Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138352e302f32342d3234203d3e20323731383134.roa
File:                     3136342e3136332e3138352e302f32342d3234203d3e20323731383134.roa (raw, json)
Hash identifier:          cSfbJkVfn9I2rQgm3ByRmsk+TV7ToM9ZlzCn4sZGYPo=
Subject key identifier:   83:14:05:9A:D0:E2:F2:CE:DD:60:DB:9A:80:F5:33:7F:3F:88:B0:39
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       4C7FECFABB27B249A1C8ECBF0F3689DD16E5E2E0
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138352e302f32342d3234203d3e20323731383134.roa
Signing time:             Tue 05 Mar 2024 17:52:39 +0000
ROA not before:           Tue 05 Mar 2024 17:47:39 +0000
ROA not after:            Tue 04 Mar 2025 17:52:39 +0000
asID:                     271814
IP address blocks:        164.163.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 07:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7f:ec:fa:bb:27:b2:49:a1:c8:ec:bf:0f:36:89:dd:16:e5:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Mar  5 17:47:39 2024 GMT
            Not After : Mar  4 17:52:39 2025 GMT
        Subject: CN=8314059AD0E2F2CEDD60DB9A80F5337F3F88B039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:eb:fe:83:d5:c2:99:8f:b6:cd:60:e3:f9:
                    22:0d:61:de:b0:57:4b:0f:2b:ff:cb:de:92:e1:61:
                    9a:85:94:39:dc:4e:49:9e:38:48:25:b6:8d:65:92:
                    3e:b6:9b:d0:53:50:2f:5d:02:3b:95:6a:c9:91:12:
                    97:dd:29:ae:fd:96:09:60:15:c7:23:c7:6e:c9:5e:
                    66:59:95:0d:cc:f2:d6:d5:14:e3:38:42:40:bb:e9:
                    b8:9f:3f:0c:04:27:2d:e2:11:97:dd:f1:73:71:28:
                    29:1c:ce:12:fc:ac:14:ab:77:e5:aa:81:c6:b8:64:
                    d7:9d:77:7f:43:87:71:46:b7:61:a1:46:90:52:d5:
                    80:a0:01:e0:51:59:9d:62:78:3c:d8:df:81:3d:f5:
                    e9:68:78:d6:4c:57:82:ba:de:10:25:94:48:ae:5a:
                    d2:da:d5:71:0c:78:05:ea:eb:1c:c2:05:50:e3:bd:
                    d2:1c:27:5e:52:02:b8:77:28:88:1d:31:2a:18:3b:
                    29:f9:4a:06:79:37:50:27:be:1f:e5:90:3d:af:21:
                    68:a0:00:39:59:a0:8d:bf:83:37:45:55:b8:fd:0c:
                    fb:e3:73:9c:8e:f4:fa:13:67:2e:c9:7a:81:c5:de:
                    ae:20:60:e4:76:15:ca:39:7c:c6:5b:7f:f2:e7:70:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:14:05:9A:D0:E2:F2:CE:DD:60:DB:9A:80:F5:33:7F:3F:88:B0:39
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138352e302f32342d3234203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:e0:c1:86:28:a3:06:80:a7:b3:6d:57:95:2b:bf:73:30:
         68:26:d0:8b:76:5d:53:e8:d4:39:21:54:09:ca:58:7d:c3:6e:
         99:a7:70:a2:81:64:d4:1d:13:ca:e5:7b:e5:50:c8:40:7a:cb:
         12:ca:50:e2:26:e5:8e:af:1e:e6:f1:53:cc:fb:4c:d1:21:fe:
         f9:fb:9a:f6:4b:1a:b1:55:96:8e:25:9d:a3:e4:ff:70:3a:9f:
         36:f5:32:af:ca:71:a1:48:68:fe:24:3b:61:03:e1:53:27:65:
         84:03:b2:84:21:78:18:9c:fa:18:33:03:ac:db:55:3d:6e:e3:
         a8:e6:19:37:97:36:7d:10:08:41:e7:c4:28:63:c5:a1:07:8c:
         35:d1:79:7c:c2:43:8f:f4:de:22:3a:04:91:77:ea:58:19:80:
         7f:1c:bd:86:c4:5f:87:a8:77:38:4d:4d:bd:4d:32:94:fb:83:
         6a:3a:92:ba:dc:e5:37:39:38:a0:56:9d:dc:76:d9:e0:03:57:
         49:15:6c:4e:5d:c5:37:9d:b1:53:0c:81:95:05:63:0b:79:2d:
         76:b4:21:6e:61:09:5a:a3:0a:5d:3e:aa:ed:22:6b:4a:e0:cd:
         d6:8a:91:d7:8e:5a:22:90:6a:69:11:3b:a0:ac:f9:27:99:05:
         fd:5a:43:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:45:33 2024 by rpki-client on console-ams.rpki-client.org