Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa
File:                     3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa (raw, json)
Hash identifier:          o3VAIxqKVQsXZwJAbhC6jZJqG/6ryYF8lj1VFo2Vk+Q=
Subject key identifier:   18:F8:61:E3:A3:BD:7D:40:1F:58:C3:54:65:2B:1E:C9:92:7D:D5:F2
Certificate issuer:       /CN=3424CAC085E77B82A8878925FC49A646944DB380
Certificate serial:       13C49645EF1F83D544B8FB9154837FC0BA522B8C
Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa
Signing time:             Tue 05 Mar 2024 17:44:38 +0000
ROA not before:           Tue 05 Mar 2024 17:39:38 +0000
ROA not after:            Tue 04 Mar 2025 17:44:38 +0000
asID:                     263799
IP address blocks:        168.195.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c4:96:45:ef:1f:83:d5:44:b8:fb:91:54:83:7f:c0:ba:52:2b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380
        Validity
            Not Before: Mar  5 17:39:38 2024 GMT
            Not After : Mar  4 17:44:38 2025 GMT
        Subject: CN=18F861E3A3BD7D401F58C354652B1EC9927DD5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c3:fd:3d:a5:b1:77:d3:d3:ff:21:24:39:d7:
                    31:ea:9b:46:37:ee:82:62:8f:15:24:7c:1f:f3:b7:
                    b7:2f:2c:0d:a2:57:ec:88:68:d2:ce:b5:38:e2:00:
                    94:e8:56:bf:54:85:5b:1a:7c:bc:a4:70:9c:d1:33:
                    31:67:c8:b3:d3:17:3c:b8:fe:c7:b7:da:6b:96:9d:
                    c3:86:73:d6:55:fd:c4:8a:d3:68:ee:37:70:19:6d:
                    f4:34:cb:28:47:b2:7b:a7:ac:0d:4f:66:be:96:07:
                    13:58:8e:c4:b0:dc:c5:38:db:a8:e0:d6:be:4f:a5:
                    b2:37:93:33:59:93:ba:68:ed:d2:64:91:96:0a:95:
                    53:cc:c5:c7:62:48:59:e8:49:4c:6b:82:1e:27:d6:
                    32:de:9a:db:cf:cd:aa:d9:68:3d:19:9c:d4:d8:19:
                    97:ad:77:e4:44:10:48:34:76:af:da:ff:a0:a9:f3:
                    61:c6:45:32:70:2d:81:e5:af:16:fa:ef:be:36:f1:
                    98:29:c0:47:2c:c1:6c:77:bd:50:93:8e:03:75:e4:
                    49:89:d0:a1:3b:6a:b1:1b:9e:5a:70:d3:08:61:9e:
                    f3:a4:7f:51:4f:fe:55:9d:47:18:ec:c5:75:63:86:
                    b4:0d:25:29:88:4b:c5:e7:c6:c5:1b:0e:f2:1b:a3:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:61:E3:A3:BD:7D:40:1F:58:C3:54:65:2B:1E:C9:92:7D:D5:F2
            X509v3 Authority Key Identifier:
                keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:42:ab:b0:24:d8:a1:fd:cb:09:8d:35:0b:0e:b3:37:ad:
         d3:ea:8d:f1:71:70:eb:3a:f0:96:fa:65:c8:a7:5f:fd:bb:bc:
         8f:d9:b8:f4:cc:c8:0b:f1:0c:04:d8:aa:58:94:fe:a3:de:e4:
         5c:5f:68:7e:04:6e:a5:86:8c:9c:57:c8:0d:b2:c4:93:c8:82:
         cd:10:b2:18:63:20:2c:fa:95:bf:85:6f:42:05:37:f5:dc:ce:
         c2:19:0c:68:1c:8a:1c:34:43:e5:cf:b2:a1:ef:c3:4e:8f:bf:
         82:45:8c:a0:21:9c:af:22:1a:84:d8:c8:6a:7f:ca:6f:1b:9d:
         58:4c:52:d5:b6:a6:52:62:0e:42:cc:78:58:0a:30:c1:ff:09:
         60:1d:4e:fb:91:c7:c7:12:18:43:16:82:71:7e:63:d7:64:5a:
         b9:86:91:16:a3:b3:43:99:47:79:95:96:da:8a:5e:b5:23:1f:
         80:1a:6e:45:66:7b:db:d8:fe:06:9d:77:53:f5:ff:8b:c9:12:
         34:6f:c1:30:39:92:b9:e7:70:61:c1:3c:20:66:b8:82:ea:5c:
         b9:d9:c4:1a:1e:33:ce:23:81:d7:a6:5d:51:04:d1:2b:28:3d:
         99:2b:ac:92:58:f9:96:c9:f2:ce:52:8e:64:10:3a:b4:97:62:
         ff:cc:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 00:38:58 2024 by rpki-client on console-ams.rpki-client.org