Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3136382e3233322e3130382e302f32322d3232203d3e20323634373530.roa
File:                     3136382e3233322e3130382e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier:          g79gnSEEy8gfpq3hmH1ApUgOVamuRGmD8gn/tBrB/BU=
Subject key identifier:   CD:B2:25:F6:4A:08:EE:6E:D2:06:48:23:6B:37:43:E6:21:06:B4:7D
Certificate issuer:       /CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Certificate serial:       43537438B0A3F8AE4296BBFE8AC46AE47CD2F0D3
Authority key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3136382e3233322e3130382e302f32322d3232203d3e20323634373530.roa
Signing time:             Tue 05 Mar 2024 17:41:44 +0000
ROA not before:           Tue 05 Mar 2024 17:36:44 +0000
ROA not after:            Tue 04 Mar 2025 17:41:44 +0000
asID:                     264750
IP address blocks:        168.232.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:53:74:38:b0:a3:f8:ae:42:96:bb:fe:8a:c4:6a:e4:7c:d2:f0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
        Validity
            Not Before: Mar  5 17:36:44 2024 GMT
            Not After : Mar  4 17:41:44 2025 GMT
        Subject: CN=CDB225F64A08EE6ED20648236B3743E62106B47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:b4:dd:90:f3:73:13:ce:56:9c:a6:12:cb:
                    cc:fa:12:82:f6:6b:0a:51:5e:32:04:84:dd:40:69:
                    60:fe:35:e9:7d:ef:86:a8:b4:1f:9c:23:2a:16:f8:
                    2c:3b:cb:0a:4c:d1:65:33:a6:5e:47:3f:63:25:86:
                    95:f3:4a:7e:fc:49:a3:64:6e:54:1a:7e:a6:c8:99:
                    6e:06:c4:01:54:1a:2e:83:6d:55:09:3d:61:c6:87:
                    13:b7:dd:96:7e:a3:33:54:ce:f4:2b:31:7e:73:e6:
                    1c:23:bc:d6:70:bd:0d:91:64:dd:33:ca:21:ac:eb:
                    f8:93:99:2e:65:1c:56:56:41:9e:3b:a3:1b:48:d9:
                    f2:b1:3c:3c:0e:6c:bd:74:74:c6:bf:67:d0:83:5e:
                    28:a5:64:8b:db:fc:4a:11:67:5e:6c:4c:33:cd:90:
                    2e:73:fb:56:0f:10:ed:d3:85:ec:38:8c:64:a2:13:
                    53:c1:3e:fa:b0:6a:d0:eb:72:25:de:ca:7c:04:d8:
                    a7:43:45:f8:b2:0a:d3:67:02:f7:63:e2:f0:7d:a0:
                    ad:8d:0e:73:e1:15:b6:f5:22:9b:15:b1:80:f8:2a:
                    d4:92:36:3a:df:69:18:a6:4c:f9:ee:6b:b6:b9:e2:
                    4e:1c:ea:03:8f:a3:72:2a:95:36:a9:da:11:4c:7f:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:25:F6:4A:08:EE:6E:D2:06:48:23:6B:37:43:E6:21:06:B4:7D
            X509v3 Authority Key Identifier:
                keyid:0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3136382e3233322e3130382e302f32322d3232203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:41:17:05:10:e7:d4:d8:a0:6b:d9:eb:a7:db:74:1b:b7:46:
         df:a6:89:c4:d5:7c:c3:27:8d:6d:87:54:9a:b8:af:dc:7a:80:
         9f:36:2b:60:9b:48:57:87:97:24:91:84:1e:fa:f5:eb:aa:ac:
         f8:09:a3:83:4f:b1:14:15:b1:7d:5b:29:73:c4:44:46:20:5d:
         3f:9a:d3:2d:1f:5c:37:66:e0:6d:56:8a:d7:cd:ba:1e:43:85:
         d3:f3:d6:01:c9:8d:5e:d1:a3:8e:c5:0b:42:8b:10:73:bc:89:
         62:d5:2f:f0:f1:ff:ba:ae:92:77:21:81:b9:5b:f6:1a:ee:b9:
         52:5b:61:82:47:27:17:fb:15:3b:d3:9d:68:f6:5f:2d:1a:fb:
         19:59:0f:ce:62:c4:5f:25:f2:95:c9:0d:dc:e8:f1:a2:84:be:
         17:9a:af:1a:45:e6:ba:77:ce:65:76:e0:4e:63:30:99:f7:da:
         fa:69:39:3c:82:15:ba:cd:17:ee:e6:f2:e2:20:4c:2d:aa:f9:
         7a:6b:e1:0c:e0:13:8c:97:87:6a:aa:62:e8:cb:4c:c6:20:72:
         6e:bd:9d:bc:60:49:78:fd:7a:a5:bc:a7:47:91:43:39:08:68:
         4c:a9:c9:c8:8c:cc:08:ba:d8:6d:9d:c3:5e:14:02:e2:89:65:
         ff:d2:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org