Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/3136382e3230352e3132302e302f32322d3234203d3e20323634363739.roa
File:                     3136382e3230352e3132302e302f32322d3234203d3e20323634363739.roa (raw, json)
Hash identifier:          0g3c4PUkrdlzl4vIOp23ZdsXyyX1BwLjPHlxsq/A81g=
Subject key identifier:   3A:A7:EC:36:90:70:E7:53:1C:03:FB:65:8F:99:D7:76:3F:54:EE:A8
Certificate issuer:       /CN=5506AF01F36FB1CE1124E8FE845AB28B7A0834AE
Certificate serial:       19BC13E53C5F44ED5EAE0F4FDAF83E6B540A0203
Authority key identifier: 55:06:AF:01:F3:6F:B1:CE:11:24:E8:FE:84:5A:B2:8B:7A:08:34:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/3136382e3230352e3132302e302f32322d3234203d3e20323634363739.roa
Signing time:             Tue 05 Mar 2024 18:17:58 +0000
ROA not before:           Tue 05 Mar 2024 18:12:58 +0000
ROA not after:            Tue 04 Mar 2025 18:17:58 +0000
asID:                     264679
IP address blocks:        168.205.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bc:13:e5:3c:5f:44:ed:5e:ae:0f:4f:da:f8:3e:6b:54:0a:02:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5506AF01F36FB1CE1124E8FE845AB28B7A0834AE
        Validity
            Not Before: Mar  5 18:12:58 2024 GMT
            Not After : Mar  4 18:17:58 2025 GMT
        Subject: CN=3AA7EC369070E7531C03FB658F99D7763F54EEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:13:27:85:dd:23:87:a3:fe:1b:71:a4:e7:
                    49:41:cd:78:e1:6e:1e:e2:7d:68:6d:7a:18:67:9b:
                    91:f3:35:e6:0b:c4:ac:bf:39:94:e7:5a:5f:c2:a3:
                    5c:9e:b7:ba:88:47:cb:95:f0:3d:b5:ca:10:91:11:
                    1c:3e:40:48:a0:0e:66:16:82:8b:fc:e2:ce:df:3c:
                    60:df:42:60:d6:c5:96:64:24:3a:48:35:77:98:40:
                    a2:49:47:1f:26:94:98:e1:18:13:ea:13:92:6b:c9:
                    26:32:65:d7:29:a4:c2:f2:67:be:b9:bb:3b:ce:d5:
                    44:6b:29:e9:0c:ad:a8:02:cf:55:bd:e4:b4:be:19:
                    96:c0:f1:62:aa:7c:8c:5e:06:a1:25:6b:99:49:93:
                    be:be:f6:8d:e1:6f:32:22:38:d1:e2:b4:45:2e:9e:
                    06:01:f7:fd:9e:26:ca:c7:65:48:06:1d:fe:21:2c:
                    08:be:c9:48:58:e1:3a:2b:37:ee:2f:6a:8d:be:2f:
                    c7:9d:84:fe:03:c7:c5:72:17:32:fd:b2:76:8f:f7:
                    7c:a2:1a:47:73:56:36:c6:38:c0:59:82:dd:83:84:
                    df:ed:57:56:30:a5:97:29:bb:0f:3a:28:70:4b:03:
                    a0:49:a0:9f:7c:e8:a7:89:0b:b5:0c:2e:60:35:f5:
                    57:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A7:EC:36:90:70:E7:53:1C:03:FB:65:8F:99:D7:76:3F:54:EE:A8
            X509v3 Authority Key Identifier:
                keyid:55:06:AF:01:F3:6F:B1:CE:11:24:E8:FE:84:5A:B2:8B:7A:08:34:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/3136382e3230352e3132302e302f32322d3234203d3e20323634363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:6c:7d:56:c7:a6:68:c4:7f:14:5a:05:89:ec:74:e9:a4:e2:
         dc:88:4a:f1:1e:9a:39:60:a1:3a:41:cc:27:90:ba:8a:75:c0:
         97:c9:15:51:fb:cf:1a:b8:b4:05:03:4c:fc:1c:c3:66:8e:9e:
         99:00:d0:5e:67:0d:a6:06:f8:53:39:43:f2:25:bb:2b:c5:fb:
         d5:7b:e0:64:d5:cd:12:b2:8c:0c:a2:d3:d0:b7:1b:56:7d:2c:
         57:ee:d6:52:d1:e5:ab:06:e7:8f:41:fd:43:b4:31:74:6b:27:
         5d:cc:06:e7:26:ad:6d:c7:82:b8:70:17:0d:ae:e2:d2:f0:2a:
         4e:07:7e:f3:4a:d7:a1:dd:da:84:69:71:46:77:02:16:4f:6c:
         b7:14:9e:a3:1c:7f:5f:f8:b2:6d:ef:49:ab:7e:19:00:7c:2e:
         a3:ad:1b:39:ff:09:49:81:01:49:9d:df:6a:8b:f3:15:37:04:
         64:c2:56:f6:d3:2b:b4:7b:7c:5d:18:db:84:b8:52:35:f7:bd:
         e4:ef:21:4c:95:51:3d:4d:ed:96:ea:35:d4:e8:b1:d2:5f:d5:
         4a:ba:4f:eb:0b:13:61:8a:34:33:81:e4:59:4d:13:8a:85:87:
         de:70:f7:f1:b0:82:30:f7:01:cf:26:b8:00:8b:10:e6:3b:ec:
         67:39:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:57 2024 by rpki-client on console-fra.rpki-client.org