Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3234203d3e203238313134.roa
File:                     3136382e3139352e3130382e302f32322d3234203d3e203238313134.roa (raw, json)
Hash identifier:          PIfSyEDkV7Ao8F0ae0mNM5IWn0tNBfoMGt8ubaGXepE=
Subject key identifier:   96:FB:2A:4B:B1:56:7C:F7:C4:2C:D5:47:27:2A:81:F8:B4:4F:A2:4B
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       69366F1A7AC34A5A8AA137B553E41F730F9B60AA
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3234203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:11 +0000
ROA not before:           Tue 05 Mar 2024 17:53:11 +0000
ROA not after:            Tue 04 Mar 2025 17:58:11 +0000
asID:                     28114
IP address blocks:        168.195.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:36:6f:1a:7a:c3:4a:5a:8a:a1:37:b5:53:e4:1f:73:0f:9b:60:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:11 2024 GMT
            Not After : Mar  4 17:58:11 2025 GMT
        Subject: CN=96FB2A4BB1567CF7C42CD547272A81F8B44FA24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:63:4a:57:52:99:7d:44:14:8b:fc:1d:00:
                    54:54:18:64:84:63:52:cf:c3:30:19:96:7c:22:64:
                    87:d8:e7:6f:9f:cb:13:0e:aa:fc:68:2f:88:39:34:
                    1e:36:87:dc:c5:2a:18:74:60:dd:ba:77:46:f6:f4:
                    c8:e0:6e:13:53:bf:cf:5c:41:e2:c6:1d:3d:4b:e7:
                    34:ae:97:a2:44:e5:db:4e:76:e3:5a:14:f6:74:ba:
                    27:36:61:d5:f6:64:d9:e5:56:b8:ac:9e:c4:af:61:
                    ec:12:97:be:4d:dd:81:0d:f5:38:8f:2d:2c:bd:d7:
                    34:ca:67:87:84:20:ad:f3:94:75:7c:52:14:8e:14:
                    aa:77:75:49:5e:e2:de:2b:0d:8e:22:ff:38:8c:00:
                    f6:85:8d:2b:45:41:f4:8e:0e:c2:13:cc:84:0b:11:
                    ed:fb:0c:58:65:e5:ce:f3:06:3f:ae:a7:65:1a:39:
                    48:94:e0:53:fb:23:e6:7d:b4:dd:25:8d:52:cd:67:
                    af:72:08:43:52:57:47:1a:70:b4:4d:65:c0:d6:ab:
                    75:78:ba:cd:ff:8a:83:55:3a:18:70:cb:a9:9a:08:
                    d3:60:53:85:65:50:0d:32:03:87:3b:44:fc:f9:b7:
                    64:6b:ad:f1:48:85:59:bc:88:fc:49:bc:60:2c:67:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FB:2A:4B:B1:56:7C:F7:C4:2C:D5:47:27:2A:81:F8:B4:4F:A2:4B
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:3a:d8:ad:e4:7c:f0:e4:a4:09:50:1c:8a:57:3f:cf:9a:da:
         93:73:0d:10:fa:70:52:57:d3:9c:94:28:77:e6:41:12:2b:13:
         ce:a1:ad:4c:cd:4f:ab:13:de:f4:75:33:45:c2:e7:70:91:c0:
         d6:5b:04:23:1a:7c:21:91:5c:15:b7:b1:c6:d4:11:b2:f6:6d:
         1b:3c:3a:aa:db:50:00:08:c5:fa:7f:4b:75:d9:0e:83:06:fe:
         3b:cd:4c:ed:81:c8:1b:4a:e5:55:8e:ab:7a:9e:07:ad:e0:8d:
         44:6b:95:6e:fe:d9:17:61:18:0f:d6:4c:71:dc:49:6a:8a:45:
         c4:65:55:38:de:ad:02:4e:ae:77:bd:16:78:e1:f5:42:83:f1:
         35:75:45:fa:78:1a:21:61:04:51:c6:78:43:a5:6b:79:60:8f:
         6c:d4:c2:ab:81:cc:45:46:e3:24:fa:42:84:27:d4:4a:f6:7b:
         36:96:47:e0:70:17:c7:b1:4e:c2:ce:ad:5d:00:d8:a6:db:5e:
         0e:33:82:53:51:2c:2c:74:7b:ae:7a:1c:98:19:79:2c:61:e5:
         f6:ad:ca:b4:91:32:d6:a4:a8:47:22:33:15:99:5c:8f:77:1b:
         d3:4e:61:4c:44:21:52:1a:44:cf:a1:00:3f:14:54:d8:ed:7f:
         e2:74:c6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:19:23 2024 by rpki-client on console-ams.rpki-client.org