Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa
File:                     3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa (raw, json)
Hash identifier:          N3uSK5DKY2VXDLHZGCmmXXILOIqFBLvD/C3Qh9NPj2k=
Subject key identifier:   AE:9E:24:3F:08:18:8D:C7:4C:D8:9E:DA:A7:F5:F6:8C:2A:CB:2E:16
Certificate issuer:       /CN=5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD
Certificate serial:       3630388B30E16893AA78CE84E251E4FF6CD8D3FB
Authority key identifier: 5F:B2:49:8B:EC:08:81:9F:A5:A3:23:BD:3C:5E:C1:E8:AE:E6:83:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa
Signing time:             Tue 05 Mar 2024 17:51:18 +0000
ROA not before:           Tue 05 Mar 2024 17:46:18 +0000
ROA not after:            Tue 04 Mar 2025 17:51:18 +0000
asID:                     265509
IP address blocks:        168.195.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:30:38:8b:30:e1:68:93:aa:78:ce:84:e2:51:e4:ff:6c:d8:d3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD
        Validity
            Not Before: Mar  5 17:46:18 2024 GMT
            Not After : Mar  4 17:51:18 2025 GMT
        Subject: CN=AE9E243F08188DC74CD89EDAA7F5F68C2ACB2E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:54:51:96:3c:40:00:7b:6f:eb:21:fb:f3:
                    1d:2b:83:a4:5b:78:69:6d:e8:ff:78:75:21:1e:4c:
                    eb:e5:43:60:b0:e7:1c:af:a3:cf:ea:d3:1f:97:51:
                    1e:1b:9a:97:00:97:c9:ff:dc:60:4e:f4:cb:23:d9:
                    a9:c5:50:5e:eb:05:88:55:29:99:79:d2:15:18:5c:
                    e3:e2:3f:77:c8:5c:c1:35:e3:6a:e8:d0:84:2c:0d:
                    c2:58:a8:5b:62:11:4f:d0:ce:95:b7:70:92:e4:79:
                    b1:1d:aa:e8:a8:61:de:21:74:d6:af:01:17:d5:b7:
                    02:9f:16:a1:01:49:0b:58:2a:03:46:52:f9:62:43:
                    8a:b2:e7:20:45:43:72:5a:f0:46:32:f8:5a:99:ba:
                    6b:0c:1d:a4:b0:7a:3d:a1:b0:24:db:e0:63:75:d6:
                    10:d6:c2:76:da:a4:6e:a0:2c:0f:ab:ec:e8:92:3b:
                    57:16:33:0a:25:b1:01:00:dd:79:9b:24:1a:5d:69:
                    c1:a0:62:a9:b8:89:22:e3:40:50:0e:62:87:be:a8:
                    62:b2:73:af:7d:23:77:62:3a:ad:3c:42:1b:de:0c:
                    48:4e:ca:ae:be:44:22:69:4b:62:f6:83:79:76:80:
                    fa:a7:46:16:53:b9:d8:c7:b2:eb:47:a8:66:80:99:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9E:24:3F:08:18:8D:C7:4C:D8:9E:DA:A7:F5:F6:8C:2A:CB:2E:16
            X509v3 Authority Key Identifier:
                keyid:5F:B2:49:8B:EC:08:81:9F:A5:A3:23:BD:3C:5E:C1:E8:AE:E6:83:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FB2498BEC08819FA5A323BD3C5EC1E8AEE683BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28C8A68704DD8B73E4DE39EEC2EE40C186813FE537AC494F96F4FD4DC09ED71A/0/3136382e3139352e3230342e302f32322d3234203d3e20323635353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:77:30:22:5c:31:b8:12:d3:66:91:f8:90:9a:2d:35:72:76:
         eb:2b:0b:03:54:7b:e8:d0:15:da:7d:c5:4c:e2:3f:0b:9b:58:
         dc:ff:b3:c7:27:10:2e:94:a9:86:d4:1d:33:ea:b6:aa:57:9b:
         67:7e:d8:44:1e:12:a9:b0:85:a7:6e:6b:77:5c:60:e1:74:c4:
         a5:b0:5f:7f:c7:23:ec:35:e1:fb:c1:bc:77:eb:12:59:0b:00:
         8a:d8:c7:4a:e5:6f:6b:62:2a:4d:97:31:e4:02:be:a0:a6:76:
         cd:cb:25:c8:bd:9b:35:cd:ac:e5:06:74:8e:7f:f5:3e:97:ee:
         13:4b:c7:b2:4a:2d:f9:f2:12:f8:c7:fb:c6:87:74:50:d0:23:
         73:f4:80:a5:93:d1:b2:d4:dc:3f:6f:3b:20:a6:b8:2c:25:a1:
         56:09:4a:d3:8d:e4:b1:eb:87:3e:c0:75:61:ca:44:4d:aa:21:
         d7:34:80:18:26:2f:c4:d0:8c:46:94:af:6d:b3:2a:7b:56:fa:
         96:f2:71:83:d5:c9:b0:09:99:f5:56:93:bc:a3:d6:38:d2:c8:
         46:26:bf:59:bd:eb:e0:7c:65:c2:f9:ec:ac:dc:ed:c7:76:cc:
         f3:27:49:87:cb:01:69:9b:f4:66:dd:65:2f:a1:dc:d8:d4:37:
         68:1a:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org