Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132342e302f32342d3234203d3e20323632313931.roa
File:                     3136382e3232382e3132342e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          xUGsYdp3JCRKWsduHeyDQUxUIfcu6a/0d/AtLEPCO/8=
Subject key identifier:   E9:B6:B2:6D:C5:E2:46:36:4E:E0:56:6B:7E:99:F2:69:EF:7A:6D:AD
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       52B6EB682B9D46852129813241877A3AE569A4C7
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132342e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:19 +0000
ROA not before:           Tue 05 Mar 2024 18:11:19 +0000
ROA not after:            Tue 04 Mar 2025 18:16:19 +0000
asID:                     262191
IP address blocks:        168.228.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:eb:68:2b:9d:46:85:21:29:81:32:41:87:7a:3a:e5:69:a4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:19 2024 GMT
            Not After : Mar  4 18:16:19 2025 GMT
        Subject: CN=E9B6B26DC5E246364EE0566B7E99F269EF7A6DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:08:e1:bb:a9:7b:7b:f0:cc:20:80:98:ba:
                    06:51:31:22:44:4b:43:22:1c:0b:21:bd:00:8c:c7:
                    14:92:2d:f9:0b:d5:9a:f2:8b:ce:41:e8:04:c6:f2:
                    6b:dc:5d:c6:65:b7:79:53:f8:dc:2a:59:9c:ef:83:
                    c6:01:f0:b1:26:21:87:2a:09:04:bd:d3:50:a0:fc:
                    bf:fe:dd:44:a6:07:fd:c1:54:64:d1:83:94:e9:a7:
                    ca:c3:ad:b3:98:d8:c1:07:1a:7f:d4:7b:fe:6a:e7:
                    72:c3:84:77:33:eb:1c:95:c9:ed:ab:95:dc:be:bf:
                    43:52:80:68:8f:59:cc:17:bb:8c:0b:17:f3:f5:11:
                    5c:af:bc:11:93:20:03:67:b7:e8:4c:f4:d0:13:76:
                    5c:d8:a2:8c:2b:cc:77:a2:2a:fa:6b:0d:bb:d6:29:
                    7b:0c:30:fa:9f:15:06:04:97:8f:bc:47:9e:e6:9f:
                    1a:95:40:33:d9:cb:e0:f0:a9:8e:c1:68:cf:b6:17:
                    d1:8e:89:89:22:3a:40:92:54:ab:47:61:90:7b:2a:
                    6c:b4:3e:a2:84:9d:f2:bb:9b:75:4d:59:03:6d:a9:
                    ea:b2:a7:ba:d0:49:cd:99:94:4a:ca:67:fe:e2:64:
                    73:21:36:93:7d:46:99:74:de:e3:10:dd:72:cc:77:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B6:B2:6D:C5:E2:46:36:4E:E0:56:6B:7E:99:F2:69:EF:7A:6D:AD
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132342e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:44:5b:a1:e2:ad:a5:9f:e4:b1:d7:40:d9:0f:a2:ab:2d:8c:
         58:93:19:80:5d:98:41:d8:67:e8:98:0a:b6:00:11:6e:f4:5d:
         7b:59:2f:81:46:ac:f7:af:25:33:bc:8a:14:6c:37:53:3d:1d:
         2e:ce:85:71:0e:0e:eb:c5:23:d9:25:8d:36:24:68:5b:ce:1d:
         d7:ba:99:b0:b4:14:12:33:44:b4:89:5d:26:a7:20:dc:0e:c4:
         fe:52:20:b2:d9:6e:f2:dc:be:a7:e5:f4:42:e2:84:37:e7:4f:
         07:f4:ad:41:24:6c:8b:6e:20:f4:2f:f4:dd:88:4e:d8:c2:f9:
         c8:26:c1:02:9e:f2:e7:bc:e7:66:0f:0d:8b:ab:7b:7c:0c:79:
         08:7d:3e:26:0f:d8:a8:60:58:00:8e:64:89:d6:85:d3:85:a9:
         31:4f:6a:55:65:25:1e:ac:13:ac:5f:f7:36:fb:01:5d:9a:9e:
         06:34:f2:e8:c6:ce:ba:6f:8d:f4:68:c9:4a:0c:35:7c:92:7b:
         f5:ab:fa:a2:9e:07:21:37:bf:63:97:62:9c:89:60:a3:ea:65:
         a3:61:94:22:76:62:8a:08:ba:de:2a:67:c8:96:b4:a8:e8:fc:
         7b:2d:1e:dc:53:28:f3:2b:a6:9c:ab:f2:4f:c3:6a:79:08:a8:
         37:16:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org