Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/3136382e3230352e382e302f32322d3234203d3e20323634363736.roa
File:                     3136382e3230352e382e302f32322d3234203d3e20323634363736.roa (raw, json)
Hash identifier:          pNo25TQfCtNCr7mj0zjVCRFaoJ8EDwqkz5xzuDE8U0I=
Subject key identifier:   1B:05:E5:39:51:8C:5C:4B:02:CA:24:81:14:83:85:FC:D5:CA:1F:12
Certificate issuer:       /CN=89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD
Certificate serial:       0D61F6F9EBE9306BBFFE595351EC1F7C5C418642
Authority key identifier: 89:DC:BB:A4:D9:ED:15:1F:E9:FC:0A:E6:6F:94:CA:13:C6:87:ED:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/3136382e3230352e382e302f32322d3234203d3e20323634363736.roa
Signing time:             Tue 05 Mar 2024 18:11:38 +0000
ROA not before:           Tue 05 Mar 2024 18:06:38 +0000
ROA not after:            Tue 04 Mar 2025 18:11:38 +0000
asID:                     264676
IP address blocks:        168.205.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:61:f6:f9:eb:e9:30:6b:bf:fe:59:53:51:ec:1f:7c:5c:41:86:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD
        Validity
            Not Before: Mar  5 18:06:38 2024 GMT
            Not After : Mar  4 18:11:38 2025 GMT
        Subject: CN=1B05E539518C5C4B02CA2481148385FCD5CA1F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:61:1d:c2:d5:1a:6a:8a:93:4c:86:53:42:
                    09:9d:19:3f:9d:c4:5c:17:e5:5d:65:90:f5:79:e6:
                    9e:78:b5:86:0e:2c:e4:54:14:3b:5a:df:ce:5d:6b:
                    9f:08:5e:25:5a:f7:e8:8f:c0:d5:d6:0f:97:9d:9c:
                    0a:eb:5c:a7:11:0e:7e:41:f5:e1:ea:63:51:63:92:
                    a5:5b:61:b0:29:db:39:87:cf:61:91:36:99:cf:f0:
                    91:5c:8e:d4:99:82:18:70:d5:4c:81:fe:55:56:2a:
                    04:14:58:48:3e:92:da:a9:97:67:5b:40:b6:5a:e8:
                    21:a7:f9:e0:f8:14:81:7a:bd:c4:7a:da:0d:c9:cc:
                    4c:41:30:f2:54:94:ef:d6:b3:78:7b:5d:18:e9:8d:
                    6c:14:0e:00:d7:2f:26:77:ee:3d:e5:03:f6:a6:97:
                    14:9c:a4:d1:1a:e2:5c:68:48:94:7e:9b:cf:b6:32:
                    81:77:9b:ba:db:66:b7:bc:33:06:91:45:28:c8:4f:
                    50:c1:61:8e:0c:9c:ed:27:8c:e1:7b:7c:9a:c4:6f:
                    d0:4f:41:3f:3c:37:50:ed:eb:0d:6e:fd:83:91:7e:
                    60:a6:62:45:de:ce:f0:70:45:67:9d:ba:d9:a1:51:
                    21:18:11:a4:6d:5d:6f:c7:ff:ad:2f:26:65:e6:72:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:05:E5:39:51:8C:5C:4B:02:CA:24:81:14:83:85:FC:D5:CA:1F:12
            X509v3 Authority Key Identifier:
                keyid:89:DC:BB:A4:D9:ED:15:1F:E9:FC:0A:E6:6F:94:CA:13:C6:87:ED:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DCBBA4D9ED151FE9FC0AE66F94CA13C687EDCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2266F9BF1CE1B242B9EE1C4243C40E20F99438E9F4FBCF9108C0B44D4C7A9AB5/0/3136382e3230352e382e302f32322d3234203d3e20323634363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:9a:f0:a3:0f:57:c3:c0:2a:6b:45:b2:ff:58:7f:9c:ea:20:
         cf:fa:2a:39:03:f9:3b:71:84:d3:ee:ba:3a:79:b9:5f:ae:4f:
         b4:e3:26:7f:95:a2:da:68:7e:ec:40:d8:46:d4:94:d6:15:db:
         6a:05:8f:f2:1e:4c:7d:e8:f2:f4:e8:8b:3e:a7:08:2c:b5:bf:
         d3:86:66:68:46:73:03:28:26:1e:35:cb:9f:30:b3:20:5d:0e:
         54:d6:68:59:1b:db:b9:64:d5:61:51:b7:09:55:3f:dc:bb:c0:
         3b:85:9d:7c:2f:6e:a7:84:93:d9:1e:c6:2b:e5:f9:62:cd:09:
         d2:79:0e:d9:3c:fc:fe:37:44:0a:a7:f7:a2:09:83:bb:00:93:
         a2:fd:97:77:1f:ea:2f:07:4d:2c:b4:eb:d8:ba:de:e6:d6:a7:
         e5:ba:a2:9d:bd:a9:ea:35:f6:5d:90:c7:80:56:86:fb:bb:fe:
         2a:42:c7:68:ed:4c:1e:32:33:e1:08:d5:19:ab:ac:53:37:58:
         81:64:cd:67:93:37:a6:af:a0:4f:1c:56:b7:b2:a1:4e:c0:95:
         74:f8:1e:64:96:79:9a:55:03:58:d1:c7:b1:b5:4f:0a:1c:76:
         04:0c:9a:57:ad:34:06:b3:ef:6a:6b:7e:bc:d4:11:4d:30:1a:
         68:23:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org