Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/3136382e3139362e312e302f32342d3234203d3e20323634373537.roa
File:                     3136382e3139362e312e302f32342d3234203d3e20323634373537.roa (raw, json)
Hash identifier:          cQWeaCyD3HoJczjmV4NfQaDgBX4tjMw+dWcO3kKMcV4=
Subject key identifier:   70:91:8D:04:68:A8:AE:F8:6B:7F:9B:D9:6F:52:A1:98:7E:96:6E:FF
Certificate issuer:       /CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
Certificate serial:       5A3B448FDE730CC9E4764164C43BC350D309BA66
Authority key identifier: F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/3136382e3139362e312e302f32342d3234203d3e20323634373537.roa
Signing time:             Tue 05 Mar 2024 17:49:10 +0000
ROA not before:           Tue 05 Mar 2024 17:44:10 +0000
ROA not after:            Tue 04 Mar 2025 17:49:10 +0000
asID:                     264757
IP address blocks:        168.196.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3b:44:8f:de:73:0c:c9:e4:76:41:64:c4:3b:c3:50:d3:09:ba:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
        Validity
            Not Before: Mar  5 17:44:10 2024 GMT
            Not After : Mar  4 17:49:10 2025 GMT
        Subject: CN=70918D0468A8AEF86B7F9BD96F52A1987E966EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:0f:d4:1b:57:50:7e:38:64:0a:62:e7:a5:
                    2e:12:49:8f:ea:a9:5d:17:8f:8e:9c:14:53:0b:0b:
                    9c:53:ff:b4:0a:34:5a:2c:54:c0:a0:1f:bc:21:64:
                    2f:a9:3c:ea:39:eb:97:f4:dd:f4:57:d4:97:1d:cd:
                    a6:03:97:52:8c:ab:0d:77:5e:d5:68:c0:9c:00:eb:
                    66:e7:a0:dc:93:2b:09:66:7b:6f:33:f9:89:59:b4:
                    45:a8:5c:26:1d:d6:85:f5:48:1f:0d:a9:e1:8b:da:
                    eb:09:79:3f:15:4f:22:65:bc:bc:d7:8e:89:5c:6e:
                    a4:33:7d:15:de:3b:11:c1:3c:78:06:31:1c:83:93:
                    4f:7b:ae:95:42:bb:fa:8b:ee:34:c1:b2:4a:8a:65:
                    9d:59:51:67:5f:cd:ec:20:76:51:67:5c:2e:21:c8:
                    6d:d6:da:ba:14:7b:4e:54:6f:3c:2a:08:c7:4e:91:
                    7c:09:da:43:d2:6f:12:91:eb:67:67:75:91:da:4d:
                    01:96:68:49:df:11:62:00:52:6a:43:72:b3:53:0c:
                    78:f5:3e:a2:66:3f:d4:80:5b:b3:35:fe:72:20:76:
                    a7:19:8d:44:eb:bf:cd:a3:7e:01:d5:06:4b:a9:d7:
                    7b:e4:16:99:75:08:26:5a:9b:d8:2d:83:73:0d:da:
                    f8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:8D:04:68:A8:AE:F8:6B:7F:9B:D9:6F:52:A1:98:7E:96:6E:FF
            X509v3 Authority Key Identifier:
                keyid:F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/3136382e3139362e312e302f32342d3234203d3e20323634373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:61:9f:fd:24:8a:f3:ce:49:e1:10:2d:27:2d:9a:ff:3a:15:
         b6:ef:bc:c9:c6:e8:1f:56:85:fc:05:1c:71:d6:fe:4d:19:96:
         e1:2c:f6:1c:05:94:9a:86:3e:e3:e5:3d:3a:c2:ad:15:1c:e5:
         94:81:85:52:26:f4:c5:1e:79:0e:4f:52:e6:5f:5b:c6:f9:d2:
         7c:40:10:5f:5b:e1:3f:93:c2:cb:1c:56:d6:25:8c:e8:22:da:
         a7:d5:60:30:1a:48:20:a3:ae:36:03:b7:9f:c4:49:10:e2:f2:
         3a:6d:73:e4:d1:3a:d3:e3:2b:19:08:2a:df:6f:c6:21:d9:5b:
         bd:07:20:98:d7:20:1e:6a:0c:2b:b9:1b:a3:88:30:4b:ac:d1:
         36:20:7c:35:e9:77:44:3e:96:a7:35:b9:a7:07:a7:1e:25:fa:
         bc:6e:5b:45:81:b6:16:d4:48:ff:5e:39:94:07:6f:5f:73:77:
         4f:63:b7:d8:31:6a:9e:f4:0a:54:ea:a1:c4:9c:7e:f2:a7:f0:
         4a:6c:56:e6:64:92:9e:27:7b:06:d6:0d:74:31:8e:46:c9:e3:
         e1:a4:dd:5d:d1:dc:ce:1f:51:f5:d4:fb:92:da:07:80:12:96:
         dc:cf:5b:a5:87:aa:57:37:46:49:bb:b4:7f:e3:9c:e8:3b:64:
         53:cc:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org