Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39362e302f32342d3234203d3e203532343233.roa
File:                     3136382e3139372e39362e302f32342d3234203d3e203532343233.roa (raw, json)
Hash identifier:          gxeiK6VeDHuEdZFnB/NrvnHnIJXjrmBhUN1wdLuw71E=
Subject key identifier:   47:74:84:76:5F:3A:8B:86:CF:BF:A5:ED:1F:6D:9E:13:FA:55:1F:7C
Certificate issuer:       /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial:       5270609517C5D2D9137C95895863A88A7ECC8C1D
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39362e302f32342d3234203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:56:47 +0000
ROA not before:           Tue 05 Mar 2024 17:51:47 +0000
ROA not after:            Tue 04 Mar 2025 17:56:47 +0000
asID:                     52423
IP address blocks:        168.197.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 05:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:70:60:95:17:c5:d2:d9:13:7c:95:89:58:63:a8:8a:7e:cc:8c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
        Validity
            Not Before: Mar  5 17:51:47 2024 GMT
            Not After : Mar  4 17:56:47 2025 GMT
        Subject: CN=477484765F3A8B86CFBFA5ED1F6D9E13FA551F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:57:39:98:73:b1:91:e2:28:6d:ea:da:35:
                    a5:ab:35:9c:ae:62:4f:45:f0:b7:fd:3c:f9:9d:8d:
                    ea:81:57:ba:0a:64:6c:a3:04:df:84:05:e1:90:5b:
                    a9:55:dc:e0:87:6a:22:dc:51:38:2b:47:17:f6:6c:
                    18:7c:30:03:9d:77:1c:ff:6f:6d:7f:d5:12:5f:18:
                    e9:90:f2:15:89:67:37:74:3c:9f:7e:0b:8d:b9:9d:
                    07:06:70:05:06:89:4f:85:ad:f7:fb:04:83:b5:9a:
                    5b:1f:ff:34:cd:30:fd:21:d3:0a:a5:ff:63:fa:6e:
                    c9:1e:88:65:61:4c:66:d4:34:7d:54:91:40:d0:89:
                    b6:24:fc:70:ae:43:ed:33:1a:d2:69:55:74:6b:08:
                    f3:1d:5b:5c:f7:07:8d:3b:a3:c2:91:08:97:b6:86:
                    f9:e9:b7:cc:35:3c:aa:0c:9e:04:6c:8b:41:d8:fb:
                    e9:0d:4a:ab:3c:93:78:98:44:ff:8d:e8:54:1c:9f:
                    4c:f5:fc:d2:5c:14:69:6a:df:4c:a0:32:bf:a5:48:
                    76:cf:98:11:c4:fe:46:12:8f:19:61:43:cc:77:e5:
                    bc:9c:f3:b7:11:ff:33:18:9a:1d:52:fd:7f:3b:e7:
                    f8:9d:c9:29:67:79:1d:44:e3:23:19:cf:17:4b:55:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:74:84:76:5F:3A:8B:86:CF:BF:A5:ED:1F:6D:9E:13:FA:55:1F:7C
            X509v3 Authority Key Identifier:
                keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39362e302f32342d3234203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:7e:02:e7:96:29:ed:4e:e3:01:89:f1:91:e6:22:12:ee:89:
         62:64:ed:d5:fb:51:59:8b:28:29:4b:0f:fb:7e:a8:d8:94:23:
         62:ac:d0:07:23:65:f3:a8:cf:af:ab:47:b4:b3:7c:83:55:7d:
         88:b9:bb:f3:47:7c:87:30:18:31:41:33:f2:d3:78:58:85:b7:
         93:f9:9e:6b:90:fa:65:5d:0b:65:c9:42:20:fe:21:43:bf:a4:
         95:a6:d1:59:41:a2:3b:03:bc:1f:05:7e:7f:71:64:a2:77:13:
         60:77:d3:53:7a:c1:6d:a7:31:c3:1a:fc:7e:92:ba:41:e1:ab:
         7b:98:44:fa:ef:bf:af:86:ee:ef:12:5d:ba:e1:f6:d3:2a:70:
         f4:31:fe:22:c0:85:4f:97:4b:eb:f8:9f:64:db:58:31:0f:38:
         9b:aa:4d:e3:75:5b:75:3d:85:b5:e7:37:59:72:b8:7d:ed:0e:
         d4:dc:ab:2d:bb:c3:ae:6a:a9:22:ba:fb:b3:00:60:f6:f1:07:
         b0:ad:02:ee:fc:8c:6f:8c:41:73:e8:57:1d:1d:91:06:3a:ac:
         ab:9c:3a:2b:63:85:ff:51:c1:00:00:54:c0:23:85:a9:bc:6c:
         bd:aa:02:56:c6:75:0c:38:66:30:4c:09:16:c6:58:39:89:44:
         d4:66:07:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:44 2024 by rpki-client on console-fra.rpki-client.org