Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138342e302f32342d3234203d3e20323731383134.roa
File:                     3136342e3136332e3138342e302f32342d3234203d3e20323731383134.roa (raw, json)
Hash identifier:          RCcdo20SWFWlL5/tp7yokAdklwYoFGiHSHlrFjt30eY=
Subject key identifier:   76:79:D7:09:0D:47:45:2A:E6:A6:54:15:4C:02:49:2C:E4:21:41:35
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       63A3159FE74EB5DB1478D379AFA2F5BE119AA7B0
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138342e302f32342d3234203d3e20323731383134.roa
Signing time:             Tue 05 Mar 2024 17:52:40 +0000
ROA not before:           Tue 05 Mar 2024 17:47:40 +0000
ROA not after:            Tue 04 Mar 2025 17:52:40 +0000
asID:                     271814
IP address blocks:        164.163.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 07:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a3:15:9f:e7:4e:b5:db:14:78:d3:79:af:a2:f5:be:11:9a:a7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Mar  5 17:47:40 2024 GMT
            Not After : Mar  4 17:52:40 2025 GMT
        Subject: CN=7679D7090D47452AE6A654154C02492CE4214135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:33:3f:49:37:04:c2:4b:44:e9:fb:28:20:
                    50:9d:41:c5:35:e9:ad:70:50:73:fc:fe:95:45:89:
                    9a:9a:0e:c9:bf:49:17:e6:11:f2:12:93:1b:14:d6:
                    4d:1e:89:0f:e6:e1:2c:cf:d0:5a:52:9e:4f:61:da:
                    af:3f:38:fe:57:9f:bd:ea:7c:40:0c:f0:37:58:5a:
                    ee:e0:3a:c0:41:73:6d:e8:06:aa:4f:7e:bd:90:59:
                    49:92:27:6b:f7:22:35:06:13:5c:9d:a6:64:e1:15:
                    5e:ef:f1:c0:24:d5:7b:15:12:07:26:e4:1f:4b:e7:
                    ab:57:46:52:11:0a:6a:e7:76:6d:ec:55:95:8e:f1:
                    89:b3:be:eb:51:71:33:93:9b:28:87:1b:eb:3e:a2:
                    05:30:87:3b:27:d9:a7:b2:89:e5:71:cd:5f:2d:69:
                    e7:10:1a:c8:0f:59:b8:0f:08:1b:1c:2a:ef:07:7c:
                    27:0c:eb:20:d6:37:44:bf:d7:b9:57:98:73:7f:67:
                    79:ca:7e:08:9d:73:ab:63:63:0a:f8:c8:90:f7:61:
                    16:a1:ab:54:69:ad:b8:2f:69:8d:38:75:5e:d4:d2:
                    50:f4:e5:5c:d5:c7:79:57:bb:ef:33:2b:47:7a:26:
                    2e:4e:ed:bd:90:ee:fa:fe:85:db:bd:45:07:2c:22:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:79:D7:09:0D:47:45:2A:E6:A6:54:15:4C:02:49:2C:E4:21:41:35
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138342e302f32342d3234203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:b1:d4:d5:04:90:7c:91:1f:48:fa:30:c5:80:0f:4e:9c:
         5d:a9:15:88:5c:5a:1d:d1:de:d9:6c:94:d0:98:a6:16:81:33:
         2d:73:9a:6b:1f:66:c9:88:74:93:0a:5d:da:86:92:e5:90:bc:
         5d:d7:b5:46:fe:df:75:a8:eb:d0:84:b4:18:47:32:7d:4f:6a:
         05:4c:59:2b:92:a2:de:0b:e8:95:31:45:d5:62:bc:31:6f:ef:
         74:d3:36:aa:60:3e:03:d4:22:32:ab:56:33:0e:bd:41:7a:31:
         de:e5:fe:e5:d5:1a:13:eb:08:43:47:5d:19:2f:40:cb:a8:46:
         f5:b3:00:8f:14:ae:47:f8:62:a0:bc:61:ba:a0:8c:25:c8:c9:
         bf:58:4a:b1:1d:fd:cb:d4:63:19:3a:61:3d:2b:97:65:11:09:
         7e:44:2e:d9:80:95:e9:ed:35:f6:81:38:fe:f3:75:14:55:f7:
         8f:a0:68:15:cf:69:fc:e3:50:b7:55:9c:15:aa:d9:ac:39:3f:
         ec:99:17:dd:dd:8f:71:52:b9:3f:91:6e:93:60:0f:a1:db:df:
         f1:ba:43:b6:e9:a7:eb:44:c7:89:12:f6:f4:7c:fe:08:e7:c8:
         7b:3e:35:e2:2c:97:e0:26:67:78:2b:dc:5e:43:5f:80:e9:a5:
         91:e2:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:12:24 2024 by rpki-client on console-fra.rpki-client.org