Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa
File:                     3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa (raw, json)
Hash identifier:          KO80AdhSWXJSv9zrnGZt5Ej1v5LH94qtQU57sfivi/Y=
Subject key identifier:   55:F9:30:A2:2A:B0:B0:12:EF:8F:85:5E:7B:F9:1F:6C:33:69:28:7C
Certificate issuer:       /CN=3424CAC085E77B82A8878925FC49A646944DB380
Certificate serial:       73E85EFF8627821E5048BE9AD152A616B3688D67
Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa
Signing time:             Tue 05 Mar 2024 17:44:38 +0000
ROA not before:           Tue 05 Mar 2024 17:39:38 +0000
ROA not after:            Tue 04 Mar 2025 17:44:38 +0000
asID:                     263799
IP address blocks:        168.195.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e8:5e:ff:86:27:82:1e:50:48:be:9a:d1:52:a6:16:b3:68:8d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380
        Validity
            Not Before: Mar  5 17:39:38 2024 GMT
            Not After : Mar  4 17:44:38 2025 GMT
        Subject: CN=55F930A22AB0B012EF8F855E7BF91F6C3369287C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:89:22:fa:a8:c8:42:af:d5:ca:b7:cf:c0:
                    bb:df:20:1e:5d:c4:e9:5a:3a:c3:1a:cf:9c:45:0d:
                    31:7f:c1:1f:09:43:ec:f4:1c:8d:e0:da:32:d6:2f:
                    47:8f:50:91:2e:44:99:af:87:f2:5b:c5:da:a2:ae:
                    ef:09:ec:af:79:20:35:96:35:d9:02:3d:66:44:21:
                    ad:ee:20:94:a6:1a:de:b3:4e:5c:35:8e:bc:54:aa:
                    c4:9c:5b:49:37:cf:a5:a7:0d:bb:c0:72:24:5f:31:
                    26:e9:53:10:0e:52:1c:85:04:03:79:d8:17:42:43:
                    26:76:99:03:aa:be:28:46:1d:a6:1a:87:67:fb:7a:
                    db:a7:8f:b0:07:38:3e:17:54:37:71:6e:cd:94:fe:
                    b8:63:85:d2:cf:e2:48:1b:e4:b8:5b:fc:d9:9c:ea:
                    55:98:d2:ce:4d:4f:31:b4:53:1a:b7:d1:32:07:71:
                    88:58:e3:10:39:e8:43:91:7e:32:0b:9b:16:38:ba:
                    d6:4b:b1:3d:3a:88:14:36:c8:63:dd:94:b5:9d:93:
                    7d:86:65:2d:97:1c:e5:7b:29:1d:af:ff:7c:a3:e3:
                    84:60:d3:6c:73:f4:d9:ee:07:23:5c:81:7e:d9:3c:
                    a5:50:52:8b:37:a1:b9:d8:df:39:aa:07:87:01:b3:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F9:30:A2:2A:B0:B0:12:EF:8F:85:5E:7B:F9:1F:6C:33:69:28:7C
            X509v3 Authority Key Identifier:
                keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:b6:a3:80:4f:b3:e5:d2:20:44:57:f2:d8:74:6c:bf:5f:
         fc:82:10:da:d3:ef:f7:01:ea:2c:dd:f8:57:13:10:af:59:08:
         4f:1d:2d:91:d6:0b:9e:ee:52:d0:57:f7:03:dc:7a:75:fe:78:
         cd:8a:ed:e9:1a:17:11:55:fa:1c:af:f2:c3:ed:b4:59:ed:e4:
         63:0e:af:e6:b2:c3:cc:8f:ae:f2:07:f6:c1:2c:e9:ee:cf:db:
         a6:49:2e:df:30:a6:9d:a4:c8:53:74:c0:8b:ba:b7:91:7c:2f:
         7d:59:af:96:87:e6:fb:06:f6:3d:20:29:50:5c:d5:11:36:e9:
         ca:b4:68:66:5d:7d:31:23:66:ae:61:e1:2b:5b:d1:3e:63:39:
         7b:40:f0:77:88:c6:2e:a9:10:8e:ea:a3:ee:cd:6a:20:2c:be:
         50:d3:6c:81:00:cc:b7:d9:98:95:70:44:46:d2:56:73:84:11:
         3e:d4:7e:8c:5c:83:72:15:bc:e4:5f:aa:8f:ea:a7:e2:4c:50:
         02:b1:5f:6c:03:e3:c9:e4:c5:c2:75:e5:b2:af:9b:e1:0f:ef:
         ad:27:54:21:50:82:d9:6a:fa:f7:00:a8:09:0d:30:79:50:fa:
         e5:79:59:ab:5e:69:46:4f:9d:11:b2:ce:76:4b:99:7d:4e:11:
         c5:6a:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 00:38:58 2024 by rpki-client on console-ams.rpki-client.org