Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32332d3234203d3e20323730303537.roa
File:                     3136382e3139352e3130382e302f32332d3234203d3e20323730303537.roa (raw, json)
Hash identifier:          gykT4QRozgYsNZj40rUrW2Sxu4NaAYHlGUZ/SkzJqdU=
Subject key identifier:   82:55:9E:A2:82:57:1B:80:A1:89:DC:D8:AE:E5:76:73:58:97:F4:28
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       67ABDC9F50F1AD60A28DD7F38CF86DC09DCE9170
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32332d3234203d3e20323730303537.roa
Signing time:             Tue 05 Mar 2024 17:58:14 +0000
ROA not before:           Tue 05 Mar 2024 17:53:14 +0000
ROA not after:            Tue 04 Mar 2025 17:58:14 +0000
asID:                     270057
IP address blocks:        168.195.108.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ab:dc:9f:50:f1:ad:60:a2:8d:d7:f3:8c:f8:6d:c0:9d:ce:91:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:14 2024 GMT
            Not After : Mar  4 17:58:14 2025 GMT
        Subject: CN=82559EA282571B80A189DCD8AEE576735897F428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:43:ad:79:b1:d8:af:c7:c1:c2:51:4a:f3:
                    74:e9:85:e9:3e:b2:ad:6f:0d:41:1b:8a:4b:b9:91:
                    6b:44:7c:14:fc:3c:c4:39:51:6f:1e:aa:b2:9d:91:
                    39:4b:f9:e0:5d:eb:59:00:0d:01:d0:ac:af:fa:41:
                    09:cd:90:68:8c:79:de:e2:ea:f8:2e:82:da:b8:8c:
                    8f:4f:7a:fa:ae:a0:6e:ab:d0:12:96:63:4d:7c:aa:
                    49:4c:6a:1c:2c:b8:20:7d:0f:59:c2:29:ea:20:85:
                    31:1c:62:5b:75:a7:03:33:73:fb:12:79:ef:70:c4:
                    b0:19:21:7c:48:11:7a:a8:d5:4e:01:cd:fc:8a:27:
                    e8:56:c8:23:49:f2:a1:77:7c:39:d0:32:76:84:c1:
                    1c:1a:de:8a:01:40:15:ad:a0:50:19:45:85:73:b0:
                    17:20:34:da:3a:3c:1f:8f:75:d7:19:cd:18:02:44:
                    55:36:40:12:48:91:18:a2:55:4e:f5:70:65:5c:47:
                    a8:f6:db:0b:b0:24:20:84:05:6d:ff:6f:2e:b0:ef:
                    eb:ce:35:21:08:bb:8a:0a:a7:79:ba:3f:ab:38:d3:
                    e2:ac:96:e1:b7:02:57:9b:76:58:41:13:47:35:14:
                    3f:f6:ff:b7:f5:17:a5:f4:31:62:bf:1d:c0:ac:dd:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:55:9E:A2:82:57:1B:80:A1:89:DC:D8:AE:E5:76:73:58:97:F4:28
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32332d3234203d3e20323730303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:9e:3e:cf:9b:37:95:3d:e0:66:68:e4:3a:2f:a7:d6:7c:
         60:96:15:8f:aa:f7:da:63:17:27:13:2a:84:f9:59:b6:11:2c:
         4c:49:89:bd:f5:46:cb:85:fc:26:bd:08:4e:19:03:29:3a:ab:
         90:de:a3:0a:9a:54:e6:62:38:d2:e7:cf:7d:93:7e:bd:d4:07:
         d3:ed:bb:a3:2a:86:69:1d:1f:b6:71:af:83:78:26:b3:c1:1e:
         3a:27:d1:98:08:fa:15:82:18:e9:20:61:d8:60:94:b8:de:a8:
         95:e5:fd:20:1b:e9:37:52:fe:a9:bf:86:1f:f7:ec:8b:a8:01:
         7f:46:ff:39:ec:76:6d:2f:8b:85:69:71:00:f4:bf:94:c7:e2:
         84:18:55:cb:96:48:df:3b:83:9d:60:8c:90:c8:c6:24:a7:3a:
         4b:4e:b1:1c:7e:ec:28:a2:28:e9:06:6c:55:26:0c:ea:20:08:
         a8:54:d7:c0:15:8a:b7:b6:17:93:bc:3d:c6:ce:5c:c2:9f:dc:
         c1:09:db:a3:5b:14:c2:9b:ab:45:88:70:c8:ea:ea:8a:b3:34:
         91:f0:c0:ed:4f:f5:9a:51:68:73:c3:05:ed:5e:e2:22:14:5e:
         fe:cb:09:1f:3c:8f:f2:fd:ae:4b:9a:93:61:fb:9a:41:c8:f9:
         ca:18:88:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org