Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3136312e302e36382e302f32322d3232203d3e20323633383231.roa
File:                     3136312e302e36382e302f32322d3232203d3e20323633383231.roa (raw, json)
Hash identifier:          PCb3ooxnLSXG7e60RTRyuK1qepURrLDiCWqLzncXjJg=
Subject key identifier:   C0:06:5D:39:FC:2B:FB:BD:EB:2C:B9:14:71:10:7D:41:37:64:E0:CF
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       4D8FEE10BCE5DC1FD38B8C9941E2B9ACFE6ED28F
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3136312e302e36382e302f32322d3232203d3e20323633383231.roa
Signing time:             Tue 05 Mar 2024 18:21:12 +0000
ROA not before:           Tue 05 Mar 2024 18:16:12 +0000
ROA not after:            Tue 04 Mar 2025 18:21:12 +0000
asID:                     263821
IP address blocks:        161.0.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8f:ee:10:bc:e5:dc:1f:d3:8b:8c:99:41:e2:b9:ac:fe:6e:d2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Mar  5 18:16:12 2024 GMT
            Not After : Mar  4 18:21:12 2025 GMT
        Subject: CN=C0065D39FC2BFBBDEB2CB91471107D413764E0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:83:31:df:06:f0:e6:d6:6c:f4:88:e8:f9:
                    4e:96:61:aa:9c:ac:09:fe:83:7e:a3:d1:a8:c3:cb:
                    55:39:ef:b6:56:99:49:d1:bd:68:7b:6d:3c:4e:b1:
                    71:70:54:9c:cd:07:a7:8b:48:a8:05:0b:99:01:dd:
                    41:30:6d:34:e7:91:e4:3d:65:fd:e1:c2:0c:c7:3a:
                    e1:df:7e:b8:7d:5d:bc:1a:cf:27:fd:e2:f6:f9:c1:
                    01:d3:33:db:5d:bd:49:7c:4c:ad:b4:c7:af:b6:da:
                    35:f7:d9:90:3e:73:40:b9:87:ae:da:67:75:cf:8a:
                    80:b3:40:0c:31:f6:b7:fa:2f:1d:f1:97:81:a9:e3:
                    a7:7d:4f:42:12:45:aa:71:f5:ec:21:b2:77:d5:c5:
                    d7:a5:da:33:63:ac:e4:8c:35:35:cc:72:1d:25:58:
                    35:74:cf:2b:77:48:bf:4c:ba:74:89:63:24:aa:db:
                    44:52:64:e9:48:35:ee:78:46:9c:35:52:12:79:7e:
                    64:9f:fd:ad:e0:aa:92:16:06:15:c6:81:1c:80:b9:
                    e1:f7:65:f9:3d:13:39:47:60:79:e7:2b:9a:e2:41:
                    80:49:7e:67:2d:c4:59:64:45:e6:0a:af:10:a0:ec:
                    c9:25:fc:f3:27:1a:04:b8:75:d7:6a:e4:6f:fc:0a:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:06:5D:39:FC:2B:FB:BD:EB:2C:B9:14:71:10:7D:41:37:64:E0:CF
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3136312e302e36382e302f32322d3232203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:e9:da:5e:0c:d4:51:86:68:7d:95:0d:04:bd:2b:fd:af:
         3a:9e:be:42:9a:b4:0b:bc:70:31:7b:a6:1a:67:bf:bc:c6:1f:
         fd:ce:07:83:ae:68:8a:23:bb:46:39:21:7d:98:2e:d5:b9:a0:
         bb:2f:37:82:f8:d8:6e:62:71:ab:58:fa:a2:a8:0a:8e:37:ab:
         55:ea:43:34:28:9c:d1:b4:78:98:1a:6d:c9:b0:ca:84:1f:6e:
         b0:74:a8:8f:dc:b1:4e:c6:9f:08:56:71:27:71:55:ac:39:9d:
         54:ca:ad:ea:45:30:1f:d2:d7:42:58:92:cb:24:75:9a:a8:5f:
         03:86:cb:88:84:5d:31:be:c7:64:c2:f5:db:2d:08:94:d1:d9:
         47:c8:ac:f8:0c:8a:22:d7:10:fb:01:19:f9:7f:ec:20:1b:eb:
         e6:a7:ce:12:45:b0:14:a1:b4:73:56:c1:07:7e:49:ab:84:0c:
         9b:a8:2e:e4:b3:46:20:88:fa:75:19:bb:60:28:64:e6:dd:c6:
         f2:a3:9a:62:b3:a9:6b:33:cc:0f:07:fd:5c:9c:2f:d0:13:5b:
         e6:c9:5c:bd:10:19:8a:9a:91:ec:6d:98:35:c7:20:1e:7e:6c:
         94:ab:19:df:78:cc:12:7f:5f:b2:aa:c4:bc:8b:c0:74:02:05:
         21:f1:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 20:41:00 2024 by rpki-client on console-fra.rpki-client.org