Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3131312e302f32342d3234203d3e20323635363736.roa
File:                     3136382e3139352e3131312e302f32342d3234203d3e20323635363736.roa (raw, json)
Hash identifier:          Ls33/UF/nWPvxXkTetEyfF1LG/ANGq3Io4VJjrX3Jho=
Subject key identifier:   10:6D:20:32:8F:A3:EC:63:4D:6C:5B:69:19:B4:75:C9:DE:21:3F:07
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       67263A38D3E189FF9F076AB35F0C905A0F00B2D5
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3131312e302f32342d3234203d3e20323635363736.roa
Signing time:             Fri 01 Nov 2024 13:30:00 +0000
ROA not before:           Fri 01 Nov 2024 13:25:00 +0000
ROA not after:            Fri 31 Oct 2025 13:30:00 +0000
asID:                     265676
IP address blocks:        168.195.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:26:3a:38:d3:e1:89:ff:9f:07:6a:b3:5f:0c:90:5a:0f:00:b2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Nov  1 13:25:00 2024 GMT
            Not After : Oct 31 13:30:00 2025 GMT
        Subject: CN=106D20328FA3EC634D6C5B6919B475C9DE213F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:ff:06:81:02:64:c3:65:9a:b3:54:29:60:
                    da:7b:92:6c:72:1a:5c:09:93:b5:6b:08:58:5d:a5:
                    a6:87:ac:b6:0a:f5:5f:d9:89:db:e4:40:11:73:d1:
                    f6:65:fd:2c:e0:73:c1:07:ed:a5:40:b9:17:79:a8:
                    cd:00:13:c5:02:a5:21:bc:ee:35:8d:a8:39:5f:4c:
                    67:fe:ba:d6:92:93:c8:1a:ee:08:30:c3:fc:b5:dc:
                    26:20:af:58:e0:2b:b9:b1:33:97:95:15:b3:49:47:
                    4e:34:21:66:6e:66:99:00:31:bf:f8:d9:30:42:05:
                    1b:df:44:6d:9a:57:8d:c2:42:89:0c:06:00:49:0f:
                    2f:b6:fe:0b:ce:86:ad:71:87:b6:aa:54:8a:cb:14:
                    cb:c2:b7:bc:e1:73:49:c7:a5:95:2a:0d:7c:97:a7:
                    04:c3:c1:d7:f4:2d:83:33:a0:91:de:4f:f9:8b:10:
                    24:e5:02:91:c7:97:bc:ed:66:82:1f:1e:c3:4d:30:
                    cc:6a:15:19:93:c4:03:3a:cc:8e:ee:6d:cd:00:b0:
                    13:47:dd:0f:4e:fa:c1:f2:09:67:ee:df:2b:8f:75:
                    5f:6c:f1:47:ce:cb:33:ed:20:5a:9b:68:5c:52:c1:
                    4d:81:51:81:77:eb:06:2a:1e:ce:2a:99:42:4e:42:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6D:20:32:8F:A3:EC:63:4D:6C:5B:69:19:B4:75:C9:DE:21:3F:07
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3131312e302f32342d3234203d3e20323635363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:39:e8:40:d3:ea:59:74:18:38:df:85:b5:18:e1:13:33:ee:
         10:27:d2:07:82:22:45:14:21:dc:63:d4:46:0a:0c:b7:a4:a4:
         8a:4b:5c:c5:bb:fe:6b:cc:d2:ad:cc:b0:43:3a:f0:87:ed:ea:
         57:d5:38:ff:cb:44:fc:26:99:4c:f2:47:b9:dc:c4:6d:20:30:
         57:e4:8c:6d:3d:91:bf:dc:f4:0e:02:21:f9:1c:5b:f0:c8:00:
         6f:8e:88:93:19:e6:ae:38:c0:59:24:90:ed:ab:38:9b:4d:ae:
         22:5d:78:db:e7:c8:15:da:94:06:5a:db:2a:aa:b7:d1:b7:95:
         87:99:2e:d2:b9:eb:fe:7c:a6:8b:dd:14:a4:78:e1:f7:07:c8:
         e5:f7:45:65:d1:35:1d:2e:5a:f4:bd:97:20:ea:a2:10:54:ed:
         9e:cf:a1:c6:fa:1a:4d:06:57:6c:c4:24:a1:f5:33:1b:99:35:
         64:28:75:ee:cd:33:85:a8:4f:20:be:a3:bd:df:39:91:a6:97:
         ae:24:56:7d:9f:4c:a1:5a:04:cd:2b:7b:5e:a7:50:55:48:69:
         51:49:9c:3b:b1:0a:bb:0f:83:44:5c:28:0b:10:54:c8:8a:f9:
         88:ce:d0:e0:ac:ba:5f:a1:4b:53:2f:2e:60:16:ec:ba:f7:03:
         39:5e:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org