Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/3136382e3139362e3232342e302f32322d3232203d3e20323634373635.roa
File:                     3136382e3139362e3232342e302f32322d3232203d3e20323634373635.roa (raw, json)
Hash identifier:          T0HHeXo5yYToWznyZO0fGrop/7HE91m32kq6rGb2AlM=
Subject key identifier:   63:78:04:73:B4:F8:E8:6A:7C:70:F3:E6:BD:70:1E:41:96:62:04:2D
Certificate issuer:       /CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
Certificate serial:       5BA1D75E8BDD7B5DF7D8FFB5662A8A9788E0C248
Authority key identifier: D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/3136382e3139362e3232342e302f32322d3232203d3e20323634373635.roa
Signing time:             Thu 06 Jun 2024 01:05:01 +0000
ROA not before:           Thu 06 Jun 2024 01:00:01 +0000
ROA not after:            Thu 05 Jun 2025 01:05:01 +0000
asID:                     264765
IP address blocks:        168.196.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a1:d7:5e:8b:dd:7b:5d:f7:d8:ff:b5:66:2a:8a:97:88:e0:c2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
        Validity
            Not Before: Jun  6 01:00:01 2024 GMT
            Not After : Jun  5 01:05:01 2025 GMT
        Subject: CN=63780473B4F8E86A7C70F3E6BD701E419662042D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:d3:2b:09:e8:30:a9:73:73:6a:ab:16:34:
                    34:a5:6d:fa:6e:e5:e0:50:60:c8:73:5a:ca:56:c4:
                    57:33:46:39:03:14:ba:ca:25:00:d0:3e:f7:9c:54:
                    8b:36:1e:57:36:41:af:0c:64:37:1a:3c:36:91:f6:
                    42:d7:10:02:e8:c4:a5:f5:fc:86:43:85:39:4c:b4:
                    bb:d0:04:be:08:61:65:e0:79:58:02:64:a6:ab:51:
                    98:a1:dc:dd:00:c5:10:9e:1a:19:ed:9c:6a:1b:39:
                    fe:ec:f3:62:b6:ab:9d:e2:95:6b:94:ac:81:39:1b:
                    ce:33:35:20:14:3f:8c:a8:28:b4:c2:71:fb:3b:16:
                    a9:4b:51:88:83:3e:d6:a3:00:bc:51:97:65:a0:e0:
                    ea:f2:71:9a:74:86:5b:5b:14:5f:4f:26:5e:94:39:
                    2f:53:00:2f:2a:84:8e:eb:7b:91:c5:d9:5a:9b:26:
                    94:7e:12:31:da:ab:07:45:5a:c9:29:cc:62:fd:5f:
                    2d:73:da:90:54:73:16:aa:7b:5b:12:59:dc:da:09:
                    13:cb:86:01:90:41:8d:8a:29:fb:c6:30:f1:fe:8d:
                    bb:cf:44:ec:61:d5:3e:d9:1c:92:fd:49:f2:93:72:
                    af:34:85:80:ee:39:8e:4b:8a:fb:ba:62:ad:cf:90:
                    47:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:78:04:73:B4:F8:E8:6A:7C:70:F3:E6:BD:70:1E:41:96:62:04:2D
            X509v3 Authority Key Identifier:
                keyid:D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/3136382e3139362e3232342e302f32322d3232203d3e20323634373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:ef:7a:5e:fb:c7:bb:83:1c:b7:f9:ef:9c:50:d0:36:7f:f3:
         52:63:06:ba:14:8b:26:8f:e1:de:6d:c5:95:a7:73:3a:c3:6d:
         ed:ee:97:ee:da:1a:b8:ae:f0:7f:0c:7f:1b:cd:07:9d:d3:90:
         b1:5f:d5:0e:11:ce:52:d4:cf:8e:a2:8f:08:af:27:ec:66:6d:
         ef:e4:0f:c4:63:a0:38:85:29:ca:d3:f7:c2:b2:8a:98:7f:c6:
         a9:5a:cc:5d:17:3d:97:79:3e:db:a8:d5:78:87:7d:e9:c4:1d:
         17:c3:96:32:f0:1a:cd:7b:2d:1f:b4:f9:19:8e:4b:f3:77:b5:
         5d:40:63:5d:36:91:ce:e7:84:9a:1d:05:49:5f:00:64:25:79:
         47:84:6d:7a:f3:58:d3:24:f9:f0:e5:f4:72:c1:62:98:68:c5:
         22:e6:e0:26:2a:4e:f1:e6:5a:68:b9:49:17:d4:50:a0:33:ff:
         d7:a9:a9:cf:62:aa:2c:e9:eb:80:30:a5:98:f6:05:80:2c:dd:
         fa:9f:1a:0b:72:1e:68:20:b9:f7:09:0b:ba:1d:8c:ff:e4:f4:
         17:46:85:b1:d8:fd:bc:dc:0c:94:54:e8:6d:71:16:7d:32:67:
         af:aa:db:e0:8e:a4:44:23:d6:96:f0:78:6b:d9:66:24:45:a1:
         48:9a:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:02 2024 by rpki-client on console-ams.rpki-client.org