Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39382e302f32332d3234203d3e203532343233.roa
File:                     3136382e3139372e39382e302f32332d3234203d3e203532343233.roa (raw, json)
Hash identifier:          JG/5P3K+tWum1ltvw9j5lZv5BCSkf2TqX5JvbLmddWE=
Subject key identifier:   37:A0:8F:60:EE:7D:89:6D:4A:A6:AB:3A:86:9A:FC:E8:75:D8:E1:D0
Certificate issuer:       /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial:       2B4C9402CBD48DF7C1DFBA884B43073083884028
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39382e302f32332d3234203d3e203532343233.roa
Signing time:             Tue 05 Mar 2024 17:56:50 +0000
ROA not before:           Tue 05 Mar 2024 17:51:50 +0000
ROA not after:            Tue 04 Mar 2025 17:56:50 +0000
asID:                     52423
IP address blocks:        168.197.98.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 05:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4c:94:02:cb:d4:8d:f7:c1:df:ba:88:4b:43:07:30:83:88:40:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
        Validity
            Not Before: Mar  5 17:51:50 2024 GMT
            Not After : Mar  4 17:56:50 2025 GMT
        Subject: CN=37A08F60EE7D896D4AA6AB3A869AFCE875D8E1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:ee:94:fd:7e:8e:ef:37:be:04:49:69:2b:
                    f8:51:aa:c1:e2:92:7f:d3:72:85:99:36:65:f0:86:
                    4c:a4:3d:25:e5:53:2e:7e:44:bb:76:fe:fc:b8:cb:
                    cf:04:4e:42:9d:28:bf:bc:59:14:65:be:b0:01:6a:
                    55:c0:5f:95:8d:bd:bf:4e:67:75:fd:43:25:4f:b1:
                    01:f7:ea:8a:e9:1a:b1:7e:7e:02:6f:41:47:53:d8:
                    34:ba:42:72:59:ae:f3:0b:c3:a6:7b:b6:23:18:b7:
                    e3:e6:96:b5:b1:67:88:0d:04:51:fd:19:6a:28:6f:
                    6d:bb:90:51:bb:4b:9e:69:1f:40:50:af:e7:69:52:
                    d6:d5:5a:2e:2e:0f:7b:02:07:46:69:bf:7d:d6:2b:
                    1b:5c:19:79:79:53:76:77:95:5d:40:d1:a4:1b:3c:
                    ee:7d:13:0e:d5:6e:7c:c9:96:87:e1:fa:00:11:d8:
                    c1:75:a7:3e:3d:d9:b6:d9:11:28:c4:33:3b:a5:50:
                    6f:0a:11:f1:4d:ca:06:76:f4:c0:b6:37:ee:44:4a:
                    5e:fc:88:44:92:23:76:44:80:d7:df:2d:37:17:26:
                    82:37:e3:a8:16:f3:e2:e9:bb:a1:95:3b:3a:bd:05:
                    70:1f:1a:6b:32:f6:c2:39:a8:96:10:6a:35:86:7a:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A0:8F:60:EE:7D:89:6D:4A:A6:AB:3A:86:9A:FC:E8:75:D8:E1:D0
            X509v3 Authority Key Identifier:
                keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39382e302f32332d3234203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:31:cd:02:1b:e6:dd:50:3f:2c:8b:62:4f:bd:30:47:49:
         bb:d8:c8:36:52:d1:0c:cb:c1:1a:06:cb:65:c1:ac:62:0d:b8:
         4e:28:c9:b2:a2:60:57:05:2b:a0:97:b3:a3:34:89:98:50:e0:
         16:4b:1b:47:ba:7f:42:d3:6e:ed:2e:b2:fc:d1:c5:38:71:0f:
         08:c0:18:25:16:d0:be:f3:49:83:1e:01:8b:cc:a5:64:d8:48:
         d6:8e:b4:b3:17:3c:3e:38:09:95:4f:fc:ca:5f:64:dd:de:a1:
         23:47:fa:58:25:34:4c:0a:da:44:e9:cd:0e:fb:d1:5b:fa:b5:
         4e:13:2b:c3:37:a1:17:bf:9e:60:bd:8e:c4:9a:94:80:62:62:
         9f:f8:e0:33:79:f1:de:1b:25:c4:89:9c:13:64:24:af:39:38:
         99:33:47:31:82:07:fb:4d:d5:ba:ae:d2:2b:eb:b0:34:8e:9a:
         e3:f7:7b:3f:f4:87:2b:11:ea:3f:1d:ad:a0:53:c8:d3:d3:aa:
         d3:5b:54:b5:e1:a5:56:5b:84:fc:a1:47:84:8e:c1:a6:af:13:
         8a:f4:8b:92:ba:6f:52:e5:09:6f:01:32:e2:94:c1:17:2a:10:
         e9:18:e4:72:30:0c:d4:54:94:28:c1:8f:fb:c9:62:36:f3:05:
         2f:66:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:44 2024 by rpki-client on console-fra.rpki-client.org