Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e34382e302f32342d3234203d3e203237383233.roa
File:                     3136382e3139372e34382e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          2oO2qWXrYHwuBivib7V+qKNRDhQf6rUATpzUZNbkvsw=
Subject key identifier:   0F:83:DA:6B:D3:E2:D2:DA:7A:23:86:2A:CA:50:76:32:90:E5:EF:12
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       24F7C50E9748D5D22C4733C1A27C909A0CF32B16
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e34382e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:02 +0000
ROA not before:           Tue 05 Mar 2024 17:35:02 +0000
ROA not after:            Tue 04 Mar 2025 17:40:02 +0000
asID:                     27823
IP address blocks:        168.197.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f7:c5:0e:97:48:d5:d2:2c:47:33:c1:a2:7c:90:9a:0c:f3:2b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:02 2024 GMT
            Not After : Mar  4 17:40:02 2025 GMT
        Subject: CN=0F83DA6BD3E2D2DA7A23862ACA50763290E5EF12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:c2:7e:40:27:8e:3d:55:2f:0e:5e:19:33:
                    ae:f1:ee:92:b8:92:2d:35:7f:e1:a9:f1:45:90:9b:
                    39:13:4c:71:e1:c1:20:a9:65:c7:cd:1b:42:3b:35:
                    54:aa:09:95:b8:5e:88:75:8d:92:22:df:f9:30:ff:
                    f7:13:ce:92:3b:99:73:54:99:97:0a:c0:73:07:b1:
                    fe:0f:23:d8:07:a7:5c:92:7c:ea:bb:43:55:4e:a7:
                    55:74:db:bc:ea:c0:51:7a:2c:4a:86:66:37:fb:8e:
                    2e:82:8b:43:b0:40:ba:ff:8f:c1:49:33:9a:7a:15:
                    dd:f0:7c:90:88:1f:43:ec:2b:f5:45:8c:c9:12:48:
                    2a:0b:7a:a5:30:58:96:ec:b7:ac:1f:76:ee:89:c8:
                    0e:b7:de:ef:32:31:48:98:31:81:20:20:66:d6:89:
                    c3:07:4f:5d:6b:eb:41:37:ae:81:dc:39:be:46:1d:
                    86:a6:b3:e1:0d:4c:2e:f1:f8:77:c9:51:96:eb:ec:
                    a1:6d:0c:82:d4:c2:df:75:27:ce:7e:76:02:43:2b:
                    9d:ad:be:5c:0e:60:f5:bb:16:4b:8e:b2:9f:b1:1b:
                    f4:7c:6a:03:67:39:20:8e:98:ca:bf:fb:6a:7d:2c:
                    b0:7d:61:21:cf:ea:da:b0:07:20:f7:20:8a:14:e9:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:DA:6B:D3:E2:D2:DA:7A:23:86:2A:CA:50:76:32:90:E5:EF:12
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3139372e34382e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:fb:a8:50:37:ac:1a:93:b5:3c:45:6b:ea:65:5f:83:60:
         b2:04:3e:e6:0d:81:eb:9d:57:6b:43:23:1c:fd:9b:83:5e:c7:
         c0:cb:35:eb:a2:59:43:b2:9e:12:06:66:f9:4f:45:6f:ee:49:
         95:af:c6:24:74:0e:20:50:6c:89:8b:7f:9c:d6:b6:0f:c4:e6:
         ab:f6:ef:ea:49:f8:62:13:a8:6a:bd:58:ed:10:12:b6:ce:d3:
         64:7f:8c:86:67:d2:05:86:2b:a5:46:09:4d:01:d0:65:7e:46:
         52:f6:5e:f5:6c:aa:32:f0:f3:a6:07:13:25:d9:16:c6:d2:f7:
         e3:b3:8e:37:e8:ff:4b:4e:e7:31:65:9e:08:b9:34:07:e2:63:
         fc:c2:b3:a3:3e:83:9e:1e:14:a5:d4:ef:a9:53:9c:38:bb:b0:
         a1:09:e5:a3:66:ae:67:10:a5:1a:3d:b0:d5:18:d4:77:14:22:
         18:24:3c:2f:de:c6:1f:c0:ce:0f:42:91:73:a1:3a:ea:1d:b3:
         46:e1:06:34:c6:10:18:95:2d:77:50:1a:ce:51:05:18:69:ff:
         df:db:57:63:80:f2:75:ad:bd:8b:f4:9f:7b:e1:3c:ef:ea:17:
         d7:20:8f:5b:6e:b6:c8:95:0f:b6:e0:99:03:e3:0f:0b:02:d7:
         ce:94:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org