:03 2025 GMT
        Subject: CN=DC29C08B8A520B588CB2D505D95BDBD64385254F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:fa:52:59:e9:78:bd:72:e6:fb:b7:f6:cc:
                    68:e2:47:02:0b:e5:b9:f7:7b:fe:0e:5c:30:41:b0:
                    05:0d:03:e9:27:ec:6f:a2:4c:c2:f3:72:d0:7a:22:
                    f5:14:2e:56:fe:aa:69:f0:db:fd:f4:5f:7e:75:eb:
                    4d:55:86:dd:42:a6:58:e3:11:80:63:0a:6c:20:9d:
                    35:0b:83:b0:53:fc:b6:1c:56:8a:a8:85:68:f8:f1:
                    0e:27:1a:77:1d:b3:d3:74:92:ed:d1:72:04:56:12:
                    71:1d:63:07:57:fd:84:ce:da:08:73:27:9a:c7:5c:
                    41:37:cc:d2:73:ae:5a:84:bc:d8:52:5f:e9:86:35:
                    71:eb:38:95:01:c5:1c:ff:7f:0c:90:36:03:02:71:
                    97:26:ae:58:18:d6:55:f6:de:53:40:2c:2f:83:c6:
                    97:ec:32:d0:f5:e0:d6:f8:ae:e6:32:b7:13:a8:54:
                    7b:16:f9:c5:74:04:6a:77:af:57:fa:23:c3:eb:71:
                    56:fa:3a:a7:ae:33:60:a4:7e:83:ec:8f:15:fc:21:
                    6f:24:b3:fe:0d:44:9f:bb:3a:6d:16:c3:5f:b3:ed:
                    c7:d8:e3:ff:54:43:52:1b:43:7d:25:50:c2:c4:57:
                    8e:0d:62:c3:30:c4:1d:6c:9e:a1:a5:22:17:df:f3:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:29:C0:8B:8A:52:0B:58:8C:B2:D5:05:D9:5B:DB:D6:43:85:25:4F
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e34382e302f32322d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:36:3f:33:9f:d3:a7:f1:7b:7b:24:26:35:9c:5e:31:4e:
         a3:f7:f6:25:38:e7:b6:99:0c:d5:ca:8f:0a:cb:82:73:71:8b:
         62:6c:d0:d2:d7:0a:d8:84:e8:b5:db:41:21:8e:2d:19:88:72:
         98:62:3f:03:c7:78:bb:a6:8c:d3:00:e8:f0:51:b2:e3:9e:e3:
         33:2e:6a:68:f7:2e:46:e6:8e:5c:2e:19:06:d4:22:8e:1b:55:
         dd:61:55:0c:60:32:42:3f:ed:ec:bb:2d:9b:51:a3:18:5d:42:
         c6:fb:ea:80:fa:75:e8:a0:9f:52:3c:18:8b:90:3d:99:41:f7:
         24:7b:de:b0:6d:6e:46:a4:2e:08:5b:b4:3f:17:4a:45:cd:2b:
         c7:8d:e3:f6:c3:9c:5c:14:5e:09:e6:7d:71:61:32:09:95:a2:
         ee:8b:38:8f:86:ab:c1:c6:03:62:55:2a:25:aa:7e:6e:42:29:
         14:40:7f:b6:0d:8f:d5:85:39:d1:e3:29:69:fc:71:32:c1:12:
         68:bd:96:57:55:a9:21:ac:a4:97:bc:ac:b8:e1:63:6f:db:bb:
         d3:ed:03:99:c4:47:06:4d:c9:69:9b:ab:35:bc:bb:76:36:a7:
         ed:d4:c7:fe:a6:de:b1:e0:ee:81:de:68:bd:7e:5e:c7:61:87:
         ce:b3:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:50:23 2024 by rpki-client on console-fra.rpki-client.org