Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/3136382e3139352e3138352e302f32342d3234203d3e20323731393931.roa
File:                     3136382e3139352e3138352e302f32342d3234203d3e20323731393931.roa (raw, json)
Hash identifier:          bHRCPFgJAKJk8vScdhclLFou5WlKhv7b+n0xQreWILk=
Subject key identifier:   BD:BB:AD:CA:79:56:FF:EC:BE:DC:EC:38:47:38:DC:87:B6:04:FF:3C
Certificate issuer:       /CN=76ED1487236321BE3ADB764A2ADE56DE8EB91D48
Certificate serial:       4B67948ED6E3BFDEABC144E6E1FD7DBA5A3BAA6C
Authority key identifier: 76:ED:14:87:23:63:21:BE:3A:DB:76:4A:2A:DE:56:DE:8E:B9:1D:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/3136382e3139352e3138352e302f32342d3234203d3e20323731393931.roa
Signing time:             Tue 05 Mar 2024 17:52:22 +0000
ROA not before:           Tue 05 Mar 2024 17:47:22 +0000
ROA not after:            Tue 04 Mar 2025 17:52:22 +0000
asID:                     271991
IP address blocks:        168.195.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:67:94:8e:d6:e3:bf:de:ab:c1:44:e6:e1:fd:7d:ba:5a:3b:aa:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ED1487236321BE3ADB764A2ADE56DE8EB91D48
        Validity
            Not Before: Mar  5 17:47:22 2024 GMT
            Not After : Mar  4 17:52:22 2025 GMT
        Subject: CN=BDBBADCA7956FFECBEDCEC384738DC87B604FF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:25:4f:8f:55:84:d3:40:f1:e4:9a:c6:6e:
                    6c:a5:17:9f:ed:0d:de:67:54:df:31:1d:11:46:91:
                    4c:4f:20:5b:e7:dc:a1:70:ec:20:44:7e:12:88:58:
                    0f:99:18:76:9e:60:a1:56:82:98:36:5f:9d:f5:93:
                    05:9f:45:84:87:fe:f3:3b:26:23:0e:b4:e6:67:9c:
                    43:ca:cc:47:f5:55:07:06:e6:9f:2e:18:e7:a4:20:
                    9c:dd:06:5a:88:48:04:36:1e:27:6f:c0:26:bc:c1:
                    2e:44:18:b9:e1:88:e5:d5:24:1a:38:64:d1:cf:74:
                    e0:2f:3c:3d:33:d2:85:35:4e:01:43:fd:61:66:f5:
                    b9:ec:88:af:74:b7:3c:fc:81:1f:9f:8d:78:b4:e7:
                    5a:b9:a8:73:56:7a:da:d3:4f:81:02:0b:60:38:97:
                    36:04:78:69:b0:46:02:f2:60:ac:6c:64:21:fa:9c:
                    21:ec:31:88:29:51:e2:88:7a:49:42:5e:66:50:e8:
                    99:86:15:de:34:82:a6:d9:bf:3f:5e:e1:6a:ff:31:
                    ef:cc:c3:79:0f:0d:18:78:e8:56:35:aa:ae:eb:27:
                    e7:4d:4b:03:ac:da:71:1f:8f:7a:d3:16:a1:77:54:
                    96:3b:4a:d1:26:bf:8e:a9:ef:c2:b2:69:e1:0b:c4:
                    24:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BB:AD:CA:79:56:FF:EC:BE:DC:EC:38:47:38:DC:87:B6:04:FF:3C
            X509v3 Authority Key Identifier:
                keyid:76:ED:14:87:23:63:21:BE:3A:DB:76:4A:2A:DE:56:DE:8E:B9:1D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/3136382e3139352e3138352e302f32342d3234203d3e20323731393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fc:95:6d:02:3e:c4:4a:74:ca:c0:80:6e:ce:5f:b5:48:9d:
         2f:ce:72:18:63:18:26:f5:fb:66:c6:be:8a:c3:73:b9:c9:0a:
         e4:61:f5:80:62:3e:00:ed:1f:bd:94:8f:2a:14:35:e7:88:8c:
         ad:4b:89:91:f7:02:a9:19:2d:12:eb:e5:a5:f5:77:28:d0:83:
         cd:95:b4:fd:2d:c6:de:68:e1:3c:bd:9b:d6:fe:ac:83:2f:54:
         6f:d4:47:3b:03:4a:53:6d:d8:59:72:1f:f0:79:73:42:77:e1:
         0a:81:15:3b:61:e5:62:d2:0a:c2:d9:28:60:e7:29:c0:c6:b6:
         0b:e8:06:8e:05:37:cf:4d:55:6d:16:05:87:a5:3f:9d:77:00:
         cb:9b:34:0a:be:74:0a:d2:7b:b9:85:33:43:89:a2:d4:42:62:
         cf:83:d6:9c:82:bc:69:3a:0a:2b:84:10:95:d8:0c:5c:b4:e7:
         80:33:8a:c4:e2:66:51:5a:7b:b9:1f:51:8f:1d:d3:fb:7d:e4:
         46:49:db:4d:3a:a7:e6:06:6b:99:3d:10:cb:42:e2:ae:a5:6c:
         18:50:a5:3d:1d:30:81:c2:e9:b6:63:00:16:ae:95:c8:7d:f2:
         96:1d:fe:2b:10:01:c9:3d:ca:bf:0d:4a:61:6d:c7:2b:a5:34:
         27:82:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:33:59 2024 by rpki-client on console-fra.rpki-client.org